Hi Peter
Jan,
Thanks - However, I could not find NoBrowserClose key.
Peter
Then, even though you have said that you have cleaned the system, and it has
come up clean, I agree with Don's suggestion that, even if you have run the
various scanners and removal tools, and the HiJackThis, there is still
something on your system that is causing the problem. Some variants of
hijackers and malware can replicate themselves repeatedly if they are not
removed properly. You mentioned that you posted a Hijackthis log and it
came back clean. Did you run the AdAware, SypBot and the HijackThis in the
Safe Mode and Hidden files enabled? Some variants can hide in files being
used when Wondows is in use. In order to fully expose them, the scans
should be done in Safe Mode with all hidden files exposed, which does not
load Windsows and allows all files to be scanned and any hiding scumware to
be detected and removed.
I suggest that if you have not done so, that you follow Don's suggestion,
and run all scans in Safe Mode with Hidden files enabled per the following:
How to Restart in Safe Mode
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406
Enable Hidden Files
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339
Then post your HijackThis log to one of the following forums for full
analysis:
Follow the instructions to install and run HiJackThis:
http://www.hijackthis.de/forum/forumdisplay.php?f=10&guestlanguageid=4
Post to one of the forums below:
Aumha HiJackThis Forum
http://forum.aumha.org/viewforum.php?f=30
or Bleeping Computer Forum
http://www.bleepingcomputer.com/forums/forum22.html
Allow the experts there to evaluate your log and advise you of any necessary
steps to clean your system.
(Note: You will have to Register before posting on these Forums. Please
follow all posting instructions carefully to avoid having your log deleted
or ignored.
Hope this helps
Jan
![Smile :) :)](/styles/default/custom/smilies/smile.gif)
Smiles are meant to be shared,
that's why they're so contagious.
Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm