On Tue, 07 Oct 2003 17:41:23 GMT, "Jeremy" <jeremy@no-spam-thanks.com>
wrote:

>x-no-archive: yes
>
>I just discovered this NG, and I only recently was introduced to spyware,
>when my browser was hijacked by Xupiter.com. I was trying to download a
>Java applet to enter a chatroom using my browser, and I got more than I
>bargained for . . .
>
>I have completely lost the ability to use MSN's search engine, by typing the
>word "GO" followed by the browse subject, into my address bar. I don't know
>how to de-install IE6 and then reinstall it (if that is even possible), so I
>have learned to live with the situation.
>
>Here is my question:
>
>What anti-spyware or other software should I be running?
>
>Right now I have McAfee Anti-Virus, updated every couple of days. I have
>LavaSoft AdAware, and it has found and disinfected a number of spyware
>items, I also run SpyBot daily. I also have Spyware Blaster, and I have
>immunized every item on their list. Finally, I have Spyware Guard running
>in the background.
>
>I do a complete virus scan every couple of days, and I have it set to filter
>internet downloads at other times (I don't keep it running in the
>background, because it slows my system down to an unacceptable level.
>
>I also have ZoneAlarm, latest freeware version, running at all times, and it
>is set to its default settings. I have it set to go to Internet Lock after
>15 minutes of inactivity.
>
>I also use Anonymizer Private Surfing, and I always browse any unfamiliar
>sites using it at maximum security, with encrypted URLs and SSH encryption
>for downloaded pages.
>
>Finally, I use PC Guardian encryption on a couple of sensitive directories.
>I ordinarily leave the application turned off, except when I need to view or
>work with an encrypted file.
>
>I do keep seeing an Alexa URL ("Related.htm," I think), that keeps popping
>up when I scan with SpyBot S&D. I clean it off, and a few days later it
>reappears. I have no idea what it is that I am doing that enables this file
>to keep coming back.
>
>Have I covered all the bases? Is there anything else I should be doing?
>Are there any web sites that offer information on this stuff? I'd
>appreciate any information or suggestions.
>
>Thanks.

You could add HijackThis. HJT checks for spyware by looking for
traces, rather than obvious signatures like AA and SSD. I ran HJT a
couple months ago, and posted the log file at SWI Forums. Got the
reply "nothing interesting there". So occasionally I rerun HJT, and
compare the latest log against my clean log.

HJT requires manual effort (by the SWI Forums experts), and manual
effort in the comparison, but it's one more line of defense.

You might want to verify the security settings in your browser:
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/index.php
https://testzone.secunia.com/browser_checker/

Paranoia comes from experience - and is not necessarily a bad thing.

Cheers,


Chuck
cacrollthespam@yahoo.com
Spam sucks - PLEASE get rid of the spam before emailing me!