I remember cleaning that out in the registry--there he had all kinds of trojans other bad stuff- - I will certainly give it a shot -- thank you for the help its much appreciated ----- Original Message ----- From: Owens, Jack K. (Mission Systems) To: computertalkshop@xxxxxxxxxxxxx Sent: Friday, November 16, 2007 5:05 PM Subject: [CTS] Re: need some help Jackie, I found this with a google search. You're infected with the ZLOB trojan that will install that virprotect rogue security stuff as part of the infection. You'll need to perform the following steps: Disable System Restore (Windows Me/XP) and re-enable it when the infection is gone to create a clean restore point. Update the virus definitions for your security suite (antivirus, firewall, antispyware, etc) from a reliable vendor. Run a full system scan and delete all the files detected. Delete any values added to the registry. Reset the Internet Explorer home page. Reset the Internet Explorer search page. For specific details on each of these steps, read http://www.symantec.com/security_respons... Good Luck ------------------------------------------------------------------------------ From: computertalkshop-bounce@xxxxxxxxxxxxx [mailto:computertalkshop-bounce@xxxxxxxxxxxxx] On Behalf Of Owens, Jack K. (Mission Systems) Sent: Friday, November 16, 2007 4:49 PM To: computertalkshop@xxxxxxxxxxxxx Subject: [CTS] Re: need some help Jackie, If it is in the tray then most likely is being started when the system starts up. You can go Start, Run, enter "msconfig" without the quotes and click OK. Go to the Startup tab. If the machine was loaded with malware then you can bet that some of the malware will be activated when you start up. If do not have internet access from the "dirty" machine and you have access to another machine, Google anything in the start up list that you don't know what it is. I would almost bet you will find items that shouldn't be there. vr Jack ------------------------------------------------------------------------------ From: computertalkshop-bounce@xxxxxxxxxxxxx [mailto:computertalkshop-bounce@xxxxxxxxxxxxx] On Behalf Of Jackie MacWhirter Sent: Friday, November 16, 2007 1:26 PM To: computertalkshop@xxxxxxxxxxxxx Subject: [CTS] need some help Hi Folks: My son's computer was full of malware, backdoor Trojan and unknown Trojan --his browser was hijacked, the only way I could even use a malware scanner was to start editing the registry-- I finally freed the browser but I was getting some lewd popups when the browser was closed nothing opened . I finally got rid of the popups -- I used spybot the clean out the rest-- the only thing that I can't get rid of is on the taskbar -- by the clock - there is an icon that is blinking that will bring me to to the page if I click on it called virprotect.com the other one was thesafetyfiles.com-- Can you please give me some help please? Thank You -- Jackie Mac PS His antivirus is Kaspersky