Just post the HJT log here and I can look at it. Is it the pay version of Sygate or the free? The free version has not been able to update for years because they no longer have it. They were bought out by Symantec and they trashed the free version. So if it's a version that can still get updates, then it either is not set correctly, you allowed something you should have blocked, or it just plain missed it. When you let SB (SpyBot) do the "Immunize", it automatically puts sites in the Restricted Sites Zone for you. Spyware Blaster automatically does the same thing when you "Enable all protection". So you should do both of those, and if when going to that cyber-terrorist website you don't see "Restricted site" at the lower right area of the IE window, you need to add it yourself. Just go into IE Options, go to the Security tab, click "Restricted sites" then "Sites", paste the URL in the box. If antispycheck.com is the website, then paste it in the box as *antispycheck.com, www.antispycheck.com, and *.antispycheck.com, any of those ways that it allows it. Get a load of this, as I suspected, SB won't even let me go to that website! It blocks it, so you apparently don't have it setup correctly. So after you have it setup correctly, you should not even have to add it to the Restricted sites zone. But in the future for other bad websites, that's how you do it. (Check your Cookie folder every once in a while for strange Cookies you don't recognize. These are usually Cookies placed on your PC from sites you've never visited. These come from sites that embed 3rd-party trackware/adware/malware Cookies. Open them up and get the URL, paste it into your address bar and go to the site. Sometimes you may have to add the www prefix to get to the site if it's not in the Cookie. Once at the site, you'll notice it's usually some bad website devoted to "targeted advertising" and the like, or worse. Then you can add those types of URL's to the Restricted Sites zone and those Cookies will never get on your PC again. If you have any questions about any of this, just start a new thread on it and we can address it there). -Clint God Bless Clint Hamilton, Owner http://www.OrpheusComputing.com http://www.ComputersCustomBuilt.com ----- Original Message ----- From: "LarryB" As far as I can tell only the things I want are in the start up. I ran HiJack this and CWShredder. HiJack this I'm not sure what to do with the results. On the firewall. I am using the one you recommended a number of years ago. Guess some others are better now. (Sygate) I would not know how to set up anyway. Not into zones I'm afraid. Which is why I am having the problems. ;-) Larry Browning K & L Electronics Anderson, SC Clint Hamilton-PCWorks Admin wrote: > They should be shot. Blackmail-ware from cyber-terrorists. > > Are you sure only the things you want are checked in > Msconfig? > > Check your Start Up folder. Check for Services. Run "HiJack > This" and "CWShredder". And of course run all the rest of > the > anti-malware programs. > > Then, as early as you can, get a new firewall that works. ;-) > Later on I can tell you want to do with the Restricted Sites > Zone, but SpyBot and SpyWare Blaster adds thousands of sites > to > that zone and I'm sure that's one of them. You must not have > them installed, or must not have SpyBot "Immunized". When > they > are installed and setup properly, it's not possible to > download > anything from those zones. > -Clint > > > ----- Original Message ----- > From: "LarryB" > > > During a period on the internet I was attacked by this > scanning > device > that wants me to buy their software to prevent spam etc. > > Somehow it ended up in a blinking mode in the sys tray and I > can not > get rid of it. From time to time it pops up saying my > computer > is at > risk and I should do something. > > If I click on the icon either right or left it takes me to > this > web > site. http://www.antispycheck.com/?aid=1012 > > What was also interesting was I was using FF but this came up > in IE > which I did not launch. > > I have used msconfig and the startup tab to no avail. I also > used TUT > (The ultimate troubleshooter)which to me at least tells me > what > things > are for. > > I have removed a file of sorts with the add remove programs. > > Any ideas? ========================= The list's FAQ's can be seen by sending an email to PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line. To unsubscribe, subscribe, set Digest or Vacation to on or off, go to //www.freelists.org/list/pcworks . You can also send an email to PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line. Your member list settings can be found at //www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks . Once logged in, you have access to numerous other email options. The list archives are located at //www.freelists.org/archives/pcworks/ . All email posted to the list will be placed there in the event anyone needs to look for previous posts. -zxdjhu-