On Sep. 8 I was looking for information on Calcet, an over-the-counter triple strength calcium supplement that my mom uses for aches in her legs. I searched Yahoo and got these results. Result # 8 took me to a site called www.[color=red]DANGER[/color].mamaha.info/drugs/CalCet.htm Once the Mamaha page(s) started opening and IE 6 SP2 could not close them I manually rebooted my PC. Upon restart I immediately updated Spybot and scanned my system. There were 3 or 4 registry changes and I fixed them with Spybot (I saved the logs). My Nod 2.7 was updated fully updated for Sep. 8 and I had performed a full scan a few days prior to the Mamaha incident. I also have the free edition (v3.150) of ProcessGuard (don't know if there are updates to this), SpywareBlaster, Spybot, Ad-Aware SE (free) and the Comodo Firewall Pro (v188.8.131.52, Database Version 3.0). My system is XP SP2 with the Windows firewall on. I have Nod (IMON, too) installed with the Blackspears settings, btw. So, what happened here? I think that my Spybot & SpywareBlaster were not fully updated at the time of the Mamaha problem but why did Nod/IMON and ProcessGuard miss it (the registry changes)?