Only Ad-aware pro. I paid for it, so I don't see why I should go looking for another anti ad/spyware utility.

Everyone suggests so many different programs. I don't mind spending more money on a new one as long as it's good and I don't need to get another in a few months to remove some adware it can't handle.

the ones i mentioned are free, they don't all catch everything, but if you have some more installed you will catch more than just with the 1 program.

But only install 1 antivirus program

I agree with BJ. Just add one thing. Run some of the free online virus scans (Panda, Mcafee, etc), because there will be times that they will catch a virus that others missed. Just turn your Virus scan off, and then run the online (free) scan and see what it catches. On the PC that my kids use, every month, I run at least two different virus scans, adaware, spybot, and then hijackthis. Usually each one will pick up things that the others missed.

For an exilent anti spyware program get Spy Sweeper.

just got another years subscription for $9.95

Hijackthis is not for the weak of heart. It picks up everything but you have to have a real good idea what processes should and should not be running at any given time. They say that up front. If your not sure submit a log to a board or forum where others that have used the program before can look and find things that should not be there

To boldly go, where no man has gone before!
I agree wholeheartedly. I've been tweaking registry entries, started tasks, and removing spyware and viruses for many years. Everytime I go to delete something from hijackthis, I check three or four internet sources, just to be really sure...

First of all get rid of norton it's poo! Get yourself another anti virus program and install it something like AVG anti virus from grisoft it's free. Then use your norton cd as a frisbee as that's all it can be good for

The way to use hijackthis is run it immediately after a clean install and then again
after you install your core programs, get to know it like the back of your hand.
Become your own expert.

have a free scan of your hard drive on line : http://www.secuser.com/antivirus/index.htm
It uses trendmicro engine and you can trust it!!! I am doing it once a month!!!

start->Run->regedit

Find "\explorer.exe"

There will be a command that has the full path to "explorer.exe" on your HD ... If there is anything following "x:\yada\yada\yada\explorer.exe"
It may be the problem (the file is protected as it's in use, activated when explorer.exe starts).
Below are possible locations.
*Note that the numbers will change, these locations are only indicative*
ie:
HKEY_USERS\S-1-5-21-2008657322-2630779636-423868590-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache
HKEY_CLASSES_ROOT\CLSID\{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}\shell\explore\command\
HKEY_CLASSES_ROOT\CLSID\{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}\shell\find\command\
HKEY_CLASSES_ROOT\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\shell\find\command\
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\DefaultIcon\
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\find\command\
HKEY_CLASSES_ROOT\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\DefaultIcon\
HKEY_CLASSES_ROOT\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\shell\find\command\



(This one is valid: "%SystemRoot%\Explorer.exe /e,/idlist,%I,%L")


This one would not be: "%SystemRoot%\Explorer.exe proggiehere.exe"

The proggyhere.exe is the issue.
Remove the "additionalproggiehere.exe" from the registry value (right click & edit)
*DO NOT DELETE THE ENTIRE KEY* it is valid. Only the extra proggy is the problem.

This file cannot be deleted while explorer is running, even in safe mode, and it will rewrite the value to the registry when you shut down.

Run a search for the *proggiehere.exe*.
write down the full path in 8.3 format
aka "c:\windows\system32\massiveprogramname.exe" becomes "c:\windows\system32\massiv~1.exe"

"c:\program files\spyware proggie\proggiename.exe" becomes "c:\progra~1\spyware~1\proggi~1.exe"

Then in normal mode, press Ctrl+Alt+delete & kill explorer from the task manager.
Also kill any other proggies in your processes which don't look right.
press Ctrl+Alt+delete and select run-> "Command"
type "del (the path&proggiename)"

Then run->explorer again & run your antispyware software.

I had a "nail.exe" which kept dropping crap in my system32 folder to execute. I'd kill it, delete it & then it'd start up again as a different name. The nail.exe did NOT appear in my list of processes, as it was hiding behind explorer.exe.

WOW! Lots of posts to read through since I last posted!

Ok, I seem to have it sorted now. I installed Ad-Aware SE Pro and AOL SpyZapper. After loads of scans and rebooting with system restore turned off I've got rid of all spy/ad/malware on my machine - or at least I assume I have.

I've only been back online for about 30 mins and I've had a popup that wasn't caught from some casino site. If I add the homepage of the site to my 'blocked' list, should that stop it?

Thanks for all your help guys.

AOL Spyware Protection has just blocked a Hijacker called 'XXXToolbar'. The details of it are:

HKEY_LOCAL_MACHINE/software/microsoft/internet explorer/main
HKEY_CURRENT_USER/software/microsoft/internet explorer/main

Is it safe to delete these values from the registry?

I say adaware PRO se.... Also firefox is a must...Get adblock Plus and filterset G. Also for sever infections try running MS antispy one time....It found lots the first time a ran it deleted it after taht... Good job installing Spyblaster...no pc should be without it...

Spybot S&D is great for free software...Also if you feel like shelling out the cash get Webroot Spyware protection (thats not the name) You infection will be solved with this app most likely...

Surely I can just go into the registry and delete the values. That would be easier than installing yet another program.

Take a long hard look in Add/Remove Programs for any entries that you did not personally install. Some hijackers and rouge BHO and Toolbar entries can be found here. Uninstall (if you can) entries that you are not familiar with. Most, not all, malware entries are usually represented by generic computer icons here. Some will allow normal uninstallation, but most will not.

You can also simply run HijackThis, create a log and paste the log HERE for instant analysis. It only takes a few seconds and is FAIRLY accurate in MOST cases.

The key to obtaining a proper HijackThis summary is to make sure ALL programs and windows are closed (this includes Windows Explorer).
Personally, I kill everything that does not need to run when the system starts up, like 99.9% of the unnecessary garbage in the System Tray. It simplifies analysis tremendously

You may also do your own analysis following the HijackThis log tutorial.
You may verify questionable entries at Startup Applications List and questionable BHO, Toolbars and associated .dll files at CLSID List.