I haven't been getting any IE pop-up's, but I do get a dos window with the header c:\windows\temp\h91746.exe and a window with the title - 16 bit MS-DOS Subsystem and text that reads: c:\windows\temp\h91746.exe The NTVDM CPU has encountered an illegal instruction. CS:0575 IP:01d4 OP:63 68 65 2f 31 Choose 'Close' to terminate the application I restarted in safe mode, ran hijack this, got rid of... C:\WINDOWS\system32\nvctrl.exe C:\WINDOWS\system32\mssearchnet.exe ran ATF Cleaner and emptied everything, then then restarted normally, updated my McAfee, did the same process again with the exception of the 2 deleted files. i still get the same MS Dos prompt. I have a hijack this log ready to post... any help appreciated, Bruce

Follow the instructions at this link first Spyware Quake Removal Then post your HT log.

You also have Crystalys Media adware. The h91746.exe file is related to this pest. Follow these instructions.