[TrongaMonga]

Well, I suppose the easiest thing to do, seeing that I formated the computer soon this week, is to reformat it again.

The problem is that I did not have the time to install any kind of anti-virus and firewall, as well as anti-spyware stuff, firefox included, before my brothers destroyed the computer.

It'd be easier that way

Any recomendation of a free good anti-virus and firewall?

--Edit--

Explorer.exe is a trojan I am sure of.

http://securityresponse.symantec.co...rc.flood.g.html Remove that key or do a virus scan because you're infected trend micro link posted earlier.

I'd remove

I can't find the key. I did exactly as it said there, but it isn't there.

I couldn't find the file they say there, either

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.oikcgkeztuqlis.uk/TAQNqb...IAvmzkj0S.j pg

That's the one I said in the first post:

On a side note, Spybot keeps asking me if I want to change a registy value that, after I made a search, I discovered to be in HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SearchBar, and would lead to this:

http://www.gyyoifuccviszpcntbuhwysa...IAvmzkj0S.h tm

Obviously some stupid spyware toolbar that can't get removed neither by spybot nor by hand... I tried deleting the registy, it comes back. I changed it to no, it comes back. Heck, I even changed it to BattleForums.com, it changes back. I don't know what to do, specially because it keeps changing every 30 seconds, and I don't want to turn the option down...

So, can't do anything about that one

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações

Uh, what's wrong with this one? Hiperligações is portuguese for Hyperlinks

VGA cool I'm pretty sure is virus too but I'm unsure.

http://securityresponse.symantec.co...llw.donk.b.html

Same as first, was unable to find anything whatsoever... And the same as the others, except the last... That one requires an Anti-Virus, which I do not possess, yet.

--2nd Edit--

After looking better, in this one,

O4 - HKCU\..\Run: [exittime] C:\DOCUME~1\JOAONA~1\APPLIC~1\CLOSEG~1\Defy meal vc.exe

I searched on Current User rather than in Local Machine, and it worked, hopefully. That one is gone, I do believe. Deleted both registry and file.