Cheers tazuk.
The main problem I have here (and there are many), is that this is my mothers computer and it is situated 12,000 miles and a 9 hour time difference from myself.
To give you an idea, I had to send a (zipped) copy of HJT by email as she had downloded the wrong thing. Then I get this message
"I tried to start the file you attached but got a message saying that 'this program can be harmful to your computer therefore windows has blocked it'."
I have requested an accurate version of the message, but this is going to take a while.
Patience will be required.
I know from the process list that at the very least
hbsrv.exe a Hotbar.com Spyware process is running.
also Fx5vr2.exe and E_541352.EXE which I haven't been able to Identify.
[red]GNBM 4th Feb[/red] More on and other neat UK stuff at forum1091
Steve: Delphi a feersum engin indeed.