- Adware: redux
- Posted by Boomer on November 17th, 2003
"Jerri" <jerlapoint@nospamgbronline.com> wrote in
news:7r2dnYNKp9tHQyWiRVn-gg@gbronline.com:
lol I gave up needlepoint for the internet. ;o)
- Posted by Jerri on November 17th, 2003
I want to thank everyone who helped me clear my computer of the adware that
blasted my computer Saturday. I spent most of Sunday working on the problem.
Then this morning in my email, there was a message from something which
called itself Mitch, and by opening the letter [no attachments] the whole
thing started over again. Adware all over the place. Believe it or not,
SPYBOT has been deactivated. I tried deleting and reloading SPYBOT and it is
still deactivated.
By the way, the message in Mitch's email said that since I use Outlook
Express, I can continue to expect problems like this. Part of the origins of
the address was "mixed message".
I think I'll give up the Internet and take up needlepoint.
- Posted by Gerald Ruxton on November 17th, 2003
"Jerri" <jerlapoint@nospamgbronline.com> wrote in message
news:7r2dnYNKp9tHQyWiRVn-gg@gbronline.com...
- Posted by °Mike° on November 17th, 2003
"Mitch" is a known email only responder in this group. I suggest
you add him/her to your blocked senders list, and munge your
email address to a completely fictitious one that can't be
deciphered by humans, if you want to stop receiving nut case
replies to the address you use in newsgroups. Make sure
that the TLD you use is only INVALID. Eg. no-one@here.invalid
Now, install and run HijackThis, then post the contents of
the log here.
HijackThis
http://www.tomcoyote.org/hjt/
On Mon, 17 Nov 2003 08:47:01 -0600, in
<7r2dnYNKp9tHQyWiRVn-gg@gbronline.com>
Jerri scrawled:
--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
- Posted by Jerri on November 17th, 2003
Here are results of HijackThis [Jerri]:
Logfile of HijackThis v1.97.6
Scan saved at 2:53:05 PM, on 11/17/03
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\WS_FTP PRO\FTPSCHED.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\MOUSE\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\WINDOWS\SYSTEM\DLA\TFSWCTRL.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\PROGRAM FILES\CLEARSEARCH\LOADER.EXE
C:\PROGRAM FILES\COMMON FILES\SLMSS\SLMSS.EXE
C:\WINDOWS\MWSVM.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\PROGRAM FILES\WORDWEB\WWEB32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\JUG5W.EXE
C:\WINDOWS\SYSTEM\NVXGK7FV.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\AOL COMPANION\COMPANION.EXE
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\HIDE\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.couldnotfind.com/search_p...ount_id=135343
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.couldnotfind.com/search_p...ount_id=135343
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.gbronline.com/gbr_prod/ci...nsas%20City,MO
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.gbronline.com/gbr_prod/city.asp
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.couldnotfind.com/search_p...ount_id=135343
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.gbronline.com/gbr_prod/city.asp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://search.presario.net/scripts/r...rchbar&LC=0409
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.gbronline.com/gbr_prod/city.asp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.seekseek.com/quicksearch....&version_id=18
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft
Internet Explorer
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak =
http://www.gbronline.com/gbr_prod/ci...nsas%20City,MO
O2 - BHO: Ipswitch.WsftpBrowserHelper -
{601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\PROGRA~1\WS_FTP~1\WSBHO2K0.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM
FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {000006B1-19B5-414A-849F-2A3C64AE6939} - (no file)
O2 - BHO: DefaultSearch.SeekSeek - {5074851C-F67A-488E-A9C9-C244573F4068} -
C:\WINDOWS\IEASST.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} -
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: ISTbar - {5F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\PROGRAM
FILES\ISTBAR\ISTBAR.DLL (file missing)
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [EM_EXEC] c:\mouse\system\em_exec.exe
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [CriticalUpdate] c:\windows\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system\dla\tfswctrl.exe
O4 - HKLM\..\Run: [VirusScan Online]
"C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE"
/checktask
O4 - HKLM\..\Run: [3MMR@#94N5MQR9] C:\WINDOWS\SYSTEM\AOZDF.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [stcloader] C:\WINDOWS\SYSTEM\stcloader.exe
O4 - HKLM\..\Run: [ClrSchLoader] \Program Files\ClearSearch\Loader.exe
O4 - HKLM\..\Run: [slmss] C:\Program Files\Common Files\slmss\slmss.exe
O4 - HKLM\..\Run: [Mwsvm] C:\WINDOWS\mwsvm.exe
O4 - HKLM\..\Run: [absr] C:\WINDOWS\mwsvm.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe
SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\RunServices: [ftpqueue] C:\PROGRAM FILES\WS_FTP
PRO\FTPSCHED.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [McVsRte] C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe
/embedding
O4 - Startup: EPSON Background Monitor.lnk = C:\ESM2\Stms.exe
O4 - Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe
O4 - Startup: AOL Companion.lnk = C:\Program Files\AOL
Companion\companion.exe
O4 - Startup: Event Reminder.lnk = C:\Program
Files\Broderbund\PrintMaster\PMremind.exe
O4 - Startup: Billminder.lnk = C:\QUICKENW\BILLMIND.EXE
O4 - Startup: America Online 8.0 Tray Icon.lnk = C:\Program Files\America
Online 8.0a\aoltray.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
present
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra 'Tools' menuitem: &AltaVista Home (HKLM)
O9 - Extra button: Translate (HKLM)
O9 - Extra 'Tools' menuitem: AV &Translate (HKLM)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL (HKLM)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host (HKLM)
O9 - Extra button: Discover deskshop (HKLM)
O9 - Extra button: Real.com (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://download.macromedia.com/pub/s...sh/swflash.cab
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX 5.5
Advanced) - http://www.jdreece.com/admin/meadscr...lease/smsx.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX
Control) - http://download.macromedia.com/pub/s...irector/sw.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup
Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {A28DAC07-0D34-4A90-A0E6-CEE27208C86D} (CWDL_DownLoadControl
Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.cab
O16 - DPF: {B8E71371-F7F7-11D2-A2CE-0060B0FB9D0D} (CDToolCtrl Class) -
http://free.aol.com/tryaolfree/cdt175/aolcdt175.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) -
http://cbu.webex.com/client/v90/webex/ieatgpc.cab
O16 - DPF: {CDB74794-A3BA-4733-B6F6-59BF16D6C15A} (McAfee Smart Shop -
Update Class) - http://download.mcafee.com/molbin/mcaeng/mcsmtshp.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating
System Class) -
http://bin.mcafee.com/molbin/shared/...2/mcinsctl.cab
O16 - DPF: {99B42120-6EC7-11CF-A6C7-00AA00A47DD2} (Label Object) -
http://activex.microsoft.com/control...86/ielabel.cab
O16 - DPF: {C97AF44D-92C4-11D3-A53B-005004678019} (McAfee Clinic Cleaner
Control Class) -
http://download.mcafee.com/molbin/Cl...re/clnctrl.cab
O16 - DPF: {41453CC4-288E-11D3-A53B-005004678019} (McAfee AppClean Appclean
Class) -
http://download.mcafee.com/molbin/Cl...n/appclean.cab
O16 - DPF: {1DEFB8C0-22A7-4E58-B735-43A169CDA2AB} (CWDL_DownLoadControl
Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) -
http://photos.msn.com/r/neutral/cont...cab?4,0,1323,0
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload
Control) - http://sc.communities.msn.com/contro...UC/MsnUpld.cab
O16 - DPF: {4129EA54-F04E-11D3-BF96-00C04F0E7BE2} (CMV4 Class) -
http://www107.coolsavings.com/ltc/download/cscmv4X.cab
O16 - DPF: {D30CAFF0-087B-11D3-82D8-006094695CEC} (McAfee PC Clinic
FaManager Class) -
http://download.mcafee.com/molbin/Cl...ck/mgfactl.cab
O16 - DPF: {23047A90-8511-11D2-87A5-20C252C10000} (McAfee Clinic TreeView
Class) - http://download.mcafee.com/molbin/Shared/MGTree.cab
O16 - DPF: {5242A5A1-EF1E-11D5-B3EE-0050DAC5EBD0} (printQuick Browser Add In
(Ver4)) - http://www.ibmezprint.com/plugin/axv...tQuick1410.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) -
http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
http://v4.windowsupdate.microsoft.co...899.1513078704
O16 - DPF: {421A63BA-4632-43E0-A942-3B4AB645BE51} -
http://66.28.46.99/iwasher/pptproact...twasherpro.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) -
http://bin.mcafee.com/molbin/shared/...16/mcgdmgr.cab
O16 - DPF: {30000273-8230-4DD4-BE4F-6889D1E74167} -
http://download2.abetterinternet.com...9106/flash.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX
Class) -
http://download.weatherbug.com/minib...ansporter.cab?
O16 - DPF: {13197ACE-6851-45C3-A7FF-C281324D5489} -
http://www.2nd-thought.com/files/install.exe
"°Mike°" <ZHNTPDWBLECA@fcnzzbgry.pbz> wrote in message
news:3fc50ab7.6777669@localhost.dot.net...
- Posted by nemo on November 17th, 2003
Jerri,
For the reason that Adaware has been disabled see the following link:
http://securityresponse.symantec.com...ortalscan.html
Are you running any anti virus software?
I'm sure that °mike° will be along shortly with more suggests/help.
But in the mean time you might want to use a online scanner, the
following courtesey of °mike°:
Scan again, with at least two online scanners, and
anything except AVG.
Online Antivirus scanners:
--------------------------
http://housecall.trendmicro.com/hous...start_corp.asp
http://www.kaspersky.com/remoteviruschk.html
http://www3.ca.com/virusinfo/virusscan.aspx
http://security.symantec.com/sscv6/default.asp
http://www.pandasoftware.com/activescan/activescan.asp
http://commandondemand.com/eval/index.cfm
http://www.ravantivirus.com/scan/ [See **]
http://www.bitdefender.com/scan/licence.php
http://www.pcpitstop.com/antivirus/default.asp
http://scan.sygatetech.com/prestealthscan.html
** Caveat:
http://archives.neohapsis.com/archiv...3-07/0240.html
Anti-virus programs:
--------------------
eZ Antivirus (Computer Associates)
http://www.my-etrust.com/products/Antivirus.cfm
Vet (Computer Associates)
http://www.vet.com.au/html/products/index.html
KAV (Kaspersky)
http://www.kaspersky.com/
Sophos
http://www.sophos.com/products/software/antivirus/
NOD32
http://www.nod32.com/home/home.htm
Norman Virus Control
http://www.norman.com/products_nvc.shtml
Regards
nemo
On Mon, 17 Nov 2003 14:55:59 -0600, "Jerri"
<jerlapoint@nospamgbronline.com> wrote:
- Posted by Jerri on November 17th, 2003
Nemo,
Thanks for the advice. I'm printing off *everything* ... newsgroup messages
and web pages.
It wasn't Adaware that was disabled. It was Search and Destroy ... but the
same thing applies, probably. Maybe. Yes, I'm running McAfee Online Virus
which updates itself constantly, but doesn't seem to have much of a grip on
adware. It has *some* grip, not a *good* grip. And it's never going to
update the register. I'm going to pick out 2 of these online scans at random
and give 'em a go.
Jerri
"nemo" <nemo@nospam.xyz> wrote in message
news:rbeirv4bdua32408osj3bv0gu91psudf3f@4ax.com...
- Posted by °Mike° on November 17th, 2003
On Mon, 17 Nov 2003 14:55:59 -0600, in
<EcydndzPwvgeqCSiRVn-vw@gbronline.com>
Jerri scrawled:
<snip>
ClearSearch (IGetNet)
http://www.safersite.com/pestinfo/i/igetnet.asp
SeekSeek Search Hijacker
SeekSeek Search Hijacker
No information - SUSPECT.
Run a virus/trojan scan.
No information - Classic Sub-7 Trojan name (8 random characters).
Run a virus/trojan scan.
AOL?!
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Be sure that you actually want any or all of the above (09) entries,
and have HijackThis fix any that you don't think should be there,
or never use - particularly the "Related" items.
Have HijackThis fix this.
Not sure what this is. Video conferencing? If you don't know,
then 'fix' it. If it's needed, it will be re-downloaded.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Have HijackThis fix this.
Boy, you have a *lot* of crap loading at startup, McAfee being
one of them. And you need to do something about allowing
things to install themselves. I suggest Outpost firewall, that
has a built-in ActiveX blocker, amongst other things, so you
can stop them in their tracks.
Outpost 2.0
http://www.agnitum.com/products/outpost/
Outpost 1.0 (free)
www.agnitum.com/download/outpost1.html
Outpost Firewall Guide
http://outpostfirewall.com/guide/index.htm
IMPORTANT: Download, update and use Spyware Blaster
http://www.wilderssecurity.net/spywareblaster.html
http://www.javacoolsoftware.com/spywareblaster.html
Once you have SpyBot S&D installed again, use the
immunizer, and check off the option to block home
page change. Also install the resident BHO.
You might also want to consider WinPatrol, which will
alert you to anything that wants to register itself to
start with Windows.
http://www.winpatrol.com/features.html
Don't hesitate to post back if you still have problems.
<snip>
--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
- Posted by John Holmes on November 17th, 2003
°Mike° came up with this:
OK, he did that. Now what?
;-)
--
"It ain't much, if it ain't Dutch..."
- Posted by trout on November 17th, 2003
Jerri wrote:
My sympathies, for being preyed-upon by a moron. I'd just like to
add my opinion on the basics for safely using OE.
Have your address disguised (munged) in Usenet, as already described
in the thread. Of course; this won't help when you are specifically
targeted by an idiot; but it will prevent programs and viruses from
capturing your address, and using it against you.
Pre-filter your mail. Use another program to check mail on the
server, before it gets to OE. I'd recommend one or the other of:
Mailwasher: <http://www.mailwasher.net/
Magic Mail Monitor: <http://mmm3.sourceforge.net/>
Look at the sender, and look at the size(!). Delete suspicious items
at the server.
OE settings. The most basic line of defence. All of these settings
are under Tools > Options....
"General" tab: Uncheck "Send and receive messages at start-up".
Uncheck "check for new messages every xxx minutes". Use one of the other
programs to notify you of new mail, and screen it, first. Then use
"Send/Receive" on the toolbar to download your mail.
"Read" tab: check "Read all messages in Plain Text". You can always
change this setting back if you absolutely *must* see what lovely
stationery Aunt Martha's using; but it should be the default setting.
Especially in newsgroups.
Preview Pane: last line of defense. For *maximum* safety; this
should be *off* when going to a folder with 'unknown' content.
View > Layout > and uncheck it there. For greatest convenience; I
suggest you add "Preview" to your toolbar. Right-click the toolbar, and
select "Customize". This allows you to toggle the Preview Pane on and
off. Turn it off before you view your Inbox; or to highlight a newsgroup
post for deletion without opening.
If you apply these basics, as well as the advice (and programs) that
Mike mentioned; you can be be virtually assured of safety from viruses,
malware and trojans.
--
"And idiots like 'Mitch'."
- Posted by Jerri on November 17th, 2003
"trout" <me2@privacy.net> wrote
Thanks mucho .... suggestions printed off [I've printed off everything in
this threat, BTW] and I'm working my way through them all.
Jerri
- Posted by Jerri on November 17th, 2003
"°Mike°" <ZHNTPDWBLECA@fcnzzbgry.pbz> wrote
[bigtime snippola]
Thanks mucho ... did I mention that I downloaded HD Valet as suggested in
your "basic system maintenance" page ... and tried to unzip it and ended up
with errors up the wazoo ... and had to reboot the machine every time I
tried to unzip. I'm pretty sure it's not my unzip facility ... Monkeyzip ...
because I've used it on HijackThis since then, and it worked fine. Just
thought I'd mention it. As if I haven't burdened ya'll with enough. <G> I
think I'll be back here soon!
Thanks again.
Jerri
- Posted by °Mike° on November 17th, 2003
On Mon, 17 Nov 2003 17:49:05 -0600, in
<ct-dnYl1ItmfwySiRVn-hA@gbronline.com>
Jerri scrawled:
I wouldn't worry about the errors until you sort this mess
out that your machine is in. It's likely to be a contributing
factor to the errors.
Again, I can't stress how important it is to *not* allow things
to install themselves. Take control of your computer; never
click on attachments without having scanned them for viruses,
never allow *anything* to download, run or install unless *you*
want it to. The computer is dumb - it doesn't know better than
you.
--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
- Posted by Jerri on November 18th, 2003
"°Mike°" <ZHNTPDWBLECA@fcnzzbgry.pbz> wrote
Hmmmmm ... I've been deleting attachments unopened for quite a long time
now. I did change the Active-X settings to *not* allow installation or
whatever ... the problem was that I wandered onto a website that did things
without hesitation and an email without attachments did exactly the same
thing. Anyways, I tried to get Search and Destroy to work again after
HijackThis "fixed" things and it still comes up with the message about "do I
understand the legal things" and then I click yes [my only option] and the
screen flashes [not long enough to read] and quits.
So now I've got pages and pages of hints and instructions to work my way
through. There is still Adware popping up at me, and I'll be downloading
more spyware killers.
You may believe it or not, but I was a mainframe programmer for 20 years ...
I know how dumb computers are. And how easy they are to screw up.
As always, thanks for your help. You do good work here.
Jerri