For anyone interested. I had this problem on my PC (see the thread Vista above or below whichever). I didn't think it was a virus cos AVG never reported anything.

I stuffed a software firewall on and the only network activity it reported was through Windows or known apps.

Despairing I thought I'd have a go at the on-line scanners - tried Kaspersky - nothing, Trend - nothing, Panda - it told me I had some problems, named some viruses but wouldn't tell me which files without buying.

A friend recommended Malwarebytes anti-malware, and I found eXterminate-it. Both found the problems, both told me where they were located and MalwareBytes free version zapped them.

Interestingly all the naughty files were dated 22/04/08 which is about the time I bought the machine (maybe just after).

The reason I'm posting is - don't necessarily believe you're safe just cos you have a good anti-virus program installed.

Roy Lambert

Roy,

<< The reason I'm posting is - don't necessarily believe you're safe just
cos you have a good anti-virus program installed. >>

I know, I hear about this from friends all of the time, and have to go
manuall remove the malware for them.  The first thing I always look at is
the running processes and the registry.  Malware is very easy to spot if you
know where to look.

I'm almost tempted to write something....but alas, I'm a little busy.

--
Tim Young
Elevate Software
www.elevatesoft.com

Roy,

Out of interest... what version of AVG were you running?

JonD

Roy Lambert wrote:
> For anyone interested. I had this problem on my PC (see the thread Vista above or below whichever). I didn't think it was a virus cos AVG never reported anything.
>
> I stuffed a software firewall on and the only network activity it reported was through Windows or known apps.
>
> Despairing I thought I'd have a go at the on-line scanners - tried Kaspersky - nothing, Trend - nothing, Panda - it told me I had some problems, named some viruses but wouldn't tell me which files without buying.
>
> A friend recommended Malwarebytes anti-malware, and I found eXterminate-it. Both found the problems, both told me where they were located and MalwareBytes free version zapped them.
>
> Interestingly all the naughty files were dated 22/04/08 which is about the time I bought the machine (maybe just after).
>
> The reason I'm posting is - don't necessarily believe you're safe just cos you have a good anti-virus program installed.
>
> Roy Lambert

Jon


Version 8

Roy Lambert

Tim


>Malware is very easy to spot if you
>know where to look.

That's the bit I was lacking.

Roy Lambert

"Tim Young [Elevate Software]" <timyoung@elevatesoft.com> wrote in message
news:0EE789E0-3B7A-477F-AD92-3D7886D025D6@news.elevatesoft.com...
> Roy,
>
> << The reason I'm posting is - don't necessarily believe you're safe just
> cos you have a good anti-virus program installed. >>
>
> I know, I hear about this from friends all of the time, and have to go
> manuall remove the malware for them.  The first thing I always look at is
> the running processes and the registry.  Malware is very easy to spot if
> you know where to look.
>
> I'm almost tempted to write something....but alas, I'm a little busy.
>
> --
> Tim Young
> Elevate Software
> www.elevatesoft.com
You don't need to just use HijackThis  

Frans

Frans,

<< You don't need to just use HijackThis  >>

Yeah, but there are certain types of removal that need to be done manually,
like malware that hooks into the Windows logon process.

--
Tim Young
Elevate Software
www.elevatesoft.com

"Tim Young [Elevate Software]" <timyoung@elevatesoft.com> wrote in message
news:17C98D96-CB7F-4A10-86B3-46319EC54EB9@news.elevatesoft.com...
> Frans,
>
> << You don't need to just use HijackThis  >>
>
> Yeah, but there are certain types of removal that need to be done
> manually, like malware that hooks into the Windows logon process.
>
I know

But with this tool you can those

"Frans van Daalen" <Account@is.invalid> wrote in message
news:9F843992-66AE-4492-AF05-38C3051C385D@news.elevatesoft.com...
>
> "Tim Young [Elevate Software]" <timyoung@elevatesoft.com> wrote in message
> news:17C98D96-CB7F-4A10-86B3-46319EC54EB9@news.elevatesoft.com...
>> Frans,
>>
>> << You don't need to just use HijackThis  >>
>>
>> Yeah, but there are certain types of removal that need to be done
>> manually, like malware that hooks into the Windows logon process.
>>
> I know
>
> But with this tool you can those
grrr....  "you can....see.....those."

Frans,

<< But with this tool you can those
grrr....  "you can....see.....those."  >>

Yeah, it's definitely a great tool for viewing the whole situation "from
above".

--
Tim Young
Elevate Software
www.elevatesoft.com