MarshalK

Please close this log as I am receiving help via another route. Thank you.

WVCheck log: Windows Validation Check Version: 1.9.12.5 Log Created On: 1720_03-05-2011 ----------------------- Windows Information ----------------------- Windows Version: Windows XP Service Pack 3 Windows Mode: Normal Systemroot Path: C:\WINDOWS WVCheck's Auto Update Check ----------------------- Auto-Update Option: Download updates and install them automatically. ----------------------- Last Success Time for Update Detection: 2011-05-03 20:39:17 Last Success Time for Update Download: 2011-04-27 02:21:26 Last Success Time for Update Installation: 2011-04-27 07:02:34 WVCheck's Registry Check

I will run the WVCheck and the GMER next - please let me know if I am over posting or if you want more info. Thank you

CKScanner: CKScanner - Additional Security Risks - These are not necessarily bad scanner sequence 3.RP.11 ----- EOF -----

Locksearch: LockSearch by jpshortstuff (05.11.09.1) Log created at 16:02 on 03/05/2011 (AP2010) Scanning C:\ C:\hiberfil.sys ------------------------- C:\pagefile.sys ------------------------- -=E.O.F=-

Rooter: Rooter.exe (v1.0.2) by Eric_71 . SeDebugPrivilege granted successfully ... . Windows XP . (5.1.2600) Service Pack 3 [32_bits] - x86 Family 15 Model 2 Stepping 5, GenuineIntel . [wscsvc] STOPPED (state:1) : Security Center -> Disabled ! [sharedAccess] RUNNING (state:4) Windows Firewall -> Enabled . Internet Explorer 8.0.6001.18702 . A:\ [Removable] C:\ [Fixed-NTFS] .. ( Total:232 Go - Free:157 Go ) F:\ [Network] .. ( Total:76 Go - Free:16 Go ) G:\ [Network] .. ( Total:76 Go - Free:16 Go ) H:\ [Network] .. ( Total:76 Go - Free:16 Go ) I:\ [Network] .. ( Total:76 Go - Free:16

Mbam Log after quick scan (I actually ran a full scan before visiting this site - here is the short version ) 5/3/2011 12:06 PM Scan type: Full scan (C:\|) Objects scanned: 573511 Time elapsed: 44 minute(s), 26 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 1 Registry Data Items Infected: 1 Folders Infected: 0 Files Infected: 3 Then I ran the quickscan as per your instructions: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 6499 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702

We are having an issue where when we search in google, yahoo, etc. the search resolves to a malicious site (blocked by Trend Micro Worry Free Standard - Version 6.3) I ran malwarebytes originally (before I found this site) and it removed a few problems - then, following your check list I ran the ERUNT, OTM and Malwarebytes again. Mbam found some more of the same and I am also in a conversation with them as the software (version 6499 will not update to 6500. It gives the following error: PROGRAM_ERROR_UPDATING (0, 0, SGRegGetPath). Here is the OTM log: All processes killed ========== FILES =