From: "Victor Laszlo" <vlaszlo@worldnet.att.net>

| Hi David,
|
| Actually I went ahead and removed both Java and Netscape, which
| HighjackThis indicated was installing these files through Netscape.
| Now that I have removed Java and Netscape 7.1 the files are coming in
| through IE's Browser Helper Object facility. I have located place in
| the Registry where all BHO's are loacate and deleted all of the keys
| refering to anything that is NOT Spybot. But, the BHO's continue to be
| reinstalled on each boot of the operating system. Any ideas how I can
| put a stop to this? I don't think this is as simple as removing past
| spyware. This is a new one. So new that I can't even find a name to it
| yet, although it started when I tried to remove cmdServices.
|

It has been a while since I replied.

Netscape was NEVER your problem. Sun Java may be realted IFF it is a vulnerable version but
upgrading to a new version and removing the vulnerable version will keep Java Applet
capabilities (if desired).

If you have a Vundo it is difficult to remove but not impossible. It may use a BHO as well
as a the Winlogon/Notify function. It also has a soem decent self preservation teqniques.

Did you actually run Atribune's VUNDOFIX.EXE as requested ?

I am willing to assist you but not if you don't reply again for almost two weeks.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp