I reran Malwarebytes (the 3rd run) as instructed. It reported "The scan completed successfully. No malicious items were detected." I have a copy of the happy details which I can post here if you still want to see them. I rescanned with Spybot and this time it gave me the bright green all-okay check mark and made no mention of virtumonde.sci. I retried the TrendMicro Housecall and it made its way through all the C and D files and I think through the grayware/spyware category when it came to a halt and the dreaded box appeared saying "An error occurred while trying to transfer data from the Internet. Do you want Trend Micro Housecall to try resendingÂ". I did retry several times but the box reappeared repeatedly. At the time, the progress tab on the left showed the program was "updating security check information". Trying to learn what I could, I clicked on the results tab and it showed ADWARE_MEMWATCHER (98 infections) but the program and computer were frozen there and I could only close the browser. I did have AdAware installed on my computer but uninstalled it in July 2008. I uninstalled using the Add/Remove feature, I uninstalled because of a thread in this forum related to compatibility issues between Spybot and AdAware. Anyway, I digress, but IÂm relating these events in the order they appeared. I came back to this forum to report and saw additional instructions about disabling TeaTimer, etc. In trying to find out how to do so, I was in Spybot and clicked on the recovery tab. There I found a backup for virtumonde.sci. The system wouldnÂt allow copy and paste of what it was saving in backup so I copied it manually (and hopefully without error). Browser helper object HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\(AAAE832A-5FFF-4661-9C8F-369692D1DCB9) The above was listed 4 times for 1/4/09 9:57:00 AM 1/30/09 10:33:44 PM 1/31/09 5:07:20 PM 1/31/09 7:14:07 PM The following was also listed once: Class ID HKEY_CLASSES_ROOT\CLSID\(AAAE832A-5FFF-4661-9C8F-369692D1DCB9) 1/4/09 9:57:01 AM Should I still run the ATF Cleaner? Thanks so much for your help - June

RegSeeker or RegCleaner both by Hover Desk will get rid of the last of that gummy bear for you. RegSeeker found bits and pieces of Spy Sweeper almost a year after I had thought I rid myself from all of it. Below is the download link from Major Geeks "Looking for a date since 2002!" marf Here is a link that might be useful: RegSeeker

Hi zep516, How did you know beanwabr was infected with Palladium Pro? I could not find out any info about this from beanwabr. You said my link leaded to a possible infected web site? I can tell you that this site (teesupport.com) is safe. I know this because this site keeps posting blogs (http://blog.teesupport.com/) for virus removal and legit applications uninstall instructions each day. Teesupport starts its blogs for over one year and some of blogs are even listed on the top search on Google. I do not think Google will allow sites that will damage your computer to exist for such a long time. I have also tested this site using online anti-virus scanners from various security vendors and all test show that it is a safe site. What is more, as far as I know, TeeSupport is an online company to provide remote tech support and they receive payment via PayPal or Safe Cart. Will a virus maker dare to receive payment via PayPal or Safe Cart? Talking about spam..There is a very interesting thing. See two latest posts from two different sites here: http://www.bleepingcomputer.com/virus-removal/remove-master-utilities http://www.citruscomputers.com/2011/09/01/remove-master-utilities-uninstall-guide/ "Your computer should now be free of the Master Utilities program. If your current anti-virus solution let this infection through, you may want to consider purchasing the PRO version of Malwarebytes' Anti-Malware to protect against these types of threats in the future." -- This is the bleeping computer site that you won't doubt. I know bleeping computer site very well and I like it so much as you guys and I just want to list an example here to support my opinion. So far, I don't think there is any pure site without promoting anything. My principal is to choose info that I need and ignore the unwanted info on the internet. If a site does not force you to buy anything in an illegal way like rogue software and it can provide you some useful info, then that is not a bad site. By the way, I admit that sometimes I will buy things from the internet because of those sites' promotion but I don't think it is bad because they provide useful things to me and I think they deserve my payment for hard work of making such useful things. Enjoy the internet! Regards, Alan_hoicns

I've had a few friends have their FB page hacked in recent months. Another friend told me about an additional security step that alerts you if your FB page is accessed from an unauthorized computer. You can also monitor activity. I'm not very knowledgeable about IT stuff so I asked my oldest son, whiz bang CS college student (works IT desk, too) about it and he said it was a good move. To set this up, open "Account Settings" (under Account, top right), click on "Account Security". That will reveal "Log In Notifications." Select "On." (Default setting is "Off.") You'll be asked to name the devices you use to access your FB account. If someone tries to access your account from an unauthorized device, FB sends you an email, which lets you shut it down. It's a bit like shutting the barn door after the horse is out but at least you know right away, which is better than finding out after FB friends let you know that they received a virus or scam from you but not really you. Which is how my friends learned their FB page was hacked. That's like shutting the barn door after the barn has burned down. I'm generally cautious as I move about the 'net (that's one reason why I was so reluctant to get on FB but then my HS classmates decided to plan a reunion via FB and I promised to help plan so dang it, there I am). But I also know that I can get complacent so thanks for the reminders to be watchful, everyone. cabinfo, I use Firefox, too. I'd like to know more about cookie notices. Thanks!