If all that isn't working and you don't want to format your PC, you can try a little hacky and ugly thing which I once did to get rid of some (legit) popup of some website.

I just wrote a little application which checked the command line, and if it contained that link I didn't want to see I simply exited the porogram.
If it wasn't there the program started firefox with the given command line.

Call that tool "Firefox.exe" and put it into it's folder, naming the original Firefox.exe like "Firefox_.exe" or so.

It's a pretty hacky solution, but it works...

Take a look with Hijackthis. This'll create a log file which you can upload on their webpage. The result shows you which items are deemed problems and which are not.

+1 but I would suggest posting to a site like castlecops.com (now defunct) as some of these infections are not simply a matter of ticking a remove field in an application.

Hijackthis didn't helped - sent log file but still nothing

"Nuke them from orbit, it's the only way to be sure".

i.e. Reinstall Windows, and then...

- Put FREE antivirus + malware + firewall.
. Microsoft Firewall (comes with OS anyway and is on by default iirc).
. Spybot Search & destroy.
. Microsoft Security Essentials, or Avast Antivirus .
. Don't use IE!
. Don't ever use Norton Internet Security products!

You have several very good antivirii available free and fuly features. Avast, AVG, Avira, and I think nod32. They are all free.
You also have resident spyware dectors and spyware scanners. malwarebytes, Spybot S&D. These kick off when you visit 'dodgy' sites.

You can try to install Spybot S&D, Avast or Microsoft SE, but it's not guaranteed to give you a completely clean system when installed after the fact. Prevention instead of cure!

I use Microsoft SE, and use regular malwarebytes scans. I have used Spybot S&D and Avast before, and is what I use for PCs of my relatives, who are a bit clueless about internet security. I'm no expert either, but the combo keeps them clean of junk and has relatively painless automated updates.

Hijack This is more of a debugger tool. You get a dump of the stuff running on your machine, and you go to geek boards and try get some help from experts. Usually if it comes to that point, the infection is pretty severe. But, they can really help you clean it up. These boards will also advise you on the software that will keep you safe of infections.

Again, the best course of action is prevention first. Once you're clean, I strongly recommend you get some resident AV / malware tools ASAP.

I don;t use IE BTW, rescently I reinstalled Windows... And about all these tools - I had them once, but my PC is so old nad installing them makes it even more slow

>I don;t use IE BTW, rescently I reinstalled Windows... And about all these tools - I had them once, but my PC is so old nad installing them makes it even more slow

I wish I could say "malware is even slower" ... but that's probably not even true. Security tools however, don't steal your identity or get you raided for hosting illegal material that you had no idea had been put on your hard drive. Nor do they fill your desktop with porn when you want to get work done. (Maybe that would be a good way of reinforcing strong password policies? Change your password and your security suite rewards you? Probably would work better with a USB coffee maker anyway.)

I guess you could image your disk in a known-good config and count on reloading the image frequently ...

Before pressing the nuke button (i.e. reformatting) I would give BartPE a try. Or, use a bootable CDROM such as this one.

If you can't get rid of malware, it's most likely that the running instance reinstalls itself the second you remove it. Booting from CD or accessing the system from BartPE circumvents that.

Also, in general rather than msconfig, you may want to use autoruns.

And, you will want to abstain from downloading warez and porn (which is 99% certain the reason why you have malware), or if you really must, do so at from within a virtual machine. VirtualBox doesn't cost anything, and you can just "revert to last snapshot" when you turn it off -- malware gone.

Forgot to mention: Of course you will want to download that CDROM image and burn it with a computer that is not compromised yet...

check the link to the site isn't in the Start folder. Also search for the URL in regedit and if you find it, delete it. You said msconfig didn't help, did you look at the Start tab? That's another place where to tell the systems which programs to run at start-up.

Check the task-manager for applications you may not want to be running.