Thank you again raven....I ran Malwarebytes anti-malware here's what it found and removed (I hope). Am I safe? ML Malwarebytes' Anti-Malware 1.33 Database version: 1666 Windows 5.1.2600 Service Pack 3 1/19/2009 10:30:33 AM mbam-log-2009-01-19 (10-30-33).txt Scan type: Full Scan (C:\:) Objects scanned: 197451 Time elapsed: 1 hour(s), 56 minute(s), 45 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 15 Registry Values Infected: 1 Registry Data Items Infected: 0 Folders Infected: 3 Files Infected: 4 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\"e4e3e0f8-cd30-4380-8ce9-b96904bdefca> (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\"fe8a736f-4124-4d9c-b4b1-3b12381efabe> (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\"4d25f920-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\"4d25f923-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\"4d25f921-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"4d25f921-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\"4d25f921-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\"4d25f924-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\"4d25f926-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\"df780f87-ff2b-4df8-92d0-73db16a1543a> (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\"c9c5deaf-0a1f-4660-8279-9edfad6fefe1> (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\"df780f87-ff2b-4df8-92d0-73db16a1543a> (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\MSFox (Trojan.Agent) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\"4d25f926-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Program Files\MyWaySA (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWaySA\SrchAsDe (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWaySA\SrchAsDe\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. Files Infected: C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\System Volume Information\_restore"202550A8-7A33-4BCA-9586-051D24DDBF8F>\RP1338\A0323718.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\SYSTEM32\rdno5MqT.exe.a_a (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\Catherine\Local Settings\Temp\~tmpb.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Yes, but it's running on the machine here, O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe Here; O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED & here, O2 - BHO: Symantec NCO BHO - (602ADB0E-4AFF-4217-8AA1-95DAC4DFA408) - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll Check that second link out from bleeping computer in post above.

First, yes you can get a trojan by clicking on a url or link if the link has a .exe file extension. Probably since the page didn't load just means it timed out because the server was busy or not responding. This sometimes happens if the website is heavy with graphics and you have dial-up. I don't think you have much to worry about. If a trojan tried to install, your McAfee would have sent up a red flag. http://all-yours.net/ looks fine to me. I've had problems sometimes with e-cards loading because of all the flash animation, graphics and music all trying to load at the same time, which causes a time out with the browser, usually around 30 seconds. Manually not much you can do unless the name of the installed trojan is known. You can click start/run/ and type> MRT to run a scan with the Microsoft Windows Malicious Software Removal Tool.

if it is a specific program that is causing the issue and you know that then it is actually better to go to add remove and choose to remove it, then you can do some searches on the pc for any thing left with the program name and delete those items. If something goes wacky or suddenly your settings are changed then using system restore is a good thing to try and often will bring things back to normal. If you had created a restore point right before you installed something, you could also go back in time to that specific restore point if you knew that program was the culprit. I always do create a new restore point prior to any type of install it is just something I have trained my self to do, just in case LOL. Usually other wise you might have to guess as to when you should go back to.