Hi,
I found it as a new entry in my Startup programs. the date&time of
the file exactly matches yesterday's time, after logging in a certain
site. from that moment i experienced some BSOD's and restarts,
and couldn't get that page again(Error 404).
i found the file 'Geoclean.bat' at-
"... \Documents and Settings\user\Local Settings\temp\".
also found a new directory by the name of 'Geography' with one
empty subdir called 'setup', at-
"...\Program Files\Common files\Ms shared\".
i scanned the registry with a tool that found out some more classes
and interfaces with that name, that pointed to nothing, and can be
safely removed. i did so, and then deleted the above.
i can now get that page on the site that caused me troubles,
not logging in of course.
any comments?

------
thanks
jacob

Hi

Try searching for any spyware you may have on your system with the following
programs:

Spybot - http://www.safer-networking.org/
CWShredder - http://aumha.org/downloads/cwshredder.zip
Spy Sweeper - www.webroot.com
Ad-Aware - www.lavasoftusa.com

Try SpyWareBlaster to stop intrusions:

http://www.javacoolsoftware.com/spywareblaster.html

Also see the following links:

http://aumha.org/a/parasite.htm
http://mvps.org/winhelp2002/unwanted.htm

Also run a virus-check on your system with the latest definitions for your
anti virus program.

--


Will Denny

MS MVP Shell/User
Please Reply to the News Groups


"jacob" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
> I found it as a new entry in my Startup programs. the date&time of
> the file exactly matches yesterday's time, after logging in a certain
> site. from that moment i experienced some BSOD's and restarts,
> and couldn't get that page again(Error 404).
> i found the file 'Geoclean.bat' at-
> "... \Documents and Settings\user\Local Settings\temp\".
> also found a new directory by the name of 'Geography' with one
> empty subdir called 'setup', at-
> "...\Program Files\Common files\Ms shared\".
> i scanned the registry with a tool that found out some more classes
> and interfaces with that name, that pointed to nothing, and can be
> safely removed. i did so, and then deleted the above.
> i can now get that page on the site that caused me troubles,
> not logging in of course.
> any comments?
>
> ------
> thanks
> jacob
>

Thank you Will,
i've already ran NAV 2007 and Spybot, both of which i have already,
and all came out clean.
i'm now going to install Ad-Aware Se and IE-Spyad.
a question though- are NAV 2007+Ad-Aware+IE-Spyad live
in peace together on the machine?
----
jacob

"Will Denny" <(E-Mail Removed)> ëúá
áäåãòä:Oqkg$(E-Mail Removed)...
> Hi
>
> Try searching for any spyware you may have on your system with the
> following
> programs:
>
> Spybot - http://www.safer-networking.org/
> CWShredder - http://aumha.org/downloads/cwshredder.zip
> Spy Sweeper - www.webroot.com
> Ad-Aware - www.lavasoftusa.com
>
> Try SpyWareBlaster to stop intrusions:
>
> http://www.javacoolsoftware.com/spywareblaster.html
>
> Also see the following links:
>
> http://aumha.org/a/parasite.htm
> http://mvps.org/winhelp2002/unwanted.htm
>
> Also run a virus-check on your system with the latest definitions for your
> anti virus program.
>
> --
>
>
> Will Denny
>
> MS MVP Shell/User
> Please Reply to the News Groups
>
>
> "jacob" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hi,
>> I found it as a new entry in my Startup programs. the date&time of
>> the file exactly matches yesterday's time, after logging in a certain
>> site. from that moment i experienced some BSOD's and restarts,
>> and couldn't get that page again(Error 404).
>> i found the file 'Geoclean.bat' at-
>> "... \Documents and Settings\user\Local Settings\temp\".
>> also found a new directory by the name of 'Geography' with one
>> empty subdir called 'setup', at-
>> "...\Program Files\Common files\Ms shared\".
>> i scanned the registry with a tool that found out some more classes
>> and interfaces with that name, that pointed to nothing, and can be
>> safely removed. i did so, and then deleted the above.
>> i can now get that page on the site that caused me troubles,
>> not logging in of course.
>> any comments?
>>
>> ------
>> thanks
>> jacob
>>
>
>