Open Microsoft AntiSpyware and send a suspected spyware
report from the Tools Menu.

For maximum effectiveness, proceed as follows:


Update your Microsoft Antispyware definitions. Is your
antivirus application also up to date?


Restart the machine in safe mode and Login as Administrator

Empty your IE cache and your other temporary file folders,
eg: c:\temp, c:\windows\temp or C:\Documents and
Settings\<name>\Local Settings\Temp (the path to your temp
folder will change depending on your name) - sometimes
programmes can be hidden in there - watch out for
mysterious *.exe files or *.dll files in those folders.

Go to IE Tools, Internet Options, Temporary Internet Files
{Settings Button}, View Objects, Downloaded Program Files.
Check for unrecognised objects there.

If you are running SP2, open IE--->Tools--->Manage Add-
ons, and uncheck any BHO's that you don't recognize.
A BHO disabler such as BHO Cop, BHO Demon or BHOCaptor
(non XP SP2 users only)
http://www.pcmag.com/article2/0,4149,270,00.asp
http://www.definitivesolutions.com/bhodemon.htm
http://www.webattack.com/get/bho.shtml
http://www.webattack.com/get/bho.shtml

Do a full, deep scan with Microsoft Antispyware (and,
ideally, your antivirus as well) Is your antivirus
application also up tº date?


>-----Original Message-----
>I have a trojan on my computer identified by the Beta
>Antispyware as trojan.installer.shifter. The progam
>detects it each time and indicates it is removing the
>trojan. However, when I reboot the trojan comes right
>back on my computer. I have checked everywhere it could
>be hiding. I am not a spy removal expert and would like
>some help. Can anyone tell me how to remove it.
>
>Thanks.
>.
>

Hello Engel,

i dont know how you do this but this reply belongs in "install"

Regards >*< TOM >*<

Engel schreef:
> Open Microsoft AntiSpyware and send a suspected spyware
> report from the Tools Menu.
>
> For maximum effectiveness, proceed as follows:
>
>
> Update your Microsoft Antispyware definitions. Is your
> antivirus application also up to date?
>
>
> Restart the machine in safe mode and Login as Administrator
>
> Empty your IE cache and your other temporary file folders,
> eg: c:\temp, c:\windows\temp or C:\Documents and
> Settings\<name>\Local Settings\Temp (the path to your temp
> folder will change depending on your name) - sometimes
> programmes can be hidden in there - watch out for
> mysterious *.exe files or *.dll files in those folders.
>
> Go to IE Tools, Internet Options, Temporary Internet Files
> {Settings Button}, View Objects, Downloaded Program Files.
> Check for unrecognised objects there.
>
> If you are running SP2, open IE--->Tools--->Manage Add-
> ons, and uncheck any BHO's that you don't recognize.
> A BHO disabler such as BHO Cop, BHO Demon or BHOCaptor
> (non XP SP2 users only)
> http://www.pcmag.com/article2/0,4149,270,00.asp
> http://www.definitivesolutions.com/bhodemon.htm
> http://www.webattack.com/get/bho.shtml
> http://www.webattack.com/get/bho.shtml
>
> Do a full, deep scan with Microsoft Antispyware (and,
> ideally, your antivirus as well) Is your antivirus
> application also up tº date?
>
>
>
>>-----Original Message-----
>>I have a trojan on my computer identified by the Beta
>>Antispyware as trojan.installer.shifter. The progam
>>detects it each time and indicates it is removing the
>>trojan. However, when I reboot the trojan comes right
>>back on my computer. I have checked everywhere it could
>>be hiding. I am not a spy removal expert and would like
>>some help. Can anyone tell me how to remove it.
>>
>>Thanks.
>>.
>>

Tom Emmelot <(E-Mail Removed)> wrote:

> Hello Engel,
>
> i dont know how you do this but this reply belongs in "install"

I have noticed that both Engel and Andy Manchester sometimes reply to a
message in a different group to the one that the message was first posted
in, thus losing the thread.

Maybe this is why they think their replies go missing.

--
Robin Walker [MVP Networking]
(E-Mail Removed)