Begin2Search IE6 Browser hijack!!

[Monty]

My IE6 browser keeps getting re-diretced by a subtle registry change to

strange porn sites. I have tried everything in terms of spyware
detectors/deleters such as AdAware, Spybot, Spyware Doctor even used
Trend Micros dedicated spyware software. Trend identifies the offending

Begin2Search, deletes it but somehow it comes back and starts
re-directing my browser again.
Does anyone have any idea how to get rid of this Begin2Search
spyware/malware ONCE AND FOR ALL?

 

[Jan Il]

HI Monty

Work through the steps below. Follow instructions to the letter.

Courtesy of PA Bear -

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm

also..

Download and install HiJackThis. This is one of the most important steps.
Follow all instructions carefully. This program should be run in Normal
mode.

How to download and install HiJackThis: Win 98-XP
http://www.download.com/HijackThis/3000-8022_4-10227353.html

Please.. DO NOT post your log HiJackThis log to this newsgroup. DO NOT
delete anything from the list yourself unless you are an experienced user of
this program. It is important that you post your log on one of the
HiJackThis Support Forums below and allow the experts there to analyze it
for you:
AumHa HiJackThis Forum
http://forum.aumha.org/viewforum.p
(http://www.dslreports.com/forum/security)
to allow the experts there to evaluate your log and advise you of any
necessary steps to clean your system.
(Note: You will have to Register before posting on these Forums.
http://aumha.net/profile.php?mode=register
Please follow all pre- posting instructions below carefully to avoid having
your log deleted or ignored.
http://forum.aumha.org/viewtopic.ph...ghlight=&sid=b59f8de4de1850003b79b74558a4b58b)
All responders are volunteers and they are very busy, so please be patient.
Please see http://aumha.net/viewtopic.php?t=4075 and
http://aumha.org/a/quickfix.htm before posting to the forum.

Please post a link back here to your log at AumHa so that we can follow your
progress.