Internet searches redirected

[FF604]

I am having issues with internet searches being redirected to random sites when the link created by any search engine is clicked on. I have also had to use CCleaner to clean my temp internet files or I have ended up at a site that tries to start Antivurus 2009. I also istalled Mozilla Firefox thinking it was a browser problem, it did not work. Also, when I ran defogger I was not prompted to reboot so I have included that log. I have a hijakthis Log if needed. Any help would be greatly appreciated.

Logs Included: MBAM, Defogger, DDS, and attach.zip.

Malwarebytes' Anti-Malware 1.42

Database version: 3305

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

12/6/2009 7:24:31 PM

mbam-log-2009-12-06 (19-24-31).txt

Scan type: Full Scan (A:\|C:\|D:\|E:\|)

Objects scanned: 244903

Time elapsed: 1 hour(s), 57 minute(s), 16 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

defogger_disable by jpshortstuff (28.11.09.2)

Log created at 21:09 on 06/12/2009 (Seidel Kid's)

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.

Checking for services/drivers...

-=E.O.F=-

DDS (Ver_09-12-01.01) - NTFSx86

Run by Seidel Kid's at 21:12:15.73 on Sun 12/06/2009

Internet Explorer: 8.0.6001.18702

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1317 [GMT -7:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}

FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

C:\Program Files\SoftwareTime\ComputerTime\bin\ctmn32.exe

svchost.exe

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\Program Files\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe

C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe

C:\WINDOWS\system32\CTsvcCDA.EXE

C:\Program Files\SoftwareTime\ComputerTime\bin\fbserver.exe

C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Kontiki\KService.exe

C:\Program Files\SoftwareTime\ComputerTime\bin\stka32.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe

c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe

c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe

C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe

C:\Program Files\McAfee\MPF\MPFSrv.exe

C:\Program Files\CyberLink\Shared Files\RichVideo.exe

C:\Program Files\Dell Support Center\bin\sprtsvc.exe

C:\WINDOWS\explorer.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\MsPMSPSv.exe

c:\PROGRA~1\mcafee.com\agent\mcagent.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\system32\Rundll32.exe

C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\Analog Devices\Core\smax4pnp.exe

C:\Program Files\lg_fwupdate\fwupdate.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\U.S.R.TurboGWLAN\USRWLANG.exe

C:\Program Files\Windows Desktop Search\WindowsSearch.exe

C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

C:\Program Files\Microsoft Office\Office10\WINWORD.EXE

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\Documents and Settings\Seidel Kid's\Desktop\dds.scr

============== Pseudo HJT Report ===============

uSearch Page = hxxp://www.google.com

uSearch Bar = hxxp://search.myidentitydefender.com/smallsearch.html

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uInternet Connection Wizard,ShellNext = iexplore

mWinlogon: Shell=c:\program files\softwaretime\computertime\bin\ctmn32.exe

BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll

BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll

BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\program files\yahoo!\common\yiesrvc.dll

BHO: EWPBrowseObject Class: {68f9551e-0411-48e4-9aaf-4bc42a6a46be} - c:\program files\canon\easy-webprint\EWPBrowseLoader.dll

BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll

BHO: MyIdentityDefender: {a26503fe-b3b8-4910-a9dc-9cbd25c6b8d6} - c:\documents and settings\seidel kid's\local settings\application data\cyberdefender\cdmyidd.dll

BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.4.4525.1752\swg.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: Easy-WebPrint: {327c2873-e90d-4c37-aa9d-10ac9baba46c} - c:\program files\canon\easy-webprint\Toolband.dll

TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll

TB: MyIdentityDefender: {a26503fe-b3b8-4910-a9dc-9cbd25c6b8d6} - c:\documents and settings\seidel kid's\local settings\application data\cyberdefender\cdmyidd.dll

TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File

TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File

TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File

TB: {5CBE2611-C31B-401F-89BC-4CBB25E853D7} - No File

EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [sUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe

uRunOnce: [shockwave Updater] c:\windows\system32\adobe\shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB5; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.underdog.be/games/racer/racer.dcr"

mRun: [updReg] c:\windows\UpdReg.EXE

mRun: [PrintServer Diagnostic] c:\program files\print server\ptp\PSDiagnostic.exe

mRun: [P17Helper] Rundll32 P17.dll,P17Helper

mRun: [intelMeM] c:\program files\intel\modem event monitor\IntelMEM.exe

mRun: [igfxtray] c:\windows\system32\igfxtray.exe

mRun: [igfxpers] c:\windows\system32\igfxpers.exe

mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe

mRun: [soundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe

mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey

mRun: [LGODDFU] "c:\program files\lg_fwupdate\fwupdate.exe" blrun

mRun: [dellsupportcenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P dellsupportcenter

mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime

mRun: [sunJavaUpdateSched] c:\program files\java\jre6\bin\jusched.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\usrobo~1.lnk - c:\u.s.r.turbogwlan\USRWLANG.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\window~1.lnk - c:\program files\windows desktop search\WindowsSearch.exe

IE: {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\npjpi160_17.dll

IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\program files\yahoo!\common\yiesrvc.dll

IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll

Trusted Zone: internet

Trusted Zone: mcafee.com

DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab

DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} - hxxp://support.dell.com/systemprofiler/SysPro.CAB

DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204

DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {2873FCBD-7894-4814-8502-8EF052C643D5} - hxxp://online3.typingmaster.com/tmonline3/itutor/TMIntra.cab

DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll

DPF: {32305793-C19A-48E7-AD2F-D87FF7B264A4} - hxxp://www.tenebril.com/scanner/TestScanner.ocx

DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {9C024426-7859-4B2D-AB4C-B1E370AE7549} - hxxp://us.mcafee.com/Apps/WSC/en-us/WscWlanScannerCtrl.cab

DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab

DPF: {C56BF45D-4722-4EFD-AA14-9DB1E92661E3} - hxxp://coke.mycokerewards.com/cabs/CocaCola_1_0_0_9.cab

DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} - hxxp://coke.mycokerewards.com/cabs/Entriq_3_6_0_15_Silent.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - hxxp://a532.g.akamai.net/f/532/6712/5m/virtools.download.akamai.com/6712/player/install3.5/installer.exe

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll

Notify: igfxcui - igfxdev.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SSODL: tosevetuw - {e481210b-c5eb-4ca0-814c-a4af6fb906f0} - No File

SSODL: melahomun - {facb00f5-1f51-4ba7-ac9f-17f2e583e3b9} - No File

SSODL: wiveruduz - {b1fb0b44-df70-448c-996f-d3cbbbe8c6ef} - No File

SSODL: mebibosar - {2c8d5389-70c2-4e7a-9fa5-e158e2b2977a} - No File

STS: {e481210b-c5eb-4ca0-814c-a4af6fb906f0} - No File

STS: {facb00f5-1f51-4ba7-ac9f-17f2e583e3b9} - No File

STS: {b1fb0b44-df70-448c-996f-d3cbbbe8c6ef} - No File

STS: {2c8d5389-70c2-4e7a-9fa5-e158e2b2977a} - No File

SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll

SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

LSA: Notification Packages = scecli lusiyuge.dll

mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"

Hosts: 91.212.127.226 osguardpro.microsoft.com

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\seidel~1\applic~1\mozilla\firefox\profiles\5quhk1xl.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/

FF - plugin: c:\progra~1\sonyon~1\npsoe.dll

FF - plugin: c:\program files\google\google updater\2.4.1536.6592\npCIDetect13.dll

FF - plugin: c:\program files\unity\webplayer\loader\npUnity3D32.dll

FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

---- FIREFOX POLICIES ----

c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2008-1-25 214664]

R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2009-11-23 9968]

R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-11-23 74480]

R2 AdobeActiveFileMonitor;Adobe Active File Monitor;c:\program files\photoshop elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-4 98304]

R2 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\softwaretime\computertime\bin\fbserver.exe [2004-10-8 1527887]

R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2008-1-25 359952]

R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2008-1-25 144704]

R2 Symantec Core LC;Symantec Core LC;c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe [2006-5-13 1247600]

R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2008-1-25 606736]

R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2008-1-25 79816]

R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2008-1-25 35272]

R3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2008-1-25 34248]

R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2008-1-25 40552]

R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-11-23 7408]

S3 SQTECH9051;DB VGA Cam;c:\windows\system32\drivers\Capt9051.sys [2009-9-12 38656]

=============== Created Last 30 ================

2009-12-07 04:09:48 0 ----a-w- c:\documents and settings\seidel kid's\defogger_reenable

2009-12-01 00:05:25 0 d-----w- c:\program files\Trend Micro

2009-11-29 18:34:31 0 d-----w- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com

2009-11-29 18:34:19 0 d-----w- c:\program files\SUPERAntiSpyware

2009-11-29 18:34:19 0 d-----w- c:\docume~1\seidel~1\applic~1\SUPERAntiSpyware.com

2009-11-29 18:32:52 0 d-----w- c:\program files\common files\Wise Installation Wizard

2009-11-28 18:24:51 0 d-----w- c:\program files\Spybot - Search & Destroy

2009-11-28 18:24:51 0 d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy

2009-11-07 16:55:03 0 d-----w- c:\program files\Wise Registry Cleaner 3

==================== Find3M ====================

2009-12-07 02:20:24 96512 ----a-w- c:\windows\system32\drivers\atapi.sys

2009-12-07 02:20:24 96512 ----a-w- c:\windows\system32\dllcache\atapi.sys

2009-12-03 23:14:06 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2009-12-03 23:13:56 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

2009-11-18 22:29:38 16384 ----a-w- c:\windows\system32\lgfwunis.exe

2009-10-22 09:19:04 5939712 ------w- c:\windows\system32\dllcache\mshtml.dll

2009-10-11 11:17:27 411368 ----a-w- c:\windows\system32\deploytk.dll

2009-10-08 01:11:12 62600 -c--a-w- c:\docume~1\seidel~1\applic~1\GDIPFONTCACHEV1.DAT

2009-09-11 14:18:39 136192 ----a-w- c:\windows\system32\msv1_0.dll

2009-09-11 14:18:39 136192 ------w- c:\windows\system32\dllcache\msv1_0.dll

2004-08-04 11:00:00 94784 -csh--w- c:\windows\TWAIN.DLL

2008-04-14 00:12:07 50688 -csh--w- c:\windows\twain_32.dll

2008-04-14 00:11:56 1028096 --sha-w- c:\windows\system32\mfc42.dll

2008-04-14 00:12:01 57344 --sh--w- c:\windows\system32\msvcirt.dll

2008-04-14 00:12:02 551936 --sh--w- c:\windows\system32\oleaut32.dll

2008-04-14 00:12:02 84992 --sha-w- c:\windows\system32\olepro32.dll

2008-04-14 00:12:32 11776 --sh--w- c:\windows\system32\regsvr32.exe

2004-11-08 07:27:41 16384 --sha-w- c:\windows\system32\config\systemprofile\ietldcache\index.dat

2008-08-07 23:12:29 32768 -csha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008080720080808\index.dat

============= FINISH: 21:14:26.68 ===============

Attach.zip

[sjpritch25]

Welcome to Malwarebytes!!!!

Download GMER Antirootkit Here, click on Download EXE and save to your Desktop

• Disconnect from the internet and disable all active protection so your security program drivers will not conflict with gmer's driver
  
• Double-click Gmer.exe to run the program.
  
• When the program opens, click the "Rootkit" Tab
  
• On the right-side, check all the items to be scanned, but leave "Show All" unchecked
  
• Select all drives that are connected to your system to be scanned
  
• Click the Scan button
  
• When the scan is finished, click Copy to save the scan log to the Windows clipboard
  
• Open Notepad or a similar text editor
  
• Paste the clipboard contents into a text file by clicking Edit | Paste or Ctl V
  
• Save the gmer scan log and post it in your next reply.
  
• Close Gmer
  
• Open a command prompt (Start | run |type cmd and hit Enter)
  • Type or paste the following to unload the gmer driver:
    
  • net stop gmer
    
  • Hit Enter
    
  • Exit the command prompt.
    

  [*]Re-enable all active protection.

[FF604]

From my first post:

I am having issues with internet searches being redirected to random sites when the link created by any search engine is clicked on. I have also had to use CCleaner to clean my temp internet files or I have ended up at a site that tries to start Antivurus 2009. I also istalled Mozilla Firefox thinking it was a browser problem, it did not work. Also, when I ran defogger I was not prompted to reboot so I have included that log. I have a hijakthis Log if needed. Any help would be greatly appreciated

2 days later...

Allowed the above mentioned computer access to internet to check status of my post, HUGE MISTAKE!!!!! Computer started Microsoft Windows update. Downloaded fine, but got blue screen of death during installation. Tried to start in all possible modes, safe, command prompt, last known good config, which all resulted in blue screen. Attempted PC recovery (it was a Dell from 2004) and all proceeded fine. It even stated that the recovery was successful. But when it rebooted it stopped on the "loading windows 95" prompt. Thought about seeing how far I could throw it but had 1 more idea. Dell support had expired 4 years ago but while on their site found a page stating that they will send you 1 set of recovery disks per system. Got a e-mail in 5 minutes stating that my disks are in process and I should receive them in 3 to 5 days. I will try a manually install per the Dell site and then download drivers and install them. Would like to find the (insert explicative here) that wrote the code for the virus that trashed my computer, and give them the H1N1 Flu slowly and painfully.

FYI my daughter was using the computer to search in Google for "Zelda cheats" for use on the Wii. She obviously clicked on a link and then she allowed it past my firewall by granting the program access. If staff could find this link and block it, maybe someone else will not go through the same frustrations I did.

Thank you

[FF604]

Thank You but the computer is DOA. I am going to reinstall the operating system from scratch. Please see my other post.

[AdvancedSetup]

Thank you for the follow-up. Good luck with the rebuild.

I'll close this post now so that other do not post into it.

So how did I get infected in the first place?