Eisboch wrote:
"JoeSpareBedroom" wrote in message
...
I was wondering about keystroke loggers. I don't recall, but it might've
been Eisboch who said he had no need for a firewall that monitored
outbound nasties because he'd never been infected with anything nasty.

Yet.


Yup. That was me. And 4 days after I said it my computer at home picked up
some kind of spyware thing. I keep getting pop-ups trying to sell me
everything from cars to vacations to dates with beautiful, single women.
It's not porn crap or anything ... just annoying junk. I went to
Microsofts's Security Website and did an on-line scan and fix doober. It
found and corrected a worm, but there was one file it said it could not fix.
The computer ran ok for a while, then the stupid pop-ups started all over
again. I adjusted the pop-up blocker to prevent *any* pop-ups, but they
still come through.

I'll take it to a computer shop and let them clean it up.

Eisboch



I had a similar worm at work, and it was a bitch, because it reinstalls
itself every time you reboot. It started in the receptionist's
computer and worked it's way into the Network.

Spybot, Windows Defender or AdAware were not ability to delete the worm.
Our contracted computer "experts", tried for a month to get rid of the
worm without success.

I used HiJackThis and the experts at
http://www.tomcoyote.org/hjt/ to determine what was causing the
problem and how to correct it.

I found an unusual file in the start up directory. It was a legitimate
Windows file name, but was really the worm. The exe file would credit a
random and different exe file every time it would start up. In the
receptionist's computer It had created so many new files that there was
over 3000 processes running in the background.

I had to start up in the safe mode manually delete the file and the
start up lines in the registry. Hopefully your computer shop will spend
the time to verify each and every item involved in the windows start up
to make sure the file is actually a legitimate file.

I used HiJackThis

http://www.download.com/HijackThis/3...-10379544.html

to review the registry for start up items and any other methods used by
spyware to take over your computer.

"HijackThis lists the contents of key areas of the Registry and hard
drive--areas that are used by both legitimate programmers and hijackers.
The program is continually updated to detect and remove new hijacks. It
does not target specific programs and URLs, only the methods used by
hijackers to force you onto their sites. As a result, false positives
are imminent, and unless you're sure about what you're doing, you always
should consult with knowledgable folks before deleting anything. "

from Download.com

..