thehun popups

[Pieter_Arntz]

Opens an IE popup to a pornportal every thirty seconds.
Nothing shows up in a HijackThis log

To solve this issue, copy the part in bold below, save it as a .reg file and doubleclick that file. Ok to the prompt if you want to merge it with the registry.

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"YAHOOSubst"=-
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"YAHOOSubst"=-

Will keep you posted as soon as we learn more.

Regards,

Pieter

[Pieter_Arntz]

This one will now be found by HijackThis (1.97.5) as you can see in this thread (http://www.computercops.biz/postt8736.html).
{QUOTE-> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,YAHOOSubst =

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,YAHOOSubst = <-QUOTE}

So the above regfix is no longer needed.

Regards,

Pieter