Hope this isn't duplicated - just got cut-off on my Modem.
Two weeks ago I had the WebSearch Home page hijack bug along with several viruses/trojans. Got those cleared as I have already on AVG and a couple of other progs that did the job. But I finally in desperation had to stop the Home page change by finding the two Keys in the Register where IE Main settings show the Home, Start & Local pages...set these to Google as I want, then put in a Permissions Deny to all but the Administrator. Seems to have done the job as everything right now works virtually as normal ...BUT, Spy Sweeper STILL reports every minute that my Home page had been changed but has been reverted to Google (I've got Home page locked by two others also) .. but clearly the bug still lurks, yet CWShredder and every other prog that I use tells me I've got a clean system.
Really can't remember if I ever saw it before but if I Scan in HiJackThis I get almost everything that's recognisable .. except this one oddity which means nothing to me -
04 - HKLM\..\Run: [mode] D:\NBDriver.exe
Doing a general file/folder search shows NO such file - surely odd if it is in fact a used system file...and why D: designation.
Is this bad do you think ?

Try this web site Merijn.org. They have several freeware programs that might help. I had adware/spyware problems which Webroot's Spysweep wasn't able to solve. These programs (CWShredder & HijackThis) took care of the problems.

HillBill