I got this one, no known prevention at this time. It's a lulu, I ended up reformating my HD. April 20, 2004: * WARNING * The CWS trojan is appearing in a new variant which installs through a zero-day exploit in the IE HTML Help system, for more information see here and for a workaround see here. If you are infected, your homepage will change to something like mk:@MSITStore:C:\WINDOWS\start.chm::/start.html. Please keep an eye on WindowsUpdate until a patch for this exploit is available. More info: http://netsecurity.about.com/cs/generalsecurity/a/aa021504.htm

Thanks ranchhand, for the heads-up. Man, just what we need; we'll have to watch for the updates. ~Tommyo

Here's something.. http://support.microsoft.com/default.aspx?scid=kb;en-us;312456 V...

Thanks Val... Yeah, I know about this. Unfortunately, just replacing the .chm file with an update won't help because the spyware is still on your computer. This is another example of the old Microsoft joke: that answer technically correct but totally useless. Also, at the bottom of the page it states that this applies to WIN 98.

Yes, this is the one i've been trying to get rid of for a few weeks now and the stupid thing keeps coming back. Not even CWSshredder, Spybot, and Adaware could recognize it. :(

Here'sHowToKillItForNow

Yes, Mr.Charlie is right; I did this also. Unfortunately, bear in mind that when all your online help files stop working it is because the chm is disabled. But I also noticed a slowdown in my computer, and on occasion a glitchy effect in my graphics apps. Finally I got so disgusted that I reformatted and reinstalled everything. In one way it was okay because my computer is backup to speed again having refreshed my register from hundreds of old entrys....