Hi Adrian C
Please see my comments in line.....
Jan,
Once again thanks for your excellent information.
You're very welcome! I truly appreciate your patience.
It seems that the update function has been compromised by some means.
I am now getting a security warning in my system tray that my Norton
AV is askew. It states "Norton Antivirus reports that it is installed
but it's status is unknown. Click recommendations for actions you can
take. The recommendations are to make sure the AV program is up to
date and active or get another AV program.
I ran a "LiveUpdate" with Norton and updated it then ran a complete
scan and it was negative....no virus' found.
I might make a suggestion here that you uninstall the Norton AV and try
installing a less intrusive program such as AVG6 Free, to see if perhaps the
Norton may be causing some interference. AVG6 Free is a very good AV, but,
not as oppressive as Norton. You can reinstall Norton if it's removal does
not resolve the problem. At least we will have one suspect accounted for.
Manually uninstalling Norton AntiVirus 2002 from Windows NT/2000/XP
http://service1.symantec.com/SUPPOR...929150461b8e5cdc88256ab80074194a?OpenDocument
(don't know if this is the right version, but, it will get you close I
think, you can check for your correct version uninstall instructions)
Download and install AVG6 Free:
http://www.grisoft.com/us/us_dwnl_free.php
Let us know back on the results of this test.
Question? Was all this e.g., my automatic update not functioning in
both IE, the loss of my IE 6 and tools in the add/remove programs
folder, and my AV automatic update all a result of SP2??? OR do
believe there was a possible hijack attempt (although I have ad-aware
and spyware in active monitor mode), I say this only because my eBay
account was hijcaked last week. Ebay did email me to confirm and the
issue was corrected within 24 hours.
Thanks once again for all your help!!!! :>)
It is certainly possible that you still have some malware or other types of
scumware on your system. Although you have already run AdAware and SpyBot,
which are very good, there are some variations of scumware out there now
that will replicate itself over and over, and even mutate to an entirely
different name, if they are not detected and cleaned properly. In view of
the failure of the Norton LiveUpdate, and a couple of other failures
mentione, which does appear suspicious and very well could be malware
related, I strongly suggest that you do the following, and carefully follow
the instructions to be sure that your system is totally free of any of these
types of warez. Once we have determined that there are no such
contributors, it will make it easier to find a solution for any remaining
problems.
Although you may have already run one or more of the programs, please do so
again according to the instructions below. Please follow all instructions
very carefully:
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Be sure to run CWShredder, Ad-aware and Spybot.
Also be sure to use the HijackThis. Please do not post your log to this
newsgroup, but to the SpywareInfo or the Aumha HiJackThis forums
http://forum.aumha.org/viewforum.php?f=30, to allow the experts there to
evaluate your log and advise you of the necessary steps to clean your
system.
CAUTION!!!!! Before you try to remove spyware using any of the programs
below, download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.
Also, get a copy of WINSOCKXPFIX available at:
http://www.spychecker.com/program/winsockxpfix.html
and
WinsockXP Fix- WinXP
http://www.spychecker.com/program/winsockxpfix.html
Also, with instructions, at
http://www.iup.edu/house/resnet/winfix.shtm
also
From LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
also ....
(NOTE: It is reported that in XP SP2, the command netsh winsock reset
will fix this problem without the need for these programs.)
or ........
Winsock Fix Utility
http://www.dfwonline.net/files/WinsockFix.zip
Also.........
Courtesy of Jim Byrd -
Download Sysclean.com, from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest pattern
file, here:
http://www.trendmicro.com/download/pattern.asp
Be sure to read the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
You might also want to get Art's updater, SYS-UP.Zip, here for future
updating of these:
http://home.epix.net/~artnpeg/.
(If you download and use the updater from the beginning, it will
automatically handle downloading the other files. Place them in a dedicated
folder after appropriate unzipping, and then run. This scan may take a long
time, as Sysclean is VERY extensive and thorough
also........
Additional information on how to protect your PC:
The Parasite Fight
http://www.aumha.org/a/quickfix.htm
More security tips at
http://www.aumha.org/a/parasite.htm
Bugs, Glitches & Stuffups:
http://www.mvps.org/inetexplorer/Darnit.htm
So how did I get infected in the first place?
http://boards.cexx.org/viewtopic.ph...ghlight=&sid=53751d8ff5915261af727df08e66ce0d
or
http://snipurl.com/980t
....I say the Butler did it.....in the Library.....with the candlestick.....
;o))
Hope this helps
Jan
Smiles are meant to be shared,
that's why they're so contagious.
Please reply to the newsgroup so others may benefit.
Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm