I"m running windows xp home edition on a pc and we've been getting pop-ups
like crazy recently. The procedure used to creat them taxes the systems'
resources and slows the machine down. It occurs immediately upon logging
onto my dsl sympatico server. I started to do some checking into it and
found a folder in my c:/windows drive called "PCHELP".
There are two subfolders, when I try to delete anything in these, they
automatically re-appear, a few seconds after being deleted. One of the files
cannot be deleted until I restart in safe mode and shut down all services.
But even then, when I restart the machine in normal mode, the file, and the
whole "pc help" folder reappears.
I"ve found that IE has been starting automatically, but tries to link up to
outbound udp/ip ephemeral ports. I've discovered this through use of McAfee
Firewall. When I disallow the IE attempt to use this port, IE pops up again
with another ephemeral port with a number incremented by 1.
Any suggestions would be greatly appreciated.
McAfee AV doesn't seem to find anything.
My son does use Kazaa, and ms messenger, certainly this could have been the
route, but short of uninstalling kazaa, is there a script, or a buried
application in incoming traffic that can be blocked?
Suggestions?
Thankyou in advance.
