Group: microsoft.public.windowsxp.security_admin
From: "PA Bear [MS MVP]"
Date: Saturday, March 29, 2008 2:56 PM
Subject: Re: Spyware advise

You've got a Zlob infection, most likely accompanied by at least one
rootkit, Vundo and SDBot-variant infections. Follow the instructions
previously posted by David or myself.
--
~PA Bear

John wrote:
> Both the above attached screens appear from time to time.
>
> Thanks
>
> Regards
>
> "PA Bear [MS MVP]" wrote in message
> news:uT8cs6TkIHA.484@TK2MSFTNGP06.phx.gbl...
>> What "spy ware"?
>>
>> What anti-virus application or security suite is installed? What
>> anti-spyware applications (other than Defender)? What third-party
>> firewall (if any)?
>>
>> Unexplained computer behavior may be caused by deceptive software
>> http://support.microsoft.com/kb/827315
>>
>> Run a /thorough/ check for hijackware, including posting your hijackthis
>> log to an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine2.blogspot.com/
>> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>>
>> When all else fails, HijackThis v2.0.2
>> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
>> It will help you to both identify and remove any hijackware/spyware with
>> assistance from an expert. **Post your log to
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://castlecops.com/forum67.html,
>> http://forums.subratam.org/index.php?showforum=7,
>> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
>> review by an expert in such matters, not here.**
>>
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>>
>> John wrote:
>>> Hi
>>>
>>> I have run the following;
>>>
>>> ComboFix
>>> SpyBot
>>> SDFix
>>> SmitfraudFix
>>> smitRem
>>>
>>> But the spy ware keep coming back. What else can I run?
>>>
>>> Thanks
>>>
>>> Regards