Ray said:
I ran antivirus and nothing sowed up, however I noticed it started when pay
pal tool bar was installed. The malware factio of this shoes the typical
"click count" sites. I disabled sys restore for fear a virus may infect that
and then searched the registry for any changes in run once or run once exe
etc. Maybe uninstalling IE and reinstalling it may help. thanks for your
input.
Disabling System Restore was foolish. Certainly a virus or malware will
be in Restore points but it will only be active if you use those Restore
points! Better to be able to get back to a working, albeit infected,
system than to not be able to get back at all.
To clean up your computer (which you need to do), go through these
general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware
Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.
http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download
When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).
Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.
Malke