Archived from groups: microsoft.public.windowsxp.general (
More info?)
John,
> These viruses/ spyware are relentless!!!
Indeed.
You might consider Silent Runners and/or Autoruns. All both of these do is
show what starts. You will be amazed. I was. HijackThis is a fine program
and I run fairly often, but it only touches the surface.
[[“Silent Runners” is not an anti-virus, an anti-trojan, or a spyware
scanner. It only pinpoints how programs start up — it does not scan the
system to identify every trace of malware. The text file it creates can be
removed for study or stored as a benchmark. ]]
Silent Runners - script documentation
http://www.silentrunners.org/sr_thescript.html
Silent Runners - Download
http://www.silentrunners.org/sr_download.html
Autoruns has a prettier GUI.
[[This utility, which has the most comprehensive knowledge of auto-starting
locations of any startup monitor (A starting list of auto-run locations was
obtained from David Solomon's "Windows Internals" seminar), shows you what
programs are configured to run during system bootup or login, and shows you
the entries in the order Windows processes them. These programs include ones
in your startup folder, Run, RunOnce, and other Registry keys. You can
configure Autoruns to show other locations, including Explorer shell
extensions, toolbars, browser helper objects, Winlogon notifications,
auto-start services, and much more. Autoruns goes way beyond the MSConfig
utility bundled with Windows Me and XP. ]]
Sysinternals Freeware - Autoruns
http://www.sysinternals.com/Utilities/Autoruns.html
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In news:e3qlw55lFHA.764@TK2MSFTNGP14.phx.gbl,
John <x@nospam.com> hunted and pecked:
> Wes,
>
> I've been running most of those utilities you mentioned for the past
> several years. I update my def. on a regular basis and had little reason
> to suspect it was malware but since you suggested it, I thought I would
> do a full system scan.
>
> I scanned the system with Ad Aware/ Spybot SD/ A squared/ & MS
> Antispyware. MS Antispyware did find a trojan horse which it successfully
> removed from the system. (On a side note, it's quite disappointing that
> my NSW 2005 did not detect this particular trojan horse during a full
> system scan).
>
> The bottom line is that it's still not fixed - even with the trojan horse
> removed. I'm sure it's a virus/ malware related. I used True Image to
> restore an image I made just right after I did my fresh install and
> applied all my MS updates from the Microsoft website. The limited
> account works just fine. So sometime between then and upto now - seems
> like my system was infected with some type of mysterious virus/ spyware
> and none of the utilities I use are able to fix the problem.
>
> I did run HiJack This! just for shits & grins and it did not turn up
> anything unusual in the scan as I recognized every single process listed
> in the log. At this point, the most feasible option seems to be to
> restore the image I made and slowly one by one - re-install all my
> programs. I do have several other partitions on this HDD (200 GB) so
> I'll have to do a full scan to see if the virus is perhaps hiding on
> those other partitions. *sigh*
>
> These viruses/ spyware are relentless!!!
>
>
> "Wesley Vogel" <123WVogel955@comcast.net> wrote in message
> news:OjOPfPslFHA.2484@TK2MSFTNGP15.phx.gbl...
>> John,
>>
>> Running Internet Explorer with a limited user account and some sort of
>> scum/spy/malware present can cause strange things to happen.
>>
>> Scan your computer for spyware.
>>
>> If you need a scan right now.
>>
>> Follow the instructions!
>> THE PARASITE FIGHT QUICK FIX PROTOCOL
>>
http://aumha.org/a/quickfix.php