I "volunteered" to help my niece by getting spyware off her desktop computer. I see I am in over my head! LOL
I first scanned with AVG Anti-Spyware and found 85 infections. So I installed Zone Alarm like I use on my computer. It is running now, but the computer rebooted twice since I started running the scan. She had told me that it was frequently restarting with her.
There is some sort of message with a black screen overlaying the desktop - and blocking her background picture. It has a "notice" with the first line a statement that spyware is installed on the computer and that an effective software to remove spyware should be installed. Then there is text below that stating that the computer had a certain IP address and it had been used to send false messages to other users. The interesting part is that when I took the computer home and installed it on my DSL line, the stated IP address did not change. LOL There is a yellow triangle in the tool bar that when selected brings up an htm file in the windows folder that provides a URL to go to to download software or to update the software if "you are having problems with it". The computer still runs slowly - even after removing the spyware I initially found.
This all started after 2 events took place in a 3 day period. She installed a anti-virus / anti-spyware software that she bought at Wal-Mart. Plus an ex-boyfriend used her computer while she was gone and she found evidence that he had gone to some porn sites. It seems that the infestation happened in that period of time.
Do these "symptoms" sound like some known malware package?? How can I track down the program on the computer that is causing this? I have gone through the installed software in Control Panel (Windows XP Package 2) and did not find anything that seemed suspicious.
Any help appreciated!
Operating System:Windows XP Home Edition
Product Name:ZoneAlarm Internet Security Suite