Auto Redirect?

[kandrathe]

When I was working at the school Help Desk, let's just say spyware was a common issue ...

I saw all kinds of things that never should be on computers. In the end, I came down with a system of using HijackThis!, cleaning up all the entries, then using AdAware and Spybot to delete useless trailing files (while HijackThis! will remove the executable code, it won't snag associated files).

Spyware that did Winsocks hijacking ended up getting a WinsockFix run, while one particularly horrible piece of spyware (forget which) needed a HijackThis run under a BartPE boot with manual file deletions to successfully clean.

The worst I've seen is when they insert into the networking stack.