I am having a world of a time removing IBIS Toolbar and Huntbar. Everyone sends me to the registry to remove them. When I try to remove the registry entry, BTIEIN,I get this message,"Cannot delete BTIEIN:Error while deleting key". I have tried ad-aware,spybot and HijackThis. I have no more hair to pull out!! PLEASE help!

Robert Ad-aware has other settings within it to effect better removal of items detected. Check the help file here: http://www.lavahelp.com/howto/fullscan/index.html Once ad-aware is set up like that...when you do your scan make sure you check the custom scanning options. Do the scan while offline, all other programs including antivirus closed. There is a new update to ad-aware also..reference file is now at: 01R275 25.03.2004 I had trouble getting the update with the updater within ad-aware... You can download the update manually from here: http://www.lavasoft.de/update/refs/reflist.zip To install the update unzip the saved download to: c:\program files\lavasoft\ad aware 6 Yes to the prompt. Still no joy...post back. I never give up! Windows Update

Blender, I've already tried all those things. I was at the lavasoft forum. I even used info from you to remove msg121.dll. Those two items are the only things left.

Robert Ok..Download Hijackthis from here: http://www.lurkhere.com/~nicefiles/ First in the list. Save the download to it's own permanent directory, unzip, scan, scan button changes to "save log" button. Save the log which auto pops up in notepad, hit ctrl+a to select all, copy/paste results here in reply. Recommend not fixing anything yet...most of what comes up in scan is safe or even essential. I will check ack in a bit... _____________________________________ I never give up! Windows Update

Blender, Here is the log. Logfile of HijackThis v1.97.7 Scan saved at 11:13:42 AM, on 3/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe D:\Program Files\Alwil Software\Avast4\ashServ.exe D:\WINDOWS\System32\nvsvc32.exe D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\ZONELABS\vsmon.exe D:\WINDOWS\wanmpsvc.exe D:\WINDOWS\Explorer.exe D:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe D:\Program Files\GIANT Company Software\Spam Inspector\siService.exe D:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe D:\Program Files\GIANT Company Software\Spam Inspector\siMailProxyServer.exe D:\Program Files\GIANT Company Software\Spam Inspector\siSpamFilterEngine.exe D:\Program Files\Internet Explorer\iexplore.exe D:\Documents and Settings\Robert Johnson\My Documents\HijackThis.exe O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Hotmail Spam Filter - {58A83E4F-477A-4A3F-BF9B-B65BC2BD5598} - D:\Program Files\GIANT Company Software\Spam Inspector\siClientUIHotmail.dll O4 - HKLM\..\Run: [Zone Labs Client] D:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe D:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [siService.exe] "D:\Program Files\GIANT Company Software\Spam Inspector\siService.exe" O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "D:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe" O8 - Extra context menu item: &Google Search - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Backward &Links - res://D:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cac&hed Snapshot of Page - res://D:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Si&milar Pages - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://D:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O12 - Plugin for .bcf: D:\Program Files\Internet Explorer\Plugins\NPBelv32.dll O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB O16 - DPF: {16095503-786F-4097-AED6-5D567A26D760} (SiS_OCX Control) - http://www.sis.com/support/chipdetect/SiSAutodetectNT.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe

Robert I dont see any sign of IBIS or Huntbar in the log...Have you disabled anything with msconfig? If so...please recheck what you have disabled and post new log Thanks. I never give up! Windows Update

here it is in all it's glory. Logfile of HijackThis v1.97.7 Scan saved at 8:45:01 PM, on 3/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe D:\Program Files\Alwil Software\Avast4\ashServ.exe D:\WINDOWS\System32\nvsvc32.exe D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\ZONELABS\vsmon.exe D:\WINDOWS\wanmpsvc.exe D:\WINDOWS\Explorer.exe D:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe D:\Program Files\GIANT Company Software\Spam Inspector\siService.exe D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Winamp\Winampa.exe D:\Program Files\Common Files\Real\Update_OB\realsched.exe D:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe D:\WINDOWS\SM1BG.exe D:\Program Files\Common Files\Real\Update_OB\realevent.exe D:\Program Files\QuickTime\qttask.exe D:\Program Files\Common Files\Real\Update_OB\realevent.exe D:\Program Files\GIANT Company Software\Spam Inspector\siMailProxyServer.exe D:\Program Files\GIANT Company Software\Spam Inspector\siSpamFilterEngine.exe D:\Program Files\Microsoft IntelliPoint\point32.exe D:\Program Files\Ahead\InCD\InCD.exe D:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe D:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.exe D:\WINDOWS\System32\RUNDLL32.exe D:\Program Files\Ares\Ares.exe D:\Corel\Suite8\Programs\DAD8.exe D:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe D:\Program Files\OpenOffice.org1.1.0\program\soffice.exe D:\Documents and Settings\Robert Johnson\My Documents\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/ O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Hotmail Spam Filter - {58A83E4F-477A-4A3F-BF9B-B65BC2BD5598} - D:\Program Files\GIANT Company Software\Spam Inspector\siClientUIHotmail.dll O4 - HKLM\..\Run: [Zone Labs Client] D:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe D:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [siService.exe] "D:\Program Files\GIANT Company Software\Spam Inspector\siService.exe" O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [winnet] D:\PROGRA~1\COMMON~2\ADDRES~1\winnet.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe" O4 - HKLM\..\Run: [WebInstall2] D:\Documents and Settings\Linda\WebInstall.exe /R O4 - HKLM\..\Run: [updmgr] D:\Program Files\Common files\updmgr\updmgr.exe O4 - HKLM\..\Run: [updater] D:\Program Files\Common files\updater\wupdater.exe O4 - HKLM\..\Run: [Trickler] "d:\windows\temp\adware\fsg_4104.exe" O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe O4 - HKLM\..\Run: [SQInstaller] D:\Documents and Settings\Linda\igetnet_3845_3645.exeSQInstaller.exe O4 - HKLM\..\Run: [SM1BG] D:\WINDOWS\SM1BG.exe O4 - HKLM\..\Run: [SiS KHooker] D:\WINDOWS\System32\khooker.exe O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [PGStub.exe] D:\Documents and Settings\Linda\dp-b23011805.exe O4 - HKLM\..\Run: [P2P Networking] D:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LimeShop] javaw -cp "D:\Program Files\LimeShop\System\Code" Main lp: "D:\Program Files\LimeShop" O4 - HKLM\..\Run: [iTunesHelper] D:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [IntelliPoint] "D:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [InCD] D:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [GroksterSupport] javaw -cp "D:\Program Files\GroksterSupport\System\Code" Main lp: "D:\Program Files\GroksterSupport" O4 - HKLM\..\Run: [DM_Server] D:\PROGRA~1\COMETS~1\DM\bin\dmserver.exe /onreboot O4 - HKLM\..\Run: [CMESys] "D:\Program Files\Common Files\CMEII\CMESys.exe" O4 - HKLM\..\Run: [AutoLoaderAproposClient] "D:\Documents and Settings\Linda\sys_ai_client_loader.exe" /HideUninstall /PC="AM.NICT" /ShowLegalNote=nonbranded O4 - HKLM\..\Run: [AST] D:\WINDOWS\AST O4 - HKLM\..\Run: [ashMaiSv] D:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "D:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.exe" O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.exe D:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit O4 - HKCU\..\Run: [Yahoo! Pager] D:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ares] "D:\Program Files\Ares\Ares.exe" -h O4 - HKCU\..\Run: [AIM] D:\PROGRA~1\AIM\aim.exe -cnetwait.odl O4 - Startup: OpenOffice.org 1.1.0.lnk = D:\Program Files\OpenOffice.org1.1.0\program\quickstart.exe O4 - Global Startup: GStartup.lnk = D:\Program Files\Common Files\GMT\GMT.exe O4 - Global Startup: Corel Desktop Application Director 8.LNK = D:\Corel\Suite8\Programs\DAD8.exe O4 - Global Startup: America Online 9.0 Tray Icon.lnk = D:\Program Files\America Online 9.0\aoltray.exe O8 - Extra context menu item: &Google Search - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Backward &Links - res://D:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cac&hed Snapshot of Page - res://D:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Si&milar Pages - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://D:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O12 - Plugin for .bcf: D:\Program Files\Internet Explorer\Plugins\NPBelv32.dll O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB O16 - DPF: {16095503-786F-4097-AED6-5D567A26D760} (SiS_OCX Control) - http://www.sis.com/support/chipdetect/SiSAutodetectNT.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab