Thanks again. I misunderstood. I did remove everything. I thought you wanted to see that log. Do you think I should delete Spyware Guard (an earlier version), Spybot, Ad-Adaware Personal SE & SpywareBlaster? Someone installed them on my machine without asking when he worked on it. I have McAfee through AOL. I've heard it's not good to have 2 virus programs. Here's the log you want - Malwarebytes' Anti-Malware 1.33 Database version: 1665 Windows 5.1.2600 Service Pack 2 1/18/2009 12:32:01 PM mbam-log-2009-01-18 (12-32-01).txt Scan type: Full Scan (C:\:D:\:J:\:) Objects scanned: 139689 Time elapsed: 1 hour(s), 38 minute(s), 26 second(s) Memory Processes Infected: 1 Memory Modules Infected: 3 Registry Keys Infected: 5 Registry Values Infected: 3 Registry Data Items Infected: 0 Folders Infected: 4 Files Infected: 27 Memory Processes Infected: C:\Program Files\Spyware Guard 2008\spywareguard.exe (Rogue.SpywareGuard) -> Unloaded process successfully. Memory Modules Infected: C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\dpqmhychnu.dll (Trojan.FakeAlert) -> Delete on reboot. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\ieModule.dll (Trojan.FakeAlert) -> Delete on reboot. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\moduleie.dll (Trojan.FakeAlert) -> Delete on reboot. Registry Keys Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\spyware guard 2008 (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Spyware Guard 2008 (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\spyware guard (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\(55937e13-0442-41ea-a026-2604ff356d05) (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\(88796e8d-2186-47d8-978f-af18aa0965f8) (Trojan.FakeAlert) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spywareguard (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\internetconnection (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\iemodule (Trojan.FakeAlert) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Program Files\Antivirus 2009 (Rogue.Antivirus 2009) -> Delete on reboot. C:\Program Files\Spyware Guard 2008 (Rogue.SpywareGuard) -> Delete on reboot. C:\Program Files\Spyware Guard 2008\quarantine (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Start Menu\Programs\Spyware Guard 2008 (Rogue.SpywareGuard) -> Quarantined and deleted successfully. Files Infected: C:\Documents and Settings\All Users\Application Data\winlogon.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Protect\svhost.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\System Volume Information\_restore(F845E3DB-F751-4BE4-A620-64F2CA1BFB5F)\RP470\A0112617.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\System Volume Information\_restore(F845E3DB-F751-4BE4-A620-64F2CA1BFB5F)\RP470\A0112618.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\Program Files\Antivirus 2009\av2009.exe (Rogue.Antivirus 2009) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\conf.cfg (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\mbase.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\quarantine.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\queue.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\spywareguard.exe (Rogue.SpywareGuard) -> Delete on reboot. C:\Program Files\Spyware Guard 2008\uninstall.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\vbase.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Start Menu\Programs\Spyware Guard 2008\Spyware Guard 2008.lnk (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Start Menu\Programs\Spyware Guard 2008\Uninstall.lnk (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Protect\svhost2.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Protect\track.sys (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\sysexplorer.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\system32\winscenter.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\dpqmhychnu.dll (Trojan.FakeAlert) -> Delete on reboot. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\ieModule.dll (Trojan.FakeAlert) -> Delete on reboot. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\moduleie.dll (Trojan.FakeAlert) -> Delete on reboot. C:\WINDOWS\reged.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\spoolsystem.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\sys.com (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\syscert.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\vmreg.dll (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Desktop\Spyware Guard 2008.lnk (Rogue.SpywareGuard) -> Quarantined and deleted successfully.

Why you should not be using MSconfig to control startups!! http://forums.majorgeeks.com/showthread.php?t=149804 Many people frequently use MSconfig as a long term solution to control startup processes and services. You will also see many websites condoning use of MSconfig and teaching you how to use it for controlling startups. This is a very bad idea for many reasons. 1. MSconfig was designed to be used only as a temporary debugging/troubleshooting tool. It was not meant to be used for long term solutions. 2. MSconfig does not show all startups anyway. 3. If you uninstall programs while they are being disabled with MSconfig, they will not be uninstall properly and you will have to resort to manual registry editing to properly get everything removed. MSconfig will leave orphan entries if/when installed software is uninstalled while under the control of MSconfig . When/if MSconfig is turned back to normal startup, it will give errors on boot due to those orphan entries. 4. MSconfig and Services: o If you uninstall programs while you have some of the programs services being controlled with MSconfig, the programs will not be uninstall properly and you will have to resort to manual registry editing to get everything properly removed. o When you uncheck a service in msconfig, you completely disable it. If you uncheck the wrong one, you may not be able to restart your computer. o It is safer to control services by using Control Panel, Administrative Tools, Services (this runs services.msc). 5. You can lock malware items into your registry that you may not see anymore until some point in time where you switch back to Normal Startup mode and now you can cause total reinfection of your PC with the malware. You need to remove the malware not mask it. If you still don't understand why not to use MSconfig, see what Microsoft writes here: The key point is stated as such: http://support.microsoft.com/kb/310560

Slow at 2am would mean the computer is tired and needs rest... or you've had too much coffee maybe and your mind is speeding & that makes the computer seem slow. (kidding wiff ya ;) You might want to look at a program to defrag your registry called PageDefrag ... just type sysinternals into your browser, hold down the Control key and hit enter. Simple tiny program. There are other registry defrag programs for xp but a bit less effective. Do you manually defrag your hard drive occasionally ? A Fragged up hard drive slows things down, especially after a long day. Windows auto updates and virus scans seem to default to the wee hours of the morning to auto run ... that always worries me when I cant sleep. 'Whats that running my hard drive light' Those things running can make you slow down. ~~ I haven't personally messed with core selection. Really haven't read much about it but do understand how somebody at Microsoft says it works. In my mindset, I think you may be able to set programs CPU priority level probably more efficiently than trying to outsmart the way windows handles the core selection. Affinity on Xp, to change it permanently you will need a program to handle the settings. Windows will allow you to change core choice, but as soon as that program shuts down or at reboot, windows will revert to its default scheme of auto handling the cores... which from what I've read, windows does very well unless you have a program that for some reason gives you a hassle hogging both cores,,, or I guess if your computing habits are really stressing things making you think you can speed it up by slowing down a certain program, thus allowing one you want to do something 'right now' faster, yet at half speed, when that core is needed and shared elsewhere. Here is a link that might be useful: Toms Hdwe... old stuff but ,,, affinity.

luis_pr, Please follow through with Zep's and Ravens suggestions and get the help you need. This virus is advanced and has recognized MBAM as a threat to it's existence on your computer and can leave you wide open to much more severe infections that can not only render your computer useless, yet also invite other infections that can steal your personal information and also get into your acct's if you do any online banking, shopping, etc. "Search Redirect Virus". What makes this virus annoying is not the fact you are getting redirected all the time, but the fact it makes itself impossible to remove with your conventional anti virus. It does this by infecting your system in a different way to a normal virus. Normally, a virus would install software or run a process, which can harm your system but your anti virus picks up on this before the infection gets a hold. However, the Redirect Virus manages to infect a system file, allowing to cause the redirects but also evade detection. The system file in question is one used by the operating system to handle redirect requests. Such requests are made whenever you click a search result link. This is a normal process. However, once the virus has infected your system, it manipulates this process to redirect you to random advertisements and sites that are of the highest nature for more infections. bbbluz