'Program' changing my internet login name

[Guest]

Hello,
I have at some point today been infected by a 'program' that changes the
user name on my internet connection. I dont know if the password has been
changed but I just retype both user name and password just in case. I thought
this was some thing running on PC start up but it has happened when I
disconnect from the internet and then try to reconnect. I had a look at the
running processes a soon as I saw the change and saw something
C:windows/system32/internet.exe that looked odd and was modified/created
today but I cant remove the file. I have all the up to date MS downloads as
of yesterday apart from the service pack but havent to activated my XP as I
am not sure if the hardware configuraion is finalised.

Question, is there some way I can trace back to see what I assume is a
programe that is making this change and if so how and it is what I think it
is how can I remove it, it doesnt appear in the remove program choices and
delete wont take it either? The alternative is a reinstall and I am getting
cheesed off with that idea.

Also how do I start the boot log? The help and support says a boot log is
available with the output going to a file called ntbtlog.txt but not how to
activate the boot log.

 

[Carey Frisch [MVP]]

Download Ad-aware SE and scan your PC for the presence of spyware:
http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/?id=827315

Dealing with Unwanted Spyware and Parasites
http://www.mvps.org/winhelp2002/unwanted.htm

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

-------------------------------------------------------------------------------------

:

| Hello,
| I have at some point today been infected by a 'program' that changes the
| user name on my internet connection. I dont know if the password has been
| changed but I just retype both user name and password just in case. I thought
| this was some thing running on PC start up but it has happened when I
| disconnect from the internet and then try to reconnect. I had a look at the
| running processes a soon as I saw the change and saw something
| C:windows/system32/internet.exe that looked odd and was modified/created
| today but I cant remove the file. I have all the up to date MS downloads as
| of yesterday apart from the service pack but havent to activated my XP as I
| am not sure if the hardware configuraion is finalised.
|
| Question, is there some way I can trace back to see what I assume is a
| programe that is making this change and if so how and it is what I think it
| is how can I remove it, it doesnt appear in the remove program choices and
| delete wont take it either? The alternative is a reinstall and I am getting
| cheesed off with that idea.
|
| Also how do I start the boot log? The help and support says a boot log is
| available with the output going to a file called ntbtlog.txt but not how to
| activate the boot log.