>Sorry for not replying sooner. Thanks for the link. Kinda strange in that, when I checked the registry, I couldn't find any of the referenced keys. I had run Ad-Aware and AVG anti-virus but it seemed to return. Maybe this time the updates were more effective. I'll check the registry again if it pops up again.
>
>Thanks again.......Rich
>
>
>
>>>My home computer has become infected with the Deus Cleaner fake spyware program and I need some advice on how to get rid of it.
>>>
>>>A google search shows a couple of Deus Cleaner Removal programs but, having already been bitten, I'm worried that these are just different versions of the same thing.
>>>
>>>One site: www.precisesecurity.com/threats/deus-cleaner
>>>
>>>has manual instructions for removal.
>>>
>>>Does anybody have any experience with this nasty beast and how to get rid of it? Or at least which web sites I can trust????
>>
>>http://www.symantec.com/security_response/writeup.jsp?docid=2007-112216-3632-99&tabid=3

You may need to boot into Safe Mode and/or make sure System Restore is disabled.

You can run MSCONFIG and temporarily disable any startup items that look dodgy.

Also check browser add-ons in IE in Tools...Internet Options...Programs...Manage add-ons. Disable any that aren't signed by reputable companies you recognize.

If it's especially pernicious you might need to check all your running processes in Task Manager (even in Safe Mode) and make sure they're legit. I've seen several cases where a virus or spyware hooks EXEs like RegEdit, so you *think* you've deleted a value or key, but when you go back into RegEdit it's put back again. Or, keys/values are completely hidden in the first place.

I was at a Windows user group meeting this evening, and MS MVP Charlie Russel was saying how he got infested with CoolWebSearch and it took him 8 hours to get rid of it.