Well, I found the source of the popup instructing me to download aa.js. infected copy of c:\windows\system32\Services.exe was found and disinfected Restored copy from - c:\windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.18829_none_d1614ac32b8ec5cf\services.exe . Vipre did not locate the infection nor did the microsoft tool. The program that I used is not for the faint hearted. It is recommended that you have a technician standing by when it is run. I first learned about combofix when I had eset nod32. I had something that when I went to my local newspaper it always took me to a porn site. The tech support guys could not find the source and asked me to run combofix then call them when it finished. It correct a few things in the registry and the problem went away.
--- Please visit my web page It’s motivational, inspirational with a touch of humor There is also a very extensive resource list for the blind http://www.LennyMcHugh.com International Brotherhood of Magicians member #43990R For answers to frequently asked questions about this list visit: http://www.jaws-users.com/help/
