Undetected spyware?

(Almost?) every time I log on Windows (XP Home), MS Anti-
spyware warns me of someone trying to add some (changing)
domain to the trusted domains list. The domains look
mostly suspect and obviously I always block the attempt.

So it looks like I have an unwanted piece of SW in my
machine trying(?) to do it's tricks. However, neither
Anti-spyware nor my anti-virus (Norman) finds anything. I
cannot identify anything suspicious in the registry run
sections or startup menu.

What's going on, anyone?

Restart the computer in safe mode and run a full system scan. On the scan
page choose scan options choose full system scan.

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

"Home Master" <anonymous@discussions.microsoft.com> wrote in message
news:2a1f01c52028$f5c9f040$a501280a@phx.gbl...
> (Almost?) every time I log on Windows (XP Home), MS Anti-
> spyware warns me of someone trying to add some (changing)
> domain to the trusted domains list. The domains look
> mostly suspect and obviously I always block the attempt.
>
> So it looks like I have an unwanted piece of SW in my
> machine trying(?) to do it's tricks. However, neither
> Anti-spyware nor my anti-virus (Norman) finds anything. I
> cannot identify anything suspicious in the registry run
> sections or startup menu.
>
> What's going on, anyone?

You might check the Browser Helper Object (BHO) list via tools, advanced
tools, system explorers in Microsoft Antispyware. See if any are listed as
unknown. You can choose to reversably block an unknown object here, or to
permanently remove it.

It does sound like there is something there which is quite well hidden.
Probably going through the list of suggestions here:

http://www.aumha.org/a/quickfix.htm

and perhaps moving on to using HijackThis to create a log file and posting
that to a forum on this board, is the most likely route to getting this
cleaned up.

HijackThis provides a friendly interface to the registry and allows an
expert in a peer-reviewed public forum to help you get something unknown
cleaned. It can take several iterations of posting and cleaning, but this
is the way to do the job with an unknown bug at this point.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

"Home Master" <anonymous@discussions.microsoft.com> wrote in message
news:2a1f01c52028$f5c9f040$a501280a@phx.gbl...
> (Almost?) every time I log on Windows (XP Home), MS Anti-
> spyware warns me of someone trying to add some (changing)
> domain to the trusted domains list. The domains look
> mostly suspect and obviously I always block the attempt.
>
> So it looks like I have an unwanted piece of SW in my
> machine trying(?) to do it's tricks. However, neither
> Anti-spyware nor my anti-virus (Norman) finds anything. I
> cannot identify anything suspicious in the registry run
> sections or startup menu.
>
> What's going on, anyone?