Hi Bill,

You might also take a look at:

http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

and

http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml


They are freeware utilities.
Autoruns will show you what is getting started automatically. ProcessExplorer will let you kill processes. Using the two together I've been able to clean up problems similar to what you're describing.




>Hi Ric,
>
>I don't know what program is doing it.
>I leave my computer on all the time, so I don't think it has anything to do with startup. I've rebooted and run the spy programs and they don't find anything.
>
>I just run my spy programs every morning and the spyware is back. And during the day I run it again and sometimes it's back, sometimes it's not.
>
>I can't find any website that I'm constantly viewing, so I figure it has to be somewhere in the configuration, but I don't know how to check for that stuff. David has pointed me to Regedit, so I'm going to learn how to use that and see if I can see something.
>
>
>>Bill,
>>
>>I had to evaluate a bunch of these packages and build up the defenses at my company. Here is what I found out:
>>
>>Spy Sweeper from webroot does the best job of removing spyware
>>AdAware is not so good, but it comes with 'start options' and allow silent mode, which is great for large installs and managed clients.
>>
>>Go with Spy Sweeper if it is just your machine. Based on your description of the problem it seems you have a startup program and process that keep re-loading the spyware - do you know the name? Spy Sweeper allows you to shield your startup processes and edit them.
>>
>>Let us know the name of the problematic program and we might be able to offer better help.
>>
>>-R!