Hi Belle, Malwarebytes is the best AM I have ever used, but there no such thing as a security app that cannot be circumvented. Have you updated Malwarebytes' definition files lately? It could be something relatively new that the older defs aren't yet aware. I have found that Malwarebytes releases new defs the moment they have anything new to add and that it often means more than one update is relesed in any given day. As for the report that was generated, is there any chance that you still have that scan window open? If you do, you always have the option of taking a screen shot. To do that, just press your PRT SCR key to copy the image to your clip board. Then, open up Paint and go to Edit > Paste. The image will instantly appear in the main window. Then, go to File > Save As, give the file a name, select JPEG from the drop down box, direct it to someplace on your hard drive that will be easy to find and click the Save button. We can then discuss methods for making the image available for the rest of us to see. Port 80 is the one used by your browser and port 25 is used for email. If you had both a browser and an email app opened during the scan, that would account for these two showing up. I'll research the trojan name and see what I can learn about it. Peace, Gman http://www.thevenusproject.com/index.php "The only dumb questions are the ones we fail to ask" ----- Original Message ----- From: "lavalier" <lavalier@xxxxxxxxxxxxx> To: <pctechtalk@xxxxxxxxxxxxx> Sent: Tuesday, May 19, 2009 6:03 AM Subject: -=PCTechTalk=- Re: New Symptom > Gman, > I ran the Onecare scanner. It came up with a "severe" one called > Trojan:JS/Noclose.R. It also noted that I have 2 ports open: 25 and 80. > There was also a list of adware. I tried to copy/paste the results into > a document, but was not able to. I'm surprised that Malwarebytes didn't > pick up on it. I did some reading about getting rid of the Trojan to > possibly find out how to get rid of it, but all I could find were items > for sale to get rid of it and I don't know which are good or phonys. :-( > Belle --------------------------------------------------------------- Please remember to trim your replies (including this sentence and everything below it) and adjust the subject line as necessary. To subscribe, unsubscribe or modify your email settings: //www.freelists.org/webpage/pctechtalk OR To subscribe to the mailing list, send an email to pctechtalk-request@xxxxxxxxxxxxx with "subscribe" in the Subject. To unsubscribe send email to pctechtalk-request@xxxxxxxxxxxxx with "unsubscribe" in the Subject. To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ To contact only the PCTT Mod Squad, write to: pctechtalk-moderators@xxxxxxxxxxxxx To join our separate PCTableTalk off-topic group, send a blank email to: pctabletalk+subscribe@xxxxxxxxxxxxxxxx ---------------------------------------------------------------