http://virprotect.com/

This is rogue software directly installed by the new ZLob trojan .

Complete removal info (trojan and rogue combined) :

C:\Documents and Settings\All Users\Desktop\Online Security Guide.url
C:\Documents and Settings\All Users\Desktop\Security Troubleshooting.url
C:\Documents and Settings\All Users\Start Menu\Online Security Guide.url
C:\Documents and Settings\All Users\Start Menu\Security Troubleshooting.url
C:\Documents and Settings\**USER**\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusProtect 3.8.lnk
C:\Documents and Settings\**USER**\Desktop\VirusProtect 3.8.lnk
C:\Documents and Settings\**USER**\Favorites\Online Security Test.url
C:\Documents and Settings\**USER**\Start Menu\VirusProtect 3.8.lnk
C:\Documents and Settings\**USER**Start Menu\Programs\VirusProtect 3.8
C:\Program Files\Video Add-on
C:\Program Files\VirusProtect 3.8
C:\WINDOWS\System32\ucmbegr.dll

[HKEY_CLASSES_ROOT\CLSID\{23B760D6-C98B-450B-9B32-26C7775CDF83}]
[HKEY_CLASSES_ROOT\CLSID\{70CC76D5-A4EE-4F25-9931-B109A63E298E}]
[HKEY_CLASSES_ROOT\CLSID\{B7C9058D-0F9C-32C0-83B6-740DFD8A6726}]
[HKEY_CLASSES_ROOT\CLSID\{d653e105-3e53-480a-b129-54d957d174bb}]
[HKEY_CLASSES_ROOT\Interface\{21688E5D-A895-4B60-B127-B76607420334}]
[HKEY_CLASSES_ROOT\Interface\{40E563B2-61B2-4215-819A-A7E24CF8AA3E}]
[HKEY_CLASSES_ROOT\Interface\{45FBEFBF-E8B6-44A5-B0A1-A143E1A74816}]
[HKEY_CLASSES_ROOT\Interface\{5146B43E-B36D-4A2A-B617-CC05CC500150}]
[HKEY_CLASSES_ROOT\Interface\{5B8BED0F-5F18-4051-9908-C5C569A1AAE9}]
[HKEY_CLASSES_ROOT\Interface\{63667718-EBF2-4CAB-B1E8-994D41589C24}]
[HKEY_CLASSES_ROOT\Interface\{972F0BE3-976F-40B8-8EB4-88A25987416E}]
[HKEY_CLASSES_ROOT\Interface\{9F80EA2D-53CF-4AA5-A154-F4FBF1EF6A5A}]
[HKEY_CLASSES_ROOT\Interface\{A35F8FAC-755D-4F90-A5D3-F7E18D9EB100}]
[HKEY_CLASSES_ROOT\Interface\{C269F4C1-7558-4DFC-9FB6-4C149B482586}]
[HKEY_CLASSES_ROOT\Interface\{CE92A296-3142-493C-B64E-6ED73EAFB9AE}]
[HKEY_CLASSES_ROOT\Interface\{D7C0DF6C-91FF-48BD-AD98-E35769394138}]
[HKEY_CLASSES_ROOT\Interface\{D8EC2704-B249-4495-A7A4-A90857BDDF4D}]
[HKEY_CLASSES_ROOT\Interface\{D91E9F36-9E44-44AB-803C-0D941FDA7988}]
[HKEY_CLASSES_ROOT\Interface\{E0757BDD-69BE-4C3F-AFC6-50D6524FA9B6}]
[HKEY_CLASSES_ROOT\Interface\{F2F8C877-B06C-4B5E-95E7-AACFC9E8219D}]
[HKEY_CLASSES_ROOT\TypeLib\{3B8E549E-0C73-4AAB-8939-5EA2ED102CC6}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow]
"*.securewebinfo.com"=hex:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{DAED9266-8C28-4C1C-8B58-5C66EFF1D302}]

[HKEY_CURRENT_USER\Software\Online Add-on]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{70CC76D5-A4EE-4F25-9931-B109A63E298E}"=hex:00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\VirusProtect 3.8.exe 3.8]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23B760D6-C98B-450B-9B32-26C7775CDF83}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{d653e105-3e53-480a-b129-54d957d174bb}"="groutiest"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
"some"="C:\\Program Files\\Video Add-on\\icthis.exe"
"start"="C:\\Program Files\\Video Add-on\\isfmntr.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VirusProtect 3.8"="\"C:\\Program Files\\VirusProtect 3.8\\VirusProtect 3.8.exe\" /h"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Audio-Video Enhance]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Custom Tools]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Safety Features]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Information Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusProtect 3.8]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert]

[HKEY_LOCAL_MACHINE\SOFTWARE\VirusProtect 3.8]

And version 2 for the trojan :

C:\WINDOWS\System32\fftktmk.dll

[HKEY_CLASSES_ROOT\CLSID\{3750da11-9b0c-4a75-9c8a-bbcbfcd1ccea}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{3750da11-9b0c-4a75-9c8a-bbcbfcd1ccea}"="doglike"

HJT crud :

C:\Program Files\Video Add-on\icthis.exe
C:\Program Files\Video Add-on\icmntr.exe
C:\Program Files\Video Add-on\isfmntr.exe
C:\Program Files\Video Add-on\isfmm.exe
C:\Program Files\VirusProtect 3.8\VirusProtect 3.8.exe

O2 - BHO: (no name) - {23B760D6-C98B-450B-9B32-26C7775CDF83} - C:\Program Files\Video Add-on\isfmdl.dll
O3 - Toolbar: IE Custom Tools - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - C:\Program Files\Video Add-on\ictmdl.dll
O4 - HKLM\..\Run: [VirusProtect 3.8] "C:\Program Files\VirusProtect 3.8\VirusProtect 3.8.exe" /h
O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Video Add-on\isfmntr.exe
O22 - SharedTaskScheduler: doglike - {3750da11-9b0c-4a75-9c8a-bbcbfcd1ccea} - C:\WINDOWS\System32\fftktmk.dll
O22 - SharedTaskScheduler: groutiest - {d653e105-3e53-480a-b129-54d957d174bb} - C:\WINDOWS\System32\ucmbegr.dll