<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns:o = "urn:schemas-microsoft-com:office:office"><HEAD>
<META http-equiv=Content-Type content=text/html;charset=iso-8859-1>
<META content="MSHTML 6.00.6000.16441" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY id=MailContainerBody
style="PADDING-RIGHT: 10px; PADDING-LEFT: 10px; FONT-SIZE: 10pt; COLOR: #000000; PADDING-TOP: 15px; FONT-FAMILY: Arial"
bgColor=#ffffff leftMargin=0 topMargin=0 CanvasTabStop="true" acc_role="text"
name="Compose message area">
<DIV>This is a variant of the Spydawn malware.</DIV>
<DIV>I had some luck cleaning it via Spyware Terminator (<A
title=http://www.spywareterminator.com/
href="http://www.spywareterminator.com">www.spywareterminator.com</A>), but you
should start by bootinhg from a clean Bart PE disc and running an anti virus
from there (see: <A title=http://www.nu2.nu/pebuilder/
href="http://www.nu2.nu/pebuilder/">http://www.nu2.nu/pebuilder/</A>)</DIV>
<DIV>(I have a BartPE disc with McAfee AntiVirus Enterprise 8.5 on a CD which I
update from time to time).</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>DONT run the thing at the Spylocked page.</DIV>
<DIV> </DIV>
<DIV>Go instead to this page and start looking for advice/help.</DIV>
<DIV> </DIV>
<DIV><A title=http://www.spywarewarrior.com/rogue_anti-spyware.htm
href="http://www.spywarewarrior.com/rogue_anti-spyware.htm">http://www.spywarewarrior.com/rogue_anti-spyware.htm</A></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=mailto:paul@paulshepard.f2s.com
href="mailto:paul@paulshepard.f2s.com">Paul Shepard</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=mailto:Sussex@mailman.lug.org.uk
href="mailto:Sussex@mailman.lug.org.uk">Sussex L U G</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, June 04, 2007 5:08 PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Sussex] XP pain</DIV>
<DIV><BR></DIV>
<DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt">Help needed.</P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p> </o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt">In windows XP, yes I know it
serves me right, I have a symbol in the running program bar flashing between a
yellow warning triangle and a blue circle with yellow X.</P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt">This keeps giving me a system
alert! which leads to an IE link to a spyware sales site at this address: <A
title=http://www.spylocked.com/?aff=334
href="http://www.spylocked.com/?aff=334"><FONT
title="http://www.spylocked.com/?aff=334 CTRL + Click to follow link"
color=#800080>http://www.spylocked.com/?aff=334</FONT></A></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p>AVG and AdAware show all
clear and right click won’t say what it is.</o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p>There appears to be
nothing in the prog menu relating to it.</o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt">How can I get rid of this
please…</P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p> </o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><o:p> </o:p></P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt">Paul
Shepard<o:p></o:p></P></DIV>
<P>
<HR>
<P></P>__ <BR>Sussex mailing list<BR>Sussex@mailman.lug.org.uk<BR>E-mail
Address: sussex@mailman.lug.org.uk<BR>Sussex LUG Website:
http://www.sussex.lug.org.uk/<BR>https://mailman.lug.org.uk/mailman/listinfo/sussex</BLOCKQUOTE></BODY></HTML>