Alt Beer
02-12-2007, 10:16 AM
I'm running Windows 2000 SP4 with all latest patches with Kaspersky
6.0.1.411 The system is normally stable with just the occasional IE6
encountered a problem and has to close.
So I decided to run some spy / adware scans. (never done before)
Ad-Aware SE Personal found only low level tracking cookies which I deleted.
Webroot's Spysweeper Scan (free) found:
EHTTP Hijacker and
SKIN98 system monitor (cant remove using the free version)
Spybot S & D found:
Alexa related c:\windows\web\related.htm and
Conducent Timesink c:\windows\tsad.dll (which Spybot deleted)
Counter Spy V2 found only 3 low level tracking cookies.
Do I believe Webroot's Spysweeper free Scan findings?
(EHTTP Hijacker and SKIN98 system monitor)
Are there any other reliable scans I can try?
How can I remove EHTTP Hijacker and SKIN98 system monitor?
Thanks
David H. Lipman
02-12-2007, 10:42 AM
From: "Alt Beer" <null@null.nul>
| I'm running Windows 2000 SP4 with all latest patches with Kaspersky
| 6.0.1.411 The system is normally stable with just the occasional IE6
| encountered a problem and has to close.
|
| So I decided to run some spy / adware scans. (never done before)
|
| Ad-Aware SE Personal found only low level tracking cookies which I deleted.
|
| Webroot's Spysweeper Scan (free) found:
| EHTTP Hijacker and
| SKIN98 system monitor (cant remove using the free version)
|
| Spybot S & D found:
| Alexa related c:\windows\web\related.htm and
| Conducent Timesink c:\windows\tsad.dll (which Spybot deleted)
|
| Counter Spy V2 found only 3 low level tracking cookies.
|
| Do I believe Webroot's Spysweeper free Scan findings?
| (EHTTP Hijacker and SKIN98 system monitor)
|
| Are there any other reliable scans I can try?
|
| How can I remove EHTTP Hijacker and SKIN98 system monitor?
|
| Thanks
|
This looks like a False Positive.
"Alexa related c:\windows\web\related.htm"
What were "EHTTP Hijacker" and "SKIN98 system monitor " found in ?
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
Alt Beer
02-12-2007, 10:54 AM
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:LN0Ah.10304$Yn4.1893@trnddc03...
> From: "Alt Beer" <null@null.nul>
>
> | I'm running Windows 2000 SP4 with all latest patches with Kaspersky
> | 6.0.1.411 The system is normally stable with just the occasional IE6
> | encountered a problem and has to close.
> |
> | So I decided to run some spy / adware scans. (never done before)
> |
> | Ad-Aware SE Personal found only low level tracking cookies which I
deleted.
> |
> | Webroot's Spysweeper Scan (free) found:
> | EHTTP Hijacker and
> | SKIN98 system monitor (cant remove using the free version)
> |
> | Spybot S & D found:
> | Alexa related c:\windows\web\related.htm and
> | Conducent Timesink c:\windows\tsad.dll (which Spybot deleted)
> |
> | Counter Spy V2 found only 3 low level tracking cookies.
> |
> | Do I believe Webroot's Spysweeper free Scan findings?
> | (EHTTP Hijacker and SKIN98 system monitor)
> |
> | Are there any other reliable scans I can try?
> |
> | How can I remove EHTTP Hijacker and SKIN98 system monitor?
> |
> | Thanks
> |
>
> This looks like a False Positive.
> "Alexa related c:\windows\web\related.htm"
>
> What were "EHTTP Hijacker" and "SKIN98 system monitor " found in ?
>
> --
> Dave
Webroot's Spysweeper Scan (free) only reported the items, unfortunately
didn't show where they where located. I'll look again and see if the
program can show more info. Only downloaded it yesterday.
Thanks
Alt Beer
02-12-2007, 11:16 AM
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:LN0Ah.10304$Yn4.1893@trnddc03...
> From: "Alt Beer" <null@null.nul>
>
> | I'm running Windows 2000 SP4 with all latest patches with Kaspersky
> | 6.0.1.411 The system is normally stable with just the occasional IE6
> | encountered a problem and has to close.
> |
> | So I decided to run some spy / adware scans. (never done before)
> |
> | Ad-Aware SE Personal found only low level tracking cookies which I
deleted.
> |
> | Webroot's Spysweeper Scan (free) found:
> | EHTTP Hijacker and
> | SKIN98 system monitor (cant remove using the free version)
> |
> | Spybot S & D found:
> | Alexa related c:\windows\web\related.htm and
> | Conducent Timesink c:\windows\tsad.dll (which Spybot deleted)
> |
> | Counter Spy V2 found only 3 low level tracking cookies.
> |
> | Do I believe Webroot's Spysweeper free Scan findings?
> | (EHTTP Hijacker and SKIN98 system monitor)
> |
> | Are there any other reliable scans I can try?
> |
> | How can I remove EHTTP Hijacker and SKIN98 system monitor?
> |
> | Thanks
> |
>
> This looks like a False Positive.
> "Alexa related c:\windows\web\related.htm"
>
> What were "EHTTP Hijacker" and "SKIN98 system monitor " found in ?
>
> --
> Dave
"EHTTP Hijacker" has one reference:
HKLM \ software \ microsoft \ windows \ currentversion \ url \ prefixes \ II
www.
"SKIN98 system monitor" has two references:
HKCR \ skfile \
HKLM \ software \ classes \ skfile
Thanks
David H. Lipman
02-12-2007, 11:45 AM
From: "Alt Beer" <null@null.nul>
|
| "EHTTP Hijacker" has one reference:
| HKLM \ software \ microsoft \ windows \ currentversion \ url \ prefixes \ II
| www.
|
| "SKIN98 system monitor" has two references:
| HKCR \ skfile \
|
| HKLM \ software \ classes \ skfile
|
| Thanks
|
Neither are anything to worry about and are relatively insignificant.
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
Alt Beer
02-12-2007, 11:50 AM
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:II1Ah.10308$Yn4.9214@trnddc03...
> From: "Alt Beer" <null@null.nul>
>
>
> |
> | "EHTTP Hijacker" has one reference:
> | HKLM \ software \ microsoft \ windows \ currentversion \ url \ prefixes
\ II
> | www.
> |
> | "SKIN98 system monitor" has two references:
> | HKCR \ skfile \
> |
> | HKLM \ software \ classes \ skfile
> |
> | Thanks
> |
>
> Neither are anything to worry about and are relatively insignificant.
>
>
> --
> Dave
Thanks for your help