Microsoft Security Essentials claimed that it can remove these items (which I tried), but a google search makes me doubt that this actually works. I think the same items keep re-appearing on subsequent scans. I first ran an MSE scan after getting the following spam when I open new tabs. It may have started appearing after I inserted an old thumb drive. MSE has turned up the following items and tried to remove them: Now I am following the instructions and running MBAM and GMER. ***** MBAM found and removed one item. Log: Malwarebytes' Anti-Malware 188.8.131.520 www.malwarebytes.org Database version: 8221 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 11/22/2011 10:40:09 PM mbam-log-2011-11-22 (22-40-09).txt Scan type: Quick scan Objects scanned: 187659 Time elapsed: 3 minute(s), 18 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 1 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WNtxAA0ucS2bD3n8234A (Trojan.FakeAlert.CLGen) -> Value: WNtxAA0ucS2bD3n8234A -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) **** GMER didn't find anything and the DDS link doesn't seem to work. Can these items be removed? What do I do next?