WebRebates/TopRebates: Autorun settings (Registry value, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WebRebates0
WebRebates/TopRebates: Settings (Registry key, fixed)
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\MenuExt\Web Rebates
That is what was in the report file, but I deleted the rundll32 files that spybot said was crteated by a virus.
I'm using Windows ME and all is working fine after I cleaned with spybot, I guess I should ask spybot the same question as here but thought Id ask here and make sure there isnt something new "out in the wild"
that everyone should be aware of.
thanks