Thanks again. I misunderstood. I did remove everything. I thought you wanted to see that log. Do you think I should delete Spyware Guard (an earlier version), Spybot, Ad-Adaware Personal SE & SpywareBlaster? Someone installed them on my machine without asking when he worked on it. I have McAfee through AOL. I've heard it's not good to have 2 virus programs. Here's the log you want - Malwarebytes' Anti-Malware 1.33 Database version: 1665 Windows 5.1.2600 Service Pack 2 1/18/2009 12:32:01 PM mbam-log-2009-01-18 (12-32-01).txt Scan type: Full Scan (C:\:D:\:J:\:) Objects scanned: 139689 Time elapsed: 1 hour(s), 38 minute(s), 26 second(s) Memory Processes Infected: 1 Memory Modules Infected: 3 Registry Keys Infected: 5 Registry Values Infected: 3 Registry Data Items Infected: 0 Folders Infected: 4 Files Infected: 27 Memory Processes Infected: C:\Program Files\Spyware Guard 2008\spywareguard.exe (Rogue.SpywareGuard) -> Unloaded process successfully. Memory Modules Infected: C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\dpqmhychnu.dll (Trojan.FakeAlert) -> Delete on reboot. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\ieModule.dll (Trojan.FakeAlert) -> Delete on reboot. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\moduleie.dll (Trojan.FakeAlert) -> Delete on reboot. Registry Keys Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\spyware guard 2008 (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Spyware Guard 2008 (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\spyware guard (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\(55937e13-0442-41ea-a026-2604ff356d05) (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\(88796e8d-2186-47d8-978f-af18aa0965f8) (Trojan.FakeAlert) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spywareguard (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\internetconnection (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\iemodule (Trojan.FakeAlert) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Program Files\Antivirus 2009 (Rogue.Antivirus 2009) -> Delete on reboot. C:\Program Files\Spyware Guard 2008 (Rogue.SpywareGuard) -> Delete on reboot. C:\Program Files\Spyware Guard 2008\quarantine (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Start Menu\Programs\Spyware Guard 2008 (Rogue.SpywareGuard) -> Quarantined and deleted successfully. Files Infected: C:\Documents and Settings\All Users\Application Data\winlogon.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Protect\svhost.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\System Volume Information\_restore(F845E3DB-F751-4BE4-A620-64F2CA1BFB5F)\RP470\A0112617.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\System Volume Information\_restore(F845E3DB-F751-4BE4-A620-64F2CA1BFB5F)\RP470\A0112618.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\Program Files\Antivirus 2009\av2009.exe (Rogue.Antivirus 2009) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\conf.cfg (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\mbase.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\quarantine.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\queue.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\spywareguard.exe (Rogue.SpywareGuard) -> Delete on reboot. C:\Program Files\Spyware Guard 2008\uninstall.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\vbase.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Start Menu\Programs\Spyware Guard 2008\Spyware Guard 2008.lnk (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Start Menu\Programs\Spyware Guard 2008\Uninstall.lnk (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Protect\svhost2.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Protect\track.sys (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\sysexplorer.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\system32\winscenter.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\dpqmhychnu.dll (Trojan.FakeAlert) -> Delete on reboot. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\ieModule.dll (Trojan.FakeAlert) -> Delete on reboot. C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\moduleie.dll (Trojan.FakeAlert) -> Delete on reboot. C:\WINDOWS\reged.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\spoolsystem.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\sys.com (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\syscert.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\vmreg.dll (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Desktop\Spyware Guard 2008.lnk (Rogue.SpywareGuard) -> Quarantined and deleted successfully.

You might need to delete the contents of the folder before deleting the folder itself, one of those strange quirks of computers. If that fails start the confuser in Safe mode by tapping the F8 button on startup and do your thing. If you are at all concerned about editing your registry once the folder has gone you could use Ccleaner, it is a safe and very effective tool for removing all manner of odd files and fragments left on the computer over time. I run it with the default settings.

f you are having problems deleting ZoneAlarm or experiencing problems with True Vector software, then try this fix. This instruction set is from Zone Labs. Do, this even if you think you have removed all of ZoneAlarm, you will be suprised. Please do the following. If any of the steps below do not apply to you, or you are unable to perform the function listed, please CONTINUE to the next step. 1. Open the ZoneAlarm program, go to the OVERVIEW -> PREFERENCES tab, and make sure the Load At Startup box is Unchecked. Close the program, then right-click on the ZA icon and select Shutdown. Wait 2 minutes before going on. 2. REBOOT. 3. You should now have no ZoneAlarm processes running on your system. 4. Click Start -> Programs -> Zone Labs -> Uninstall. Be sure to say YES to the security check. WARNING - Do NOT run the ZoneAlarm Uninstall program while in Safe Mode. The program may not be able to make the proper registry changes in Safe Mode, thus generating errors after a reboot. 5. REBOOT. 6. To make sure that you can see the ZoneAlarm system files, if they are still on your computer: a. Right-click on Start, then left-click on Explore. When the Windows Explorer panel appears: - In Windows 98SE: Click View -> Options (in Windows 98, this will be called "Folder Options"). Click the "View" tab, and then click the "Show all files" radio button. - In Windows ME, XP, 2000: Click Tools -> Folder Options. Click the "View" tab, then click the "Show hidden files and folders" radio button. b. Make sure you also uncheck the box to "Hide Protected Operating System Files" if you have one. c. When searching, be sure it searches ALL hidden files and folders. d. Click OK. IMPORTANT NOTE: Making modifications to system files may disable crucial functions of your Windows operating system. We strongly suggest re-enabling the "Hide files and folders" feature once all ZoneAlarm files have been removed. See the following web page, and verify that the files and folders are removed: 7. Click on Start, then Search or Find, and select Files. Make sure that the location box is set to search your local hard drive (usually C or All Local Drives. XP users, set advanced search options to search ALL files and folders! Type the following exactly - delete any folders found: zonelabs "zone labs" "Internet logs" Type the following exactly - delete any files found in \Windows or any subfolder below it, or in your \Temp folder): vsdata.dll vsdata95.vxd vsdatant.sys vsmon.* vsmonapi.dll vsnetutils.dll vspubapi.dll zaplus.* zapro.* zlparser.dll zonealarm.exe zoneband.dll vsinit.dll vsutil.dll (please right-click, Properties -> Version to be sure it is a ZA file. Do NOT delete this file unless it is a Zone Labs file!) GLB*.* (delete any of these that you find in any of your TMP or TEMP folders) Type the following exactly - delete any files found in any folder with "Programs" in the pathname): zapro zonealarm "zonealarm pro" (including quotes) 8. Make sure your Recycle Bin is empty (right-click and select Empty). 9. REBOOT

Thank you so much, zep, for the McAfee removal information. My daughter was able to totally remove McAfee. Here is what she stated: This worked! Tell everyone at GardenWeb thanks for all the help I really appreciate it. I THINK I the other issue with the sound bits is also fixed. I'll turn it on a few times through the week to check it out. Posted by zep516 (My Page) on Sun, Sep 9, 12 at 23:59 Thanks owbist but I'd like to continue with the McAfee removal, Lets run this for McAfee removal, Download the MCPR tool from: See link below, when you click on the link a box will open on this page, click Save file, save it to your desktop, Then right click on it and choose "Run as Administrator". That should get rid of Left over McAfee files. Here is a link that might be useful: MCPR.exe Thanks to everyone else regarding removal of the sound bites issue.