Spyware problems - advice needed

Credo · 12 Jun 2007 at 10:54

For the last week or so, my Kerio personal firewall has been intercepting the following:

C:\windows\system32\services.exe

trying to connect to some adult website.

This is the first time I've ever had anything like this, I always avoid any dodgy websites so I have no idea where this has come from. Anyway, I've run Adaware and Spybot S&D and I'm still getting this message, and others including 'svchost' trying to access the same website and IP address.

Can anyone advise on how I can stop this without a re-build?

Thanks!

MarcLister · 12 Jun 2007 at 11:08

What av are you running?

Download http://www.safer-networking.org/en/index.html, http://www.download.com/Ad-Aware-20...045910.html?part=dl-ad-aware&subj=dl&tag=top5 and http://www.javacoolsoftware.com/spywareblaster.html to scan for and remove spyware in the case of the first two. SpywareBlaster will prevent spyware making on to your PC again.

Perhaps run a Hijackthis scan and post the results here. http://www.spywareinfo.com/~merijn/programs.php

Credo · 12 Jun 2007 at 12:20

I'm using Avast as my anti-virus soltution, always up to date via it's auto-update. I've run ad-aware and SpybotS&D already, and while they found a few problems and removed them, this little sod id still there. I'm not familiar with 'Hijackthis', what does it do?

MarcLister · 12 Jun 2007 at 12:21

http://en.wikipedia.org/wiki/Hijackthis