Sorry for the delay in getting back to you. To be honest, I`d completely forgotten about this thread.

Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS

O16 - DPF: {072039AB-2117-4ED5-A85F-9B9EB903E021} (NowStarter Control) - http://www.clubbox.co.kr/neo.fld/NowStarter.cab

Click on the fix checked button.

Close HJT and reboot your system.

Post a fresh HJT log and let me know if you`re still having problems.

Regards Howard

This thread is for the use of bend.your.mind only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

I followed those instructions. I'm posting my HJT again because my monitoring virus scanner picked this up: c:\avenger\backup.zip <avenger/uy.exe> Win32/Malum.CZAK.

Thanks!

Your HJT log is clean.

You can safely delete the Avenger backups.

Locate and delete the following bold files and/or directories(if there).

c:\avenger\backup.zip<There are infected files in the .zip file, but they are completely harmless as long as ther stay zipped up. That`s just the Avenger programme doing it`s job and is nothing to worry about.

Turn off system restore.(XP/ME only) See how HERE.

Now, turn system restore back on. This will have deleted all your old restore points and any nasties that are in them. It will also have created a new, clean restore point.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard

This thread is for the use of bend.your.mind only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

Thanks for your help!