Yeah, I guess so. My husband was in charge of all that stuff. Okay, good news bad news. Did the malware download and scanned, found 2 bad things and killed them. Bad news is IE will still not open normally. Here's the malware report: Malwarebytes' Anti-Malware 1.34 Database version: 1809 Windows 5.1.2600 Service Pack 3 2/27/2009 11:51:57 AM mbam-log-2009-02-27 (11-51-57).txt Scan type: Full Scan (C:\:) Objects scanned: 163511 Time elapsed: 1 hour(s), 11 minute(s), 47 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 1 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\(b64f4a7c-97c9-11da-8bde-f66bad1e3f3a) (Rogue.WinAntivirus) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\hosts (Trojan.Agent) -> Quarantined and deleted successfully. So, what do you suggest I do next? Download Firefox, copy my favorite sites and delete IE?

This is a VERY nasty piece of malware. You CANNOT get rid of Braviax by simply deleting both files with that name in c:\windows and c:\windows\system32, or by unmarking it in MSCFG . On the next reboot or start, they will be back, along with everything else in the payload the nasty delivered. Braviax (which actually may have different names)is just part of the pack. One of my employees carelessly clicked on a link that came up in Google when she was searching for a church! The malware unpacked its payload. It scooted past our two active antivirus programs and firewall. Then it sent up a barrage of popups. Many were phony virus alerts; a click would have launched or downloaded more bad stuff. But some alerts also were coming from AVG, McAfee, and Windows. I quickly fired up AVG, it found an infection right away, but before the scan could complete, the virus disabled AVG. AVG and McAfee won't run now, not even in Safe Mode. The nasty also shut down our cable access to the Internet, hijacking our connection -- and started sending out ITS stuff from OUR PC. What a mess. It's going to take an expert to clean it out, damaged files will need to be reinstalled, and it may be that the best solution will be FORMAT C: and reinstall XP from scratch. The fact that we don't have a dedicated removal tool from any of the big antivirus publishers yet suggests how well the bad guys did their nasty work. Send Bill Gates back to the drawing board, with a stop in the woodshed along the way. ed p.

pretty sure you have the dreaded antivirus xp infection.DO NOT click on any of the pop ups and DO NOT pay them any thing or give them credit card info. There are 3 programs you will need to run to get rid of this. It may take more but lets do this and see how it goes. Go get the free version of superantispyware install it update it run full scan then let it clean anything it finds. SUPERAntiSpyware you will need to also get the free malwarebytes and use it. Please download Malwarebytes' Anti-Malware to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform full scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. Malwarebytes' Anti-Malware and finally download and run this program Please download ATF Cleaner by Atribune from http://www.atribune.org/index.php?option=com_content&task=view&id=25&Itemid=25 . Save it to your Desktop. Run ATF Cleaner * Double-click ATF-Cleaner.exe to run the program. * Click Select All found at the bottom of the list. * Click the Empty Selected button. * Click Exit on the Main menu to close the program. * Shutdown/restart the computer. http://www.atribune.org/index.php?option=com_content&task=view&id=25&Itemid=25 here is a good article about this type of infection. http://www.theregister.co.uk/2008/08/22/anatomy_of_a_hack/print.html Please follow those directions and let us know how you are doing.

Looks like a bunch of adware & cookies let housecall remove everything it finds. sqlite_ items------- these are McAfee related files. And can be removed but will reappear as long as McAfee is installed they are harmless..