Unauthorised additions to IE Favourites

[Lurk R]

Was chatting with a mate on msn the other night who has all these pornsite URL's in his favorites folder. Deleting them doesn't seem to work as they re-generate themselves. He deletes cookies daily. I got him to download and run AdAware. He hadn't kept his Norton AV program updated but I told him how to use the Live Update function there.

Any suggestions on where to run from here?

Many thanks,

[Rollingthunder]

Please see sticky at the top of the page and run the fixes.

[Saab Dastard]

Lurk R,

I came across a similar thing, where the "payload" was a batch file sitting in the Start Menu\Programs\Startup folder. So obvious it took a little while to find it.

SD