anyone heard of "Geoclean.bat" to be a mal/spyware?

[jacob]

Hi,
I found it as a new entry in my Startup programs. the date&time of
the file exactly matches yesterday's time, after logging in a certain
site. from that moment i experienced some BSOD's and restarts,
and couldn't get that page again(Error 404).
i found the file 'Geoclean.bat' at-
"... \Documents and Settings\user\Local Settings\temp\".
also found a new directory by the name of 'Geography' with one
empty subdir called 'setup', at-
"...\Program Files\Common files\Ms shared\".
i scanned the registry with a tool that found out some more classes
and interfaces with that name, that pointed to nothing, and can be
safely removed. i did so, and then deleted the above.
i can now get that page on the site that caused me troubles,
not logging in of course.
any comments?

 

[Will Denny]

Hi

Try searching for any spyware you may have on your system with the following
programs:

Spybot - http://www.safer-networking.org/
CWShredder - http://aumha.org/downloads/cwshredder.zip
Spy Sweeper - www.webroot.com
Ad-Aware - www.lavasoftusa.com

Try SpyWareBlaster to stop intrusions:

http://www.javacoolsoftware.com/spywareblaster.html

Also see the following links:

http://aumha.org/a/parasite.htm
http://mvps.org/winhelp2002/unwanted.htm

Also run a virus-check on your system with the latest definitions for your
anti virus program.

--


Will Denny

MS MVP Shell/User
Please Reply to the News Groups

 

[jacob]

Thank you Will,
i've already ran NAV 2007 and Spybot, both of which i have already,
and all came out clean.
i'm now going to install Ad-Aware Se and IE-Spyad.
a question though- are NAV 2007+Ad-Aware+IE-Spyad live
in peace together on the machine?
----
jacob

Hi

Try searching for any spyware you may have on your system with the
following
programs:

Spybot - http://www.safer-networking.org/
CWShredder - http://aumha.org/downloads/cwshredder.zip
Spy Sweeper - www.webroot.com
Ad-Aware - www.lavasoftusa.com

Try SpyWareBlaster to stop intrusions:

http://www.javacoolsoftware.com/spywareblaster.html

Also see the following links:

http://aumha.org/a/parasite.htm
http://mvps.org/winhelp2002/unwanted.htm

Also run a virus-check on your system with the latest definitions for your
anti virus program.

--


Will Denny

MS MVP Shell/User
Please Reply to the News Groups