Hi, All.
I got a fully patched (except sp2) machine here infected with all kinds of ad-ware all of a sudden. It seems like I have cleaned them all, but it doesn't look like it once I am connected to the internet again.
I do netstat at command prompt and found many connections.
Most of them are sent (Syn_Sent) to various computer on the same network. One odd connection is to alkebt.org which I can't find anything about anywhere.
I download tcpview and notice that syntwin32.exe is listening to every single port on the machine. I can't find this syntwin32.exe any where on the computer.
Can anyone please help!
Thanks in advance!
ad-wares found including....
internet optimizer
powerscan
1800solution
istbar
webtoprebate
evkionbu.exe
I got a fully patched (except sp2) machine here infected with all kinds of ad-ware all of a sudden. It seems like I have cleaned them all, but it doesn't look like it once I am connected to the internet again.
I do netstat at command prompt and found many connections.
Most of them are sent (Syn_Sent) to various computer on the same network. One odd connection is to alkebt.org which I can't find anything about anywhere.
I download tcpview and notice that syntwin32.exe is listening to every single port on the machine. I can't find this syntwin32.exe any where on the computer.
Can anyone please help!
Thanks in advance!
ad-wares found including....
internet optimizer
powerscan
1800solution
istbar
webtoprebate
evkionbu.exe
