Confused - scan results

[Alt Beer]

I'm running Windows 2000 SP4 with all latest patches with Kaspersky
6.0.1.411 The system is normally stable with just the occasional IE6
encountered a problem and has to close.


So I decided to run some spy / adware scans. (never done before)

Ad-Aware SE Personal found only low level tracking cookies which I deleted.

Webroot's Spysweeper Scan (free) found:
EHTTP Hijacker and
SKIN98 system monitor (cant remove using the free version)

Spybot S & D found:
Alexa related c:\windows\web\related.htm and
Conducent Timesink c:\windows\tsad.dll (which Spybot deleted)

Counter Spy V2 found only 3 low level tracking cookies.

Do I believe Webroot's Spysweeper free Scan findings?
(EHTTP Hijacker and SKIN98 system monitor)

Are there any other reliable scans I can try?

How can I remove EHTTP Hijacker and SKIN98 system monitor?

Thanks

[David H. Lipman]

From: "Alt Beer" <null@null.nul>

| I'm running Windows 2000 SP4 with all latest patches with Kaspersky
| 6.0.1.411 The system is normally stable with just the occasional IE6
| encountered a problem and has to close.
|
| So I decided to run some spy / adware scans. (never done before)
|
| Ad-Aware SE Personal found only low level tracking cookies which I deleted.
|
| Webroot's Spysweeper Scan (free) found:
| EHTTP Hijacker and
| SKIN98 system monitor (cant remove using the free version)
|
| Spybot S & D found:
| Alexa related c:\windows\web\related.htm and
| Conducent Timesink c:\windows\tsad.dll (which Spybot deleted)
|
| Counter Spy V2 found only 3 low level tracking cookies.
|
| Do I believe Webroot's Spysweeper free Scan findings?
| (EHTTP Hijacker and SKIN98 system monitor)
|
| Are there any other reliable scans I can try?
|
| How can I remove EHTTP Hijacker and SKIN98 system monitor?
|
| Thanks
|

This looks like a False Positive.
"Alexa related c:\windows\web\related.htm"

What were "EHTTP Hijacker" and "SKIN98 system monitor " found in ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Alt Beer]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:LN0Ah.10304$Yn4.1893@trnddc03...
> From: "Alt Beer" <null@null.nul>
>
> | I'm running Windows 2000 SP4 with all latest patches with Kaspersky
> | 6.0.1.411 The system is normally stable with just the occasional IE6
> | encountered a problem and has to close.
> |
> | So I decided to run some spy / adware scans. (never done before)
> |
> | Ad-Aware SE Personal found only low level tracking cookies which I
deleted.
> |
> | Webroot's Spysweeper Scan (free) found:
> | EHTTP Hijacker and
> | SKIN98 system monitor (cant remove using the free version)
> |
> | Spybot S & D found:
> | Alexa related c:\windows\web\related.htm and
> | Conducent Timesink c:\windows\tsad.dll (which Spybot deleted)
> |
> | Counter Spy V2 found only 3 low level tracking cookies.
> |
> | Do I believe Webroot's Spysweeper free Scan findings?
> | (EHTTP Hijacker and SKIN98 system monitor)
> |
> | Are there any other reliable scans I can try?
> |
> | How can I remove EHTTP Hijacker and SKIN98 system monitor?
> |
> | Thanks
> |
>
> This looks like a False Positive.
> "Alexa related c:\windows\web\related.htm"
>
> What were "EHTTP Hijacker" and "SKIN98 system monitor " found in ?
>
> --
> Dave

Webroot's Spysweeper Scan (free) only reported the items, unfortunately
didn't show where they where located. I'll look again and see if the
program can show more info. Only downloaded it yesterday.

Thanks

[Alt Beer]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:LN0Ah.10304$Yn4.1893@trnddc03...
> From: "Alt Beer" <null@null.nul>
>
> | I'm running Windows 2000 SP4 with all latest patches with Kaspersky
> | 6.0.1.411 The system is normally stable with just the occasional IE6
> | encountered a problem and has to close.
> |
> | So I decided to run some spy / adware scans. (never done before)
> |
> | Ad-Aware SE Personal found only low level tracking cookies which I
deleted.
> |
> | Webroot's Spysweeper Scan (free) found:
> | EHTTP Hijacker and
> | SKIN98 system monitor (cant remove using the free version)
> |
> | Spybot S & D found:
> | Alexa related c:\windows\web\related.htm and
> | Conducent Timesink c:\windows\tsad.dll (which Spybot deleted)
> |
> | Counter Spy V2 found only 3 low level tracking cookies.
> |
> | Do I believe Webroot's Spysweeper free Scan findings?
> | (EHTTP Hijacker and SKIN98 system monitor)
> |
> | Are there any other reliable scans I can try?
> |
> | How can I remove EHTTP Hijacker and SKIN98 system monitor?
> |
> | Thanks
> |
>
> This looks like a False Positive.
> "Alexa related c:\windows\web\related.htm"
>
> What were "EHTTP Hijacker" and "SKIN98 system monitor " found in ?
>
> --
> Dave


"EHTTP Hijacker" has one reference:
HKLM \ software \ microsoft \ windows \ currentversion \ url \ prefixes \ II
www.

"SKIN98 system monitor" has two references:
HKCR \ skfile \

HKLM \ software \ classes \ skfile

Thanks

[David H. Lipman]

From: "Alt Beer" <null@null.nul>


|
| "EHTTP Hijacker" has one reference:
| HKLM \ software \ microsoft \ windows \ currentversion \ url \ prefixes \ II
| www.
|
| "SKIN98 system monitor" has two references:
| HKCR \ skfile \
|
| HKLM \ software \ classes \ skfile
|
| Thanks
|

Neither are anything to worry about and are relatively insignificant.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Alt Beer]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:II1Ah.10308$Yn4.9214@trnddc03...
> From: "Alt Beer" <null@null.nul>
>
>
> |
> | "EHTTP Hijacker" has one reference:
> | HKLM \ software \ microsoft \ windows \ currentversion \ url \ prefixes
\ II
> | www.
> |
> | "SKIN98 system monitor" has two references:
> | HKCR \ skfile \
> |
> | HKLM \ software \ classes \ skfile
> |
> | Thanks
> |
>
> Neither are anything to worry about and are relatively insignificant.
>
>
> --
> Dave


Thanks for your help