Do I have a trojan or what?

[Adiletante]

My computer has been acting strangely, replicating files, telling me that it
has to keep replacing this one registry file, making it difficult to delete
internet cache, and occasionally, (but not recently) rebooting. Also
Svchost.exe seems to be a bit excessive in processes on my XP.
Sounds like something right?

But I can't figure out what. I have NAV with the latest definitions - even
went to Symantec for an online scan. Supposedly everything's a go.

Can anyone help?

Adiletatne

 

[Ferengi]

My computer has been acting strangely, replicating files, telling me
that it
has to keep replacing this one registry file, making it difficult to
delete
internet cache, and occasionally, (but not recently) rebooting. Also
Svchost.exe seems to be a bit excessive in processes on my XP.
Sounds like something right?

But I can't figure out what. I have NAV with the latest definitions -
even
went to Symantec for an online scan. Supposedly everything's a go.

Can anyone help?

Adiletatne

Did you try with Spybot S&D or Ad-aware ? You can also check with Process
Explorer from sysinternals
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
You can also install spywareblaster for protection.
Ferengi

 

[Adiletante]

I do have SpyWatcher installed. But I'm now downloading Spybot S&D and have
also downloaded Process Explorer. BTW - I checked on the latest file
replication and found it occured 7/30/03 6:00pm (PST). Or maybe that's just
the date when the original file was made. It replicated itself 1124 times -
fortunately it is only 1K but in my Norton recyle it's 4 K . . .

 

[Ferengi]

It is also good to check with hijackthis www.tomcoyote.org/hjt/ It's free.
If this is a trojan try with some trojan remover (like TDS, shareware but
has free trial)
tds.diamondcs.com.au/

Ferengi