Ok, even though my AVG did it's auto-update earlier, I pulled up AVG and clicked update again. Now I've been surfing all over GW for about 15 minutes and no more messages. So, doing that seems to have resolved the problem again, for me. In my email from the tech two evenings ago, he also said this: this detection was suppressed through the "in-the-cloud" detection verification mechanism. This is enabled by default, but a few AVG users may have disabled it or be using old versions of the product that do not include this feature. These users will have to wait until the next detection update ships, but most users should have seen the detection stop a few hours back." So, it sounds like how quickly the corrected update solves the problem for each AVG user may depend on how some of us have our AVG set up, or which version we're using. You folks know more about how this works than I do, I'm sure! I'm dog paddling as fast as I can. ;-)

some of the most common sites have fallen prey to hackers using poor code or outdated scripts on a site to put into the site a malicious link, I am talking very reputable sites and the site owners have no idea it happened till they start getting feed back telling them it is happening then they find the culprit. So never assume the site is safe just best to say well I hope it is safe but will always use caution and keep my programs updated and run those scans regularly. Do not be scared when you see something like this happen it is exactly what you want your program to do, I much prefer a false positive over the alternative! But anytime you have a question copy down the info that is provided so you can come here well informed so we can try to find out what the situation was. The name is essential because these days the rogue programs that are out there are very close in looks and names to the real programs so please do take the time to look at it closely and write down the exact name. Just to give you an idea take a look at this blog and the number of rogue infections that mimic the look and names of real security programs. Every day new ones pop up. Malwares, Rogues, Scarewares

Oh RavenCajun, I'm trying to stay calm but hubby is going to freak if I have to tell him I got Trojans on a practically new computer. *taking deep breaths* You're right (again! lol)....some of these programs seem to automatically download things I didn't want. In the Remove programs area I found things that I knew could be included with other items I downloaded but I never wanted them, but there they were! Examples: Open Office, Google Toolbar, Yahoo Toolbar, Webshots something-or-other, etc. I promise to be much more careful in the future by making sure to inspect for something that is checked as if I want it, but don't. Even though I "Remove Selected" on everything, this info below shows "no action taken". This is the log that Popped Up Automatically when I clicked "Remove Selected": Malwarebytes' Anti-Malware 1.30 Database version: 1328 Windows 6.0.6001 Service Pack 1 10/27/2008 12:15:08 PM mbam-log-2008-10-27 (12-14-53).txt Scan type: Quick Scan Objects scanned: 43155 Time elapsed: 4 minute(s), 47 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 4 Registry Values Infected: 6 Registry Data Items Infected: 14 Folders Infected: 1 Files Infected: 9 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\(030a0f33-5b99-482e-83f5-2eeb8457878b) (Trojan.BHO) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\(9034a523-d068-4be8-a284-9df278be776e) (Trojan.Zlob) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\(144a6b24-0ebc-4d89-bf09-a06a718e57b5) (Trojan.Zlob) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\(daed9266-8c28-4c1c-8b58-5c66eff1d302) (Search.Hijack) -> No action taken. Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\(144a6b24-0ebc-4d89-bf09-a06a718e57b5) (Trojan.Zlob) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com (Trojan.Zlob) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wblogon (Trojan.Zlob) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\start (Trojan.Zlob) -> No action taken. Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURL (Hijack.Search) -> Bad: (http://windiwsfsearch.com) Good: (http://www.google.com/) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchURL (Hijack.Search) -> Bad: (http://windiwsfsearch.com) Good: (http://www.google.com/) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL (Hijack.Search) -> Bad: (http://windiwsfsearch.com) Good: (http://www.google.com/) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL (Hijack.Search) -> Bad: (http://windiwsfsearch.com) Good: (http://www.google.com/) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page (Hijack.Search) -> Bad: (http://windiwsfsearch.com) Good: (http://www.google.com/) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page (Hijack.Search) -> Bad: (http://windiwsfsearch.com) Good: (http://www.google.com/) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar (Hijack.Search) -> Bad: (http://windiwsfsearch.com/ie6.html) Good: (http://www.google.com/) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar (Hijack.Search) -> Bad: (http://windiwsfsearch.com/ie6.html) Good: (http://www.google.com/) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\SearchMigratedDefaultURL (Hijack.Search) -> Bad: (http://windiwsfsearch.com/search?q=(searchTerms)) Good: (http://www.google.com/) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\SearchMigratedDefaultURL (Hijack.Search) -> Bad: (http://windiwsfsearch.com/search?q=(searchTerms)) Good: (http://www.google.com/) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant (Hijack.Search) -> Bad: (http://windiwsfsearch.com) Good: (http://www.google.com/) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant (Hijack.Search) -> Bad: (http://windiwsfsearch.com) Good: (http://www.google.com/) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchUrl\w\ (Hijack.Search) -> Bad: (http://windiwsfsearch.com/search?q=%s) Good: (http://www.google.com/) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchUrl\w\ (Hijack.Search) -> Bad: (http://windiwsfsearch.com/search?q=%s) Good: (http://www.google.com/) -> No action taken. Folders Infected: C:\Windows\System32\675873 (Trojan.BHO) -> No action taken. Files Infected: C:\Users\Lady\My Documents\My Music\My Music.url (Trojan.Zlob) -> No action taken. C:\Users\Lady\My Documents\My Pictures\My Pictures.url (Trojan.Zlob) -> No action taken. C:\Users\Lady\My Documents\My Videos\My Video.url (Trojan.Zlob) -> No action taken. C:\Users\Lady\My Documents\My Documents.url (Trojan.Zlob) -> No action taken. C:\ProgramData\Microsoft\Windows\Start Menu\Antivirus Scan.url (Trojan.Zlob) -> No action taken. C:\ProgramData\Microsoft\Windows\Start Menu\Online Spyware Test.url (Trojan.Zlob) -> No action taken. C:\Users\Public\Desktop\Antivirus Scan.url (Rogue.Link) -> No action taken. C:\Users\Public\Desktop\Online Spyware Test.url (Rogue.Link) -> No action taken. C:\Users\Lady\Favorites\Antivirus Scan.url (Rogue.Link) -> No action taken. Also, before reading your post I hand-copied some things that showed up in my Free AVG when it automatically scanned in the wee hours of this morning. Trojan Fake Alfert - IEBT " Media-Codec " Media-Codec/V4 " SmitFraudVariant/IE Anti-Spyware " Unclassified/ALGG " Unclassified-Packed/Suspicious " Downloader ZLOB_r.DE " " " " DO " " " " DF " Generic7.BDKJ Adware Media-Codec/ZLOB And even though I thought the bad stuff was gone and I've started with a fresh reboot, when I am in IE7, it freezes and I get one of two messages: APPCRASH or APPHANGB1 Of course I went to WebShots and sure 'nuff, there was the big box with the message "This page will not function properly without enabling Java". gggrrrrr!

You do realize that PDF files have to be downloaded for you to view them? Your firewall and/or anti-virus, if kept up to date, should catch any malicious executable embedded, and trap it. Just because a script is embedded in as file doesn't mean it is malicious.