Spyware or Paranoia?

Hi! and welcome to the Tom Coyote forums.
My name is John Brouwer - if it helps, you can call me John for short. I'll be glad to help you with your computer problems.

HijackThis logs can take some time to research, so please be patient with me. I know that you need
your computer working as quickly as possible, and I will work hard to help see that happens.
I am currently looking over your log. As I am a trainee, everything that I post to you must be checked by an Admin or Moderator. Thus, there may be a tiny bit of a delay between posts, but it shouldn't be too long. I will post back shortly with a potential fix.

Please be patient and I'd be grateful if you would note the following:

• I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
• The fixes are specific to your problem and should only be used for this issue on this machine.
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
• It's often worth reading through these instructions and printing them for ease of reference.
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
• Please reply to this thread. Do not start a new topic.
• Finally, please make a uninstall list using HijackThis
  To access the Uninstall Manager you would do the following:
  
  1. Start HijackThis
  2. Click on the Config button
  3. Click on the Misc Tools button
  4. Click on the Open Uninstall Manager button.
  
  You will now be presented with a screen similar to the one below:
  
  [external image: Posted Image]
  
  5. Click on the Save list… button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here in a reply.

Greets, John.

Hi,

Please try the following to reset your homepage.

• Open Firefox
• Go to Tools
• Go to Options
• Under the Main tab where it says When Firefox Starts select Show a blank page from the Dropdown menu
• Click OK
• Close Firefox
• Open Firefox
• Go to Tools
• Go to Options
• Set the homepage to the website you want
• Click OK

Does this work?

Greets, John.

Thank you, John The blank page startup persists with Firefox after doing what you suggested. Here is the list: 4D VIEW Ad-Aware SE Personal Adobe Flash Player 9 ActiveX Adobe Photoshop 7.0 Adobe Reader 7.0.8 ArcSoft Software Suite Atheros Client Utility Atheros Wireless LAN MiniPCI card Driver ATI - Software Uninstall Utility ATI Control Panel ATI Display Driver Bluetooth Stack for Windows CD/DVD Drive Acoustic Silencer Documents To Go DVD-RAM Driver Easy CD Creator 5 Platinum FaxLauncher Pro GdiplusUpgrade GdPicture ToolKit Google Earth High Definition Audio Driver Package - KB888111 HijackThis 1.99.1 Hotfix for Windows XP (KB893357) Hotfix for Windows XP (KB894871) Hotfix for Windows XP (KB895200) HP Extended Capabilities 4.7 HP Image Zone 4.7 HP PSC & OfficeJet 4.7 HP Software Update InterVideo WinDVD for TOSHIBA J2SE Runtime Environment 5.0 Update 4 Logitech Desktop Messenger Logitech Print Service Logitech QuickCam Software Logitech® Camera Driver Macromedia Flash Player 8 McAfee VirusScan MetaFrame Presentation Server Web Client for Win32 Metamail (Toshiba Registration Utility) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft Bootvis Microsoft Office Professional Edition 2003 Microsoft Works mIRC Mozilla Firefox (1.5.0.9) Mozilla Thunderbird (1.5.0.9) Office 2003 Trial Assistant Palm Quicken 2005 QuickTime RealPlayer REALTEK Gigabit and Fast Ethernet NIC Driver Realtek High Definition Audio Driver Roxio UDF Reader Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893066) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896422) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB896688) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899589) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Sonic DLA Sonic RecordNow! Sprint PCS Connection Manager Spybot - Search & Destroy 1.4 Synaptics Pointing Device Driver TOSHIBA Assist TOSHIBA ConfigFree TOSHIBA Controls TOSHIBA Hotkey Utility TOSHIBA PC Diagnostic Tool TOSHIBA Power Saver TOSHIBA Software Modem TOSHIBA Software Upgrades TOSHIBA Speech System Applications TOSHIBA Speech System SR Engine(U.S.) Version1.0 TOSHIBA Speech System TTS Engine(U.S.) Version1.0 TOSHIBA TouchPad ON/Off Utility TOSHIBA Utilities TOSHIBA Virtual Sound TOSHIBA Zooming Utility Touch and Launch Update for Windows XP (KB894391) Viewpoint Media Player Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows Media Player 10 Windows XP Hotfix - KB873333 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB884018 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB885855 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB889673 Windows XP Hotfix - KB890175 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 Windows XP Hotfix - KB893056 Yahoo! Messenger Thanks

Hi,

Hmm, lets try another option because we saw the 'blank page' button had an effect.

• Open Firefox
• Go to the page you want to be your new homepage
• Go to Tools
• Go to Options
• Under the Main tab click the Use Current Pages button
• Click OK
• Close Firefox
• Open Firefox

Does this work?

Greets, John.

It doesn't work the first time I fire up Firefox. It DOES work if I open the program again. Incidentally, I ran a Panda online scan … Incident Status Location Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.statcounter.com/] Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.doubleclick.net/] Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.fastclick.net/] Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.zedo.com/] Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.atdmt.com/] Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.tribalfusion.com/] Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.azjmp.com/] Spyware:Cookie/DomainSponsor Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[landing.domainsponsor.com/] Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.revenue.net/] Spyware:Cookie/DomainSponsor Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[landing.domainsponsor.com/] Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.burstnet.com/] Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[.2o7.net/] Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Mozilla\Firefox\Profiles\4tpzgosp.default\cookies.txt[searchportal.information.com/] Virus:W32/Bagle.pwdzip Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[Dorithie.zip] Virus:W32/Bagle.pwdzip Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0001226.~][Dorithie.zip] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0002007.~] Virus:Trj/Banker.CZI Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[ID 0220712.zip][ID 0220712.exe] Virus:Trj/Nabload.GX Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[DD269901.zip][DD269901.exe] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0006857.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0007235.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0007307.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0007629.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0007742.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0008200.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0009605.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0009938.~] Virus:W32/Spamta.HV.worm Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[message.zip][message.msg.exe] Virus:Trj/SpamtaLoad.N Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[doc.zip][doc.txt.scr] Virus:Trj/SpamtaLoad.O Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[document.zip][document.log.cmd] Virus:Trj/SpamtaLoad.O Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[Update-KB8908-x86.exe] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0012353.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0012424.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0013054.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0014393.~] Virus:W32/Spamta.NO.worm Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[Update-KB4562-x86.zip][Update-KB4562-x86.exe] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0016903.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0016903.~][~0000003.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018301.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018610.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018631.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018632.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018632.~][~0000001.~] Virus:W32/Klez.I Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018632.~][other.bat] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018633.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018633.~][~0000001.~] Virus:W32/Klez.I Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018633.~][Tour.scr] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0018775.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Inbox[~0019321.~] Virus:Trj/Nabload.GX Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[DD269901.zip][DD269901.exe] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0001630.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0001857.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0001869.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0002051.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0002069.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0002981.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0002984.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0003639.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0003878.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0004136.~] Virus:W32/Spamta.NO.worm Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[Update-KB4562-x86.zip][Update-KB4562-x86.exe] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0005608.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0005682.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0005682.~][~0000001.~] Virus:W32/Klez.I Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0005682.~][Tour.scr] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0005683.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0005683.~][~0000001.~] Virus:W32/Klez.I Disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0005683.~][other.bat] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0005685.~] Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Arthur Fougner MD\Application Data\Thunderbird\Profiles\noxcqfah.default\Mail\Local Folders\Trash[~0005712.~] Potentially unwanted tool:Application/MotherboardMonitor.A Not disinfected C:\Documents and Settings\Arthur Fougner MD\Desktop\Desktop Files\sysreset253.exe[addons\moo.dll] Potentially unwanted tool:Application/MotherboardMonitor.A Not disinfected C:\sysreset\addons\moo.dll Most of what it found was in either trashed or unopened email … Interestingly, the scan seemed to muck up Thunderbird in the process so all my saved email was unreadable. You may wish to pass that warning on to others. Thanks

Hi,

Can you please remove unused emails from your Inbox part in Thunderbird and delete everything in the Trash folder.

I didn't really understand if you're still encountering the problem. Every first time open Firefox after a reboot it doesn't work and the second time and after that it works?

Your system is clean so as this is a computer troubleshooting issue, not a malware issue, I suggest you use the following link to go to the CastleCops General Computer Problems forum for help from a CastleCops SRT…

http://www.castlecops.com/f120-General_Com…r_Problems.html

I recommend that you register before posting your problem. Registered members can receive notification when there has been a reply to their topic. There is no way for CCSP to notify "guests" when they have received a reply.

This list will help you stay clean. Especially because you aren't using Anti Virus software and a Firewall which is very insecure!

• Use an Anti Virus Software - It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See this link for a listing of some on line & their stand-alone anti virus programs:
  Computer Safety On line - Anti-Virus
  I recommend AVG Anti-Virus (Free Edition)!
  
• Update your Anti Virus Software - It is imperitive that you update your Anti virus software at least once a week (Even more if you wish). If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.
  
• Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. For an article on Firewalls and a listing of some available ones see the link below:
  Computer Safety On line - Software Firewalls
  I recommend ZoneAlarm (Free Edition)!
  
• Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
  
• Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option.
  This will provide real-time spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an anti virus software. A tutorial on installing & using this product can be found here:
  Instructions for - Spybot S & D and Ad-aware
  
• Install Ad-Aware - Install and download Ad-Aware. You should also scan your computer with the program on a regular basis just as you would an anti virus software in conjunction with Spybot. A tutorial on installing & using this product can be found here:
  Instructions for - Spybot S & D and Ad-aware
  
• Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs. A article on anti-malware products with links for this program and others can be found here:
  Computer Safety on line - Anti-Malware
  
• Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.

Greets, John.