an email from detections AT spybot.info suggested this:
Please fix the follwing items with hijackthis:
Running processes:
C:\Program Files\CleanMyPC\Registry Cleaner\RCScheduler.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O4 - HKCU\..\Run: [Registry Cleaner Scheduler] "C:\ProgramPHP Code:
[url]http://awesomehomepage.com/newsletter.php?list=positivethoughts[/url]
Files\CleanMyPC\Registry Cleaner\RCScheduler.exe" /startup
Please make a fresh system start after fixing these items.
However after reboot, homepage is still hijacked