Who gave me "start menu\ebay.lnk" with redirector to www.adon-demand.de?

Hi,

I'm very conservative in installing software, i.e. if I install software with unknown trustworthiness, it will go to a virtual machine...

Yesterday I realized there is an "ebay.lnk" in my user Start Menu. It is a redirector to "adon-demand.de/red/12345" (don't know the number now). Also I realized, there is "%appdata%\Desktopicon" - no ebayicon.exe in there, but anyway...

Could this have been installed via the Firefox Plugin mechanism? I've got quite a few plugins... I know you cannot tell the cause, but however, I'm collecting ideas... Foxit Reader is not the cause, haven't installed it... Google is pretty poor on this.

Because I'm very conservative in things like this I'll probably re-install my OS then...

Best regards
Michael

 

Unlocker? http://www.threatexpert.com/report.aspx?md5=e375121e3e53726a2c6cdb52f4d80ae3

 

Thanks for your reply. Yes, I've seen the Google results with "unlocker", but unfortunately it's not the cause - I've never used it.

 

Comes bundled with a few pkgs so don't get carried away. Dump the shortcut and be done with it.