Hello Bob, I've run into a few that are worse than that. They actually load two copies as services. If you terminate one, the other immediately loads it again. So you can't clear them from memory. On top of that, during shutdown, they write out to the registry a new entry with a random file name to load on startup. So if you clear the registry, it just gets written again on the reboot. About the only way I have found to get rid of them is to boot in safe mode and find the suspect files and registry entries and delete them. Then reboot normally. I can't see how a program like Ad Aware could get rid of these particular nasties - in fact, I have found them on machines running multiple of these ad aware, spy bot type programs.
-- Best regards, Bruce Saturday, December 4, 2004, 2:26:00 PM, you wrote: BW> Hi, >> [...] and when i brought up my IE 6 i had lost all my history and popups >> came in faster >> than i could close them. Its a nightmare i have never had to go through >> before on this >> computer. >> I checked and my conection is armed for MS firewall,but still getting >> through. BW> Make sure you have the messenger service turned off. BW> http://www.microsoft.com/windowsxp/using/security/learnmore/stopspam.mspx BW> SP2 will do this for you when you install it, but if you haven't BW> already switched it off, do it now. BW> Have a look at the other services you have running (use Task Manager - BW> Ctrl+Alt+Del then select the Processes tab) and make sure you know why BW> each of them is there. There are websites around which will tell you BW> what they are, e.g. BW> http://www.answersthatwork.com/Tasklist_pages/tasklist.htm BW> Trojans often run as services. Anti-virus software often can't get BW> rid of them because they're running - the OS won't delete them while BW> they're in use. Because they load at startup they are always in use. BW> You have to prevent them from loading at startup, which can mean BW> hacking around in the registry, and can be a bit of a pain. When BW> you're confident that you've found something and can delete it, look BW> again. They sometimes set themselves up to load from more than one place, BW> so you think you've got rid of something, but it immediately reinstalls BW> itself.
