180 Solutions and 2nd Thought

Download the trial version of Spy Sweeper from Here

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)

• If you are taken to the internet page, just close the page.
• You will be prompted to check for updated definitions, please do so.
  (This may take several minutes)
• Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.
• Click on Sweep and allow it to fully scan your system.If you are prompted to restart the computer, do so immediately. This is a necessary step to kill the infection!
• When the sweep has finished, click Remove. Click Select All and then Next
• From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.

Empty Recycle Bin

Reboot and "copy/paste" a new HJT log as well as the Results from Spy Sweeper file into this thread.
Also please describe how your computer behaves at the moment.

Launch Notepad, and copy/paste all the code items below to it
Save in: Desktop
File Name: fixme.reg
Save as Type: All files
Click: Save

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults]
@=""
"http"=dword:00000003
"https"=dword:00000003
"ftp"=dword:00000003
"file"=dword:00000003
"@ivt"=dword:00000001
"shell"=dword:00000000

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults]
@=""
"http"=dword:00000003
"https"=dword:00000003
"ftp"=dword:00000003
"file"=dword:00000003
"@ivt"=dword:00000001
"shell"=dword:00000000

Back on the Desktop, double-click on the fixme.reg file you just saved and click on Yes when asked to merge the information.

REboot and post a new HJT log.

Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - Default URLSearchHook is missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain =
O17 - HKLM\Software\..\Telephony: DomainName =
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain =
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain =

Close ALL windows and browsers except HijackThis and click "Fix checked"





You need to update SunJava.
Updating Java:
Download the latest version of Java Runtime Environment (JRE) 6.

• Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".

• Click the "Download" button to the right.

• Check the box that says: "Accept License Agreement".

• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.

• Close any programs you may have running - especially your web browser.

• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.

• Check any item with Java Runtime Environment (JRE or J2SE) in the name. It should have the [external image: Posted Image] icon next to it.

• Click the Remove or Change/Remove button.

• Repeat as many times as necessary to remove each Java versions.

• Reboot your computer once all Java components are removed.

• Then from your desktop double-click on 6-windowsi586-p.exe to install the newest version.

Once installed you can test to see that it is in fact installed
Sun Java Test
http://www.java.com/en/download/installed.jsp



Reboot and "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.

You can remove any programs I had you install

Log looks good


You need to create a new Clean restore point.

Note: This will remove all previous Restore Points

Turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn it back on.

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.



If you dont have any programs like these, I would recommend that you get them.
Spywareblaster,
Spywareguard.


Also get a FREE FIREWALL and FREE ANTI VIRUS if you need one.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.

Do not use Ad-aware if you have McAfee's VirusScan and AntiSpyware


Safe Surfing.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein

I don't know if I am missing something or what but the latest scan by AdsGone shows even more entries. It had been two to four and is now up to twelve. Here is a copy of the log. I am running SpyBlaster and SpyGuard with ZoneAlarm Pro as well as AVG7 Anti-Virus and the AdsGone Spyware and Pop-Up blocker AND Spybot. I don't understand why AdsGone continues to find these entries when none of the other programs do. What is this entry for persistenthandler? Again, These show mostly as 180Solutions entries. Chuck "SOFTWARE\Microsoft\DownloadManager, Found , 1/15/2007 6:08:24 PM" "aspfile\persistenthandler, Found , 1/15/2007 6:08:26 PM" "software\microsoft\mediaplayer\control\playbar, Found , 1/15/2007 6:08:27 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/15/2007 6:08:29 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/15/2007 6:08:29 PM" "software\vb and vba program settings, Found , 1/15/2007 6:08:29 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/15/2007 6:08:30 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/15/2007 6:08:30 PM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.com, Found , 1/15/2007 6:08:31 PM" "software\microsoft\internet explorer\menuext\&download with &dap, Found , 1/15/2007 6:08:32 PM" "software\classes\anigifctrl.anigif\insertable, Found , 1/15/2007 6:08:32 PM" "software\classes\clsid\{5bfa1daf-5edc-11d2-959e-00c00c02da5e}, Found , 1/15/2007 6:08:32 PM" "software\classes\clsid\{61ab12e1-a5ff-11d1-b2e9-444553540000}, Found , 1/15/2007 6:08:32 PM" "software\classes\clsid\{6dc82d15-92f2-11d1-a255-00a0c932c7df}, Found , 1/15/2007 6:08:32 PM" "software\classes\clsid\{8110aea1-ad5b-4b90-883f-04a9a33b106e}, Found , 1/15/2007 6:08:32 PM" "software\classes\clsid\{82351441-9094-11d1-a24b-00a0c932c7df}, Found , 1/15/2007 6:08:32 PM" "software\classes\clsid\{9738b9e6-8afa-11d2-959e-444553540002}, Found , 1/15/2007 6:08:32 PM" "software\classes\interface\{5252ac41-94bb-11d1-b2e7-444553540000}, Found , 1/15/2007 6:08:32 PM" "software\classes\interface\{5bfa1dae-5edc-11d2-959e-00c00c02da5e}, Found , 1/15/2007 6:08:32 PM" "software\classes\interface\{82351440-9094-11d1-a24b-00a0c932c7df}, Found , 1/15/2007 6:08:32 PM" "software\classes\interface\{f32c7705-1dad-4b09-b60a-40f1d9b3dbc9}, Found , 1/15/2007 6:08:32 PM" "software\classes\typelib\{5bfa1da1-5edc-11d2-959e-00c00c02da5e}, Found , 1/15/2007 6:08:32 PM" "software\classes\typelib\{5fe38345-35a8-11d3-bd27-000021c9a4d9}, Found , 1/15/2007 6:08:32 PM" "software\classes\typelib\{82351433-9094-11d1-a24b-00a0c932c7df}, Found , 1/15/2007 6:08:32 PM" "software\speedbit, Found , 1/15/2007 6:08:32 PM" "software\speedbit, Found , 1/15/2007 6:08:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.com, Found , 1/15/2007 6:08:44 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\flingstone.com, Found , 1/15/2007 6:08:44 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchbarcash.com, Found , 1/15/2007 6:08:44 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.com, Found , 1/15/2007 6:08:44 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.com, Found , 1/15/2007 6:08:44 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.com, Found , 1/15/2007 6:08:44 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.net, Found , 1/15/2007 6:08:44 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.com, Found , 1/15/2007 6:08:44 PM" "software\microsoft\windows\currentversion\moduleusage\, Found , 1/15/2007 6:08:48 PM" "software\microsoft\windows\currentversion\shareddlls\, Found , 1/15/2007 6:08:48 PM" "SOFTWARE\Microsoft\DownloadManager, Found , 1/15/2007 7:49:56 PM" "aspfile\persistenthandler, Found , 1/15/2007 7:49:59 PM" "software\microsoft\mediaplayer\control\playbar, Found , 1/15/2007 7:50:01 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/15/2007 7:50:05 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/15/2007 7:50:05 PM" "software\vb and vba program settings, Found , 1/15/2007 7:50:05 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/15/2007 7:50:08 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/15/2007 7:50:08 PM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.com, Found , 1/15/2007 7:50:09 PM" "software\microsoft\internet explorer\menuext\&download with &dap, Found , 1/15/2007 7:50:11 PM" "software\classes\anigifctrl.anigif\insertable, Found , 1/15/2007 7:50:11 PM" "software\classes\clsid\{5bfa1daf-5edc-11d2-959e-00c00c02da5e}, Found , 1/15/2007 7:50:11 PM" "software\classes\clsid\{61ab12e1-a5ff-11d1-b2e9-444553540000}, Found , 1/15/2007 7:50:11 PM" "software\classes\clsid\{6dc82d15-92f2-11d1-a255-00a0c932c7df}, Found , 1/15/2007 7:50:11 PM" "software\classes\clsid\{8110aea1-ad5b-4b90-883f-04a9a33b106e}, Found , 1/15/2007 7:50:11 PM" "software\classes\clsid\{82351441-9094-11d1-a24b-00a0c932c7df}, Found , 1/15/2007 7:50:11 PM" "software\classes\clsid\{9738b9e6-8afa-11d2-959e-444553540002}, Found , 1/15/2007 7:50:11 PM" "software\classes\interface\{5252ac41-94bb-11d1-b2e7-444553540000}, Found , 1/15/2007 7:50:11 PM" "software\classes\interface\{5bfa1dae-5edc-11d2-959e-00c00c02da5e}, Found , 1/15/2007 7:50:11 PM" "software\classes\interface\{82351440-9094-11d1-a24b-00a0c932c7df}, Found , 1/15/2007 7:50:11 PM" "software\classes\interface\{f32c7705-1dad-4b09-b60a-40f1d9b3dbc9}, Found , 1/15/2007 7:50:11 PM" "software\classes\typelib\{5bfa1da1-5edc-11d2-959e-00c00c02da5e}, Found , 1/15/2007 7:50:11 PM" "software\classes\typelib\{5fe38345-35a8-11d3-bd27-000021c9a4d9}, Found , 1/15/2007 7:50:11 PM" "software\classes\typelib\{82351433-9094-11d1-a24b-00a0c932c7df}, Found , 1/15/2007 7:50:11 PM" "software\speedbit, Found , 1/15/2007 7:50:11 PM" "software\speedbit, Found , 1/15/2007 7:50:11 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.com, Found , 1/15/2007 7:50:23 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\flingstone.com, Found , 1/15/2007 7:50:23 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchbarcash.com, Found , 1/15/2007 7:50:23 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.com, Found , 1/15/2007 7:50:23 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.com, Found , 1/15/2007 7:50:23 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.com, Found , 1/15/2007 7:50:23 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.net, Found , 1/15/2007 7:50:23 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.com, Found , 1/15/2007 7:50:23 PM" "software\microsoft\windows\currentversion\moduleusage\, Found , 1/15/2007 7:50:27 PM" "software\microsoft\windows\currentversion\shareddlls\, Found , 1/15/2007 7:50:27 PM" "SOFTWARE\Microsoft\DownloadManager, Found , 1/15/2007 8:03:02 PM" "aspfile\persistenthandler, Found , 1/15/2007 8:03:05 PM" "software\microsoft\mediaplayer\control\playbar, Found , 1/15/2007 8:03:06 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/15/2007 8:03:09 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/15/2007 8:03:09 PM" "software\vb and vba program settings, Found , 1/15/2007 8:03:09 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/15/2007 8:03:11 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/15/2007 8:03:11 PM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.com, Found , 1/15/2007 8:03:13 PM" "software\microsoft\internet explorer\menuext\&download with &dap, Found , 1/15/2007 8:03:14 PM" "software\classes\anigifctrl.anigif\insertable, Found , 1/15/2007 8:03:14 PM" "software\classes\clsid\{5bfa1daf-5edc-11d2-959e-00c00c02da5e}, Found , 1/15/2007 8:03:14 PM" "software\classes\clsid\{61ab12e1-a5ff-11d1-b2e9-444553540000}, Found , 1/15/2007 8:03:14 PM" "software\classes\clsid\{6dc82d15-92f2-11d1-a255-00a0c932c7df}, Found , 1/15/2007 8:03:14 PM" "software\classes\clsid\{8110aea1-ad5b-4b90-883f-04a9a33b106e}, Found , 1/15/2007 8:03:14 PM" "software\classes\clsid\{82351441-9094-11d1-a24b-00a0c932c7df}, Found , 1/15/2007 8:03:14 PM" "software\classes\clsid\{9738b9e6-8afa-11d2-959e-444553540002}, Found , 1/15/2007 8:03:14 PM" "software\classes\interface\{5252ac41-94bb-11d1-b2e7-444553540000}, Found , 1/15/2007 8:03:14 PM" "software\classes\interface\{5bfa1dae-5edc-11d2-959e-00c00c02da5e}, Found , 1/15/2007 8:03:14 PM" "software\classes\interface\{82351440-9094-11d1-a24b-00a0c932c7df}, Found , 1/15/2007 8:03:14 PM" "software\classes\interface\{f32c7705-1dad-4b09-b60a-40f1d9b3dbc9}, Found , 1/15/2007 8:03:14 PM" "software\classes\typelib\{5bfa1da1-5edc-11d2-959e-00c00c02da5e}, Found , 1/15/2007 8:03:14 PM" "software\classes\typelib\{5fe38345-35a8-11d3-bd27-000021c9a4d9}, Found , 1/15/2007 8:03:14 PM" "software\classes\typelib\{82351433-9094-11d1-a24b-00a0c932c7df}, Found , 1/15/2007 8:03:14 PM" "software\speedbit, Found , 1/15/2007 8:03:14 PM" "software\speedbit, Found , 1/15/2007 8:03:14 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.com, Found , 1/15/2007 8:03:27 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\flingstone.com, Found , 1/15/2007 8:03:27 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchbarcash.com, Found , 1/15/2007 8:03:27 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.com, Found , 1/15/2007 8:03:27 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.com, Found , 1/15/2007 8:03:27 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.com, Found , 1/15/2007 8:03:27 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.net, Found , 1/15/2007 8:03:27 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.com, Found , 1/15/2007 8:03:27 PM" "software\microsoft\windows\currentversion\moduleusage\, Found , 1/15/2007 8:03:31 PM" "software\microsoft\windows\currentversion\shareddlls\, Found , 1/15/2007 8:03:31 PM" "SOFTWARE\Microsoft\DownloadManage, Remove, 1/15/2007 8:03:40 PM" "aspfile\persistenthandle, Remove, 1/15/2007 8:03:40 PM" "software\microsoft\mediaplayer\control\playba, Remove, 1/15/2007 8:03:40 PM" "software\microsoft\internet explorer\urlsearchhook, Remove, 1/15/2007 8:03:40 PM" "software\microsoft\internet explorer\urlsearchhook, Remove, 1/15/2007 8:03:40 PM" "software\vb and vba program setting, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/15/2007 8:03:40 PM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.co, Remove, 1/15/2007 8:03:40 PM" "software\microsoft\internet explorer\menuext\&download with &da, Remove, 1/15/2007 8:03:40 PM" "software\classes\anigifctrl.anigif\insertabl, Remove, 1/15/2007 8:03:40 PM" "software\classes\clsid\{5bfa1daf-5edc-11d2-959e-00c00c02da5e, Remove, 1/15/2007 8:03:40 PM" "software\classes\clsid\{61ab12e1-a5ff-11d1-b2e9-444553540000, Remove, 1/15/2007 8:03:40 PM" "software\classes\clsid\{6dc82d15-92f2-11d1-a255-00a0c932c7df, Remove, 1/15/2007 8:03:40 PM" "software\classes\clsid\{8110aea1-ad5b-4b90-883f-04a9a33b106e, Remove, 1/15/2007 8:03:40 PM" "software\classes\clsid\{82351441-9094-11d1-a24b-00a0c932c7df, Remove, 1/15/2007 8:03:40 PM" "software\classes\clsid\{9738b9e6-8afa-11d2-959e-444553540002, Remove, 1/15/2007 8:03:40 PM" "software\classes\interface\{5252ac41-94bb-11d1-b2e7-444553540000, Remove, 1/15/2007 8:03:40 PM" "software\classes\interface\{5bfa1dae-5edc-11d2-959e-00c00c02da5e, Remove, 1/15/2007 8:03:40 PM" "software\classes\interface\{82351440-9094-11d1-a24b-00a0c932c7df, Remove, 1/15/2007 8:03:40 PM" "software\classes\interface\{f32c7705-1dad-4b09-b60a-40f1d9b3dbc9, Remove, 1/15/2007 8:03:40 PM" "software\classes\typelib\{5bfa1da1-5edc-11d2-959e-00c00c02da5e, Remove, 1/15/2007 8:03:40 PM" "software\classes\typelib\{5fe38345-35a8-11d3-bd27-000021c9a4d9, Remove, 1/15/2007 8:03:40 PM" "software\classes\typelib\{82351433-9094-11d1-a24b-00a0c932c7df, Remove, 1/15/2007 8:03:40 PM" "software\speedbi, Remove, 1/15/2007 8:03:40 PM" "software\speedbi, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.co, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\flingstone.co, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchbarcash.co, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.co, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.co, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.co, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.ne, Remove, 1/15/2007 8:03:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.co, Remove, 1/15/2007 8:03:40 PM" "software\microsoft\windows\currentversion\moduleusage, Remove, 1/15/2007 8:03:40 PM" "software\microsoft\windows\currentversion\shareddlls, Remove, 1/15/2007 8:03:40 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/15/2007 8:05:02 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/15/2007 8:05:02 PM" "software\speedbit, Found , 1/15/2007 8:05:03 PM" "software\microsoft\internet explorer\urlsearchhook, Remove, 1/15/2007 8:05:26 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/15/2007 8:05:26 PM" "software\speedbi, Remove, 1/15/2007 8:05:26 PM" "software\vb and vba program settings, Found , 1/15/2007 8:06:35 PM" "software\vb and vba program setting, Remove, 1/15/2007 8:07:04 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine15-01-2007-20-03-40.asr, Removed from Quarantined, 1/15/2007 8:11:23 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine15-01-2007-20-05-26.asr, Removed from Quarantined, 1/15/2007 8:11:28 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine15-01-2007-20-07-04.asr, Removed from Quarantined, 1/15/2007 8:11:32 PM" "software\vb and vba program settings, Found , 1/16/2007 12:46:51 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/16/2007 12:46:54 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/16/2007 12:46:54 PM" "software\vb and vba program setting, Remove, 1/16/2007 12:48:18 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/16/2007 12:48:18 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/16/2007 12:48:18 PM" "aspfile\persistenthandler, Found , 1/16/2007 6:31:05 PM" "software\vb and vba program settings, Found , 1/16/2007 6:31:11 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/16/2007 6:31:14 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/16/2007 6:31:14 PM" "aspfile\persistenthandle, Remove, 1/16/2007 7:13:57 PM" "software\vb and vba program setting, Remove, 1/16/2007 7:13:58 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/16/2007 7:13:58 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/16/2007 7:13:58 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/16/2007 7:16:03 PM" "software\microsoft\windows\currentversion\shareddlls\, Found , 1/16/2007 7:16:18 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/16/2007 7:30:09 PM" "software\microsoft\windows\currentversion\shareddlls, Remove, 1/16/2007 7:30:09 PM" "aspfile\persistenthandler, Found , 1/17/2007 7:14:38 PM" "software\vb and vba program settings, Found , 1/17/2007 7:14:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/17/2007 7:14:41 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/17/2007 7:14:41 PM" "software\microsoft\windows\currentversion\shareddlls\, Found , 1/17/2007 7:14:55 PM" "aspfile\persistenthandle, Remove, 1/17/2007 7:40:53 PM" "software\vb and vba program setting, Remove, 1/17/2007 7:40:53 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/17/2007 7:40:53 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/17/2007 7:40:53 PM" "software\microsoft\windows\currentversion\shareddlls, Remove, 1/17/2007 7:40:53 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine16-01-2007-12-48-18.asr, Removed from Quarantined, 1/17/2007 8:22:42 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine17-01-2007-19-40-53.asr, Removed from Quarantined, 1/17/2007 8:22:49 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine16-01-2007-19-30-09.asr, Removed from Quarantined, 1/17/2007 8:22:53 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine16-01-2007-19-13-58.asr, Removed from Quarantined, 1/17/2007 8:22:57 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/17/2007 8:24:49 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/17/2007 8:24:49 PM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.com, Found , 1/17/2007 8:24:50 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.com, Found , 1/17/2007 8:25:03 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.com, Found , 1/17/2007 8:25:03 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.com, Found , 1/17/2007 8:25:03 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.com, Found , 1/17/2007 8:25:03 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.net, Found , 1/17/2007 8:25:03 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.com, Found , 1/17/2007 8:25:03 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/17/2007 8:33:22 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/17/2007 8:33:22 PM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.co, Remove, 1/17/2007 8:33:22 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.co, Remove, 1/17/2007 8:33:22 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.co, Remove, 1/17/2007 8:33:22 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.co, Remove, 1/17/2007 8:33:22 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.co, Remove, 1/17/2007 8:33:22 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.ne, Remove, 1/17/2007 8:33:22 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.co, Remove, 1/17/2007 8:33:22 PM" "software\vb and vba program settings, Found , 1/17/2007 8:34:44 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/17/2007 8:34:45 PM" "software\vb and vba program setting, Remove, 1/17/2007 8:35:10 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/17/2007 8:35:10 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/18/2007 8:51:28 PM" "software\vb and vba program settings, Found , 1/18/2007 8:51:28 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/18/2007 8:51:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/18/2007 8:51:32 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine17-01-2007-20-35-10.asr, Removed from Quarantined, 1/18/2007 9:05:24 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine17-01-2007-20-33-22.asr, Removed from Quarantined, 1/18/2007 9:05:30 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/18/2007 9:13:32 PM" "software\vb and vba program settings, Found , 1/18/2007 9:13:33 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/18/2007 9:13:35 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/18/2007 9:13:35 PM" "software\microsoft\internet explorer\urlsearchhook, Remove, 1/18/2007 9:20:17 PM" "software\vb and vba program setting, Remove, 1/18/2007 9:20:17 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/18/2007 9:20:17 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/18/2007 9:20:17 PM" "software\vb and vba program settings, Found , 1/18/2007 10:53:40 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/18/2007 10:53:45 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/18/2007 10:53:45 PM" "software\vb and vba program setting, Remove, 1/18/2007 10:54:21 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/18/2007 10:54:21 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/18/2007 10:54:21 PM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/19/2007 4:47:35 PM" "software\vb and vba program settings, Found , 1/19/2007 4:47:35 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/19/2007 4:47:38 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/19/2007 4:47:38 PM" "software\microsoft\internet explorer\urlsearchhook, Remove, 1/19/2007 4:48:09 PM" "software\vb and vba program setting, Remove, 1/19/2007 4:48:09 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/19/2007 4:48:10 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/19/2007 4:48:10 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/19/2007 5:15:31 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/19/2007 5:15:31 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/19/2007 5:16:05 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/19/2007 5:16:05 PM" "software\vb and vba program settings, Found , 1/19/2007 5:17:15 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/19/2007 5:17:16 PM" "software\vb and vba program setting, Remove, 1/19/2007 5:17:39 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/19/2007 5:17:39 PM" "software\vb and vba program settings, Found , 1/19/2007 10:20:01 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/19/2007 10:20:04 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/19/2007 10:20:04 PM" "software\microsoft\windows\currentversion\shareddlls\, Found , 1/19/2007 10:20:23 PM" "software\vb and vba program setting, Remove, 1/19/2007 10:21:42 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/19/2007 10:21:42 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/19/2007 10:21:42 PM" "software\microsoft\windows\currentversion\shareddlls, Remove, 1/19/2007 10:21:42 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine18-01-2007-21-20-17.asr, Removed from Quarantined, 1/19/2007 10:21:58 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine19-01-2007-22-21-43.asr, Removed from Quarantined, 1/19/2007 10:22:05 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine19-01-2007-17-17-39.asr, Removed from Quarantined, 1/19/2007 10:22:09 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine19-01-2007-17-16-05.asr, Removed from Quarantined, 1/19/2007 10:22:12 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine19-01-2007-16-48-10.asr, Removed from Quarantined, 1/19/2007 10:22:20 PM" "C:\Program Files\AdsGone\Quarantine\Quarantine18-01-2007-22-54-21.asr, Removed from Quarantined, 1/19/2007 10:22:24 PM" "software\vb and vba program settings, Found , 1/20/2007 11:47:42 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/20/2007 11:47:45 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/20/2007 11:47:45 AM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.com, Found , 1/20/2007 11:47:47 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.com, Found , 1/20/2007 11:48:00 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.com, Found , 1/20/2007 11:48:00 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.com, Found , 1/20/2007 11:48:00 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.com, Found , 1/20/2007 11:48:00 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.net, Found , 1/20/2007 11:48:00 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.com, Found , 1/20/2007 11:48:00 AM" "software\vb and vba program setting, Remove, 1/20/2007 11:48:39 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/20/2007 11:48:39 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/20/2007 11:48:39 AM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.co, Remove, 1/20/2007 11:48:39 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.co, Remove, 1/20/2007 11:48:39 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.co, Remove, 1/20/2007 11:48:39 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.co, Remove, 1/20/2007 11:48:39 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.co, Remove, 1/20/2007 11:48:39 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.ne, Remove, 1/20/2007 11:48:39 AM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.co, Remove, 1/20/2007 11:48:39 AM" "C:\Program Files\AdsGone\Quarantine\Quarantine20-01-2007-11-48-39.asr, Removed from Quarantined, 1/20/2007 11:49:06 AM" "software\microsoft\internet explorer\urlsearchhooks, Found , 1/20/2007 12:51:21 PM" "software\vb and vba program settings, Found , 1/20/2007 12:51:22 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/20/2007 12:51:25 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings, Found , 1/20/2007 12:51:25 PM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.com, Found , 1/20/2007 12:51:27 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.com, Found , 1/20/2007 12:51:41 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.com, Found , 1/20/2007 12:51:41 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.com, Found , 1/20/2007 12:51:41 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.com, Found , 1/20/2007 12:51:41 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.net, Found , 1/20/2007 12:51:41 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.com, Found , 1/20/2007 12:51:41 PM" "software\microsoft\windows\currentversion\shareddlls\, Found , 1/20/2007 12:51:45 PM" "software\microsoft\internet explorer\urlsearchhook, Remove, 1/20/2007 12:52:32 PM" "software\vb and vba program setting, Remove, 1/20/2007 12:52:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/20/2007 12:52:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Setting, Remove, 1/20/2007 12:52:32 PM" "software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.co, Remove, 1/20/2007 12:52:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.co, Remove, 1/20/2007 12:52:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchmiracle.co, Remove, 1/20/2007 12:52:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.co, Remove, 1/20/2007 12:52:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ysbweb.co, Remove, 1/20/2007 12:52:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickspring.ne, Remove, 1/20/2007 12:52:32 PM" "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mt-download.co, Remove, 1/20/2007 12:52:32 PM" "software\microsoft\windows\currentversion\shareddlls, Remove, 1/20/2007 12:52:32 PM"

I don't know how this program works but most of those are old. It could be showing blocked items, I don't know. But then again there are Free versions of some anti-virus and anti-spyware that give false information in order to get you to purchase the Paid for versions. I suggest you try uninstalling it and reinstall it and see what happens. Be sure to use Add/Remove Programs to uninstall it.

Another problem has just cropped up. I went to the site to read "How did I get Infected" and tryed to reset my settings at Internet Options > Security > Internet, and under Custom Settings the settings are blank with only the drop down box for medium or low. Also my computer will no longer download updates at Microsoft Updates. I get an error message after it checks for latest software. Chuck

1.Click Start > Settings > Control Panel.
2.Next, open Add/Remove Programs and remove AdsGone

Reboot and lets see how it is.

I have already done that. After kept getting MSRedist trying to install each time I rebooted and then an error message saying MSI file must be loaded from set up. I ran Microsoft Installer Cleanup and that problem seems to have gone away but still empty box in custom security settings. The MSRedist stopped when I removed all references to an old Norton Anti-Virus program that showed up on the cleaner.

In the security settings try Default and see if they're listed.

Already tryed that and it is blank also.

Go to windows updates and download IE7

http://www.microsoft.com/windows/ie/downloads/default.mspx