BTW, are you an expert in such matters--having a terrible time getting rid of CASH TOOLBAR spyware etc. with even several removal software packages. Terribly tencacious stuff. Comes back immediately from wherever it's bits are lurking in my system.
I have a program called "Spybot". However, sometimes even it will not remove pesky stuff - because the programmers for the pesky software have put up barriers against removing it .. so here's what I do.
I have Windows XP - so I click on [start] then click on [search] - and in the search criteria there is a listing for [All files and folders] - click on that. Then .. you'll see another search criteria [More advanced options] (shown near the bottom) - and click on that. Now, you can enter the EXACT name of the files you are looking for. You will notice in this advanced search screen that you are now searching "hidden" and "subfolders". The search may take some time .. so don't get frustrated and end it - wait for it to complete the cycle.
THE KEY TO FINDING THE FILES - THE NAME OF THE FILE YOU'RE SEARCHING FOR **** MUST **** BE EXACTLY THE SAME - otherwise your computer will not find it.
I downloaded a program to be able to change my cursor. However, after I did that, Spybot registered these files - FunWebProducts - as suspect spyware. For some reason, I couldn't get rid of them. So, I went through the "search" method and found a folder with 96 FILES in it. I had to delete each file one at a time - because I tried using the "select all" and it would not get rid of the files. What was really weird - was the folder looked empty - but it really wasn't .. software writers are very sneaky.
Before I found the FunWebProducts junk - I tried to find it under Fun Products .. etc. When I finally got the name correct - my computer found it right away. Needless to say, I don't have a "red" cursor anymore - and I know better than to download that kind of junk.
Let me know what happens.
You didn't ask me, but you might try downloading "Hijackthis.exe" here:
http://216.180.233.162/~merijn/files/HijackThis.exe
and posting the log result on
http://forums.spywareinfo.com
Good luck!