The offending reg key does, in fact, show up in the log. It is third entry from the bottom of the 04 section just above Global Startup: Adobe Reader Speed Launch....
I have now removed the key using Spybot, HJT and manually. After rebooting with System Restore turned off it returned each time. Something else that is curious, SpyBot turns up ClearSearch while it is scanning CoolWWWSeach files, although all attempts to find those files (with Show Hidden Files checked) turn up nothing.
I suppose it's time to download an updated version of CWShredder. Mine is also ancient.
Robin


Reply With Quote