Run another scan with HijackThis and fix these entries again:
All R entries that contain
http://red.clientapps.yahoo.com
and these:
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://69.31.79.102/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://69.31.79.102/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://69.31.79.102/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://69.31.79.102/search.html
Click Fix Checked and close HijackThis.
-------------------------------------------------------------
Run a new scan with HijackThis and post the new log.
__________________
Member of ASAP since 2005
Member of UNITE since 2006
"It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."