I'd do some checking on whatever names you see there. Do a Google on malwareremove, or default.mspx. There's a web site out there that explains suffixes to file names, but unfortunately at work. Anyone who can hijack Microsoft's site would be doing pretty hefty stuff..I can sympathize, my missus' machine has (oh..let me see), Cool Web search, Ad Destroyer, Virtual Bouncer (you have to pay them to uninstall it), and some neat feature that won't let Hijack This! even run.
I've gotten to the point that I don't trust 'yes/no' popup boxes in VB (they're just buttons, and you could easily 'reverse' the actions taken, etc). Good luck.

I wish I'd said that.. The Staircase Wit

anahl nathrak uth vas betude doth yel dyenvey..;)