I have the exact same 4 registry keys that won't delete with Malwarebytes ... plus one extra HKLM BHO key ... HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ..... I tried using avenger2 (input delete registry text file) with no luck ... and tried dragging a "killall:: ... infected reg keys"" text file onto Combofix .... still no luck I haven't gotten any popups since I deleted files (c:\windows\system32\~.exe and c:\windows\system32\comcatk.dll) from a dos prompt off an xp recovery cd ... the comcatk.dll file was referenced from the BHO per hijackthis (didn't have any luck deleting these files in more traditional ways) any ideas would be appreciated ...