I'm on a computer than is infected with 'Porn Turbo'. It sits in 'Add and Remove Programs'. The effect is that any emails that have highlighted links to regular things redirect to their web site, and it leaves an icon on the desk when explorer is opened.

Tried the usual - Adaware, Spybot and AVG free version, nothing has removed it - any thoughts?

Probably a stupid suggestion... but have you tried to find it in task manager, stopping it then using add/remove programs to delete it?

Start by going to this site where you will find the most potent tools for removing this kind of threat http://www.spywareinfo.com/~merijn/
(if your trojan redirects this link try the sites nummerical IP address http://216.180.233.162/~merijn/index.html)

Also make sure you have disabled windows system restore and are running in the safe mode before trying to do anything. Klil any running process that are suspect using the task manager then use merijns' StartupList to stop then starting at next boot. Do a sweep with HijackThis to hunt out any registry hacks, then run Merijns' other anti-malware stuff.


You could also try a sweep with Free AV which I have always found pretty good
http://www.free-av.com/

And Symmantec web site is always worth a look for specific virus fixes which are free downloads.

Once you get is cleared do a sweep with HijackThis and keep the log file then do regular sweeps with hijack this to monitor registry changes.

If none of this works try posting your problem and the HijachThis log on the Castle Cops website (used to be ComputerCops)
http://castlecops.com/

Try Housecall on the trendmicro site as well. It does an online virus scan and gets rid of a lot of adware as well.
http://housecall.trendmicro.com/

Rerun all your scans in "safe mode"

reboot and press F8 often while booting

Thanks chaps - tried running the scans with spy sweeper in safe mode as well, no luck. The Hijack This stuff and StartUp List is a bit beyond me, and I don't have the time, so I will get him to call a man in to sort it.