I'm not sure is a virus, how to extract the registry file Thanks. Here is the log Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org ?????? 6360 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 2011/4/14 ?? 09:28:24 mbam-log-2011-04-14 (21-28-21).txt ????? ???? ???????? 143601 ??????? 1 ??, 25 ? ??????????? 0 ??????????? 0 ??????????? 0 ?????????? 0 ????????????? 2 ????????? 0 ???????? 0 ??????????? ??????????? ??????????? ??????????? ??????????? ??????????? ?????????? ??????????? ????????????? HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyDocs (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken. HK