Hijacked ?

I ran a google on web.exe and it came up with the W32.Gokar.A@mm worm. http://[email protected]
Follow the instuctions there first. All those other random named files are extremely suspect also. Did you run CWShredder earlier? msxmidi comes up as a CWS infection.
Can you zip up those random named files and email them to opera.fan.1ATgmail.com replacing AT with @ :).

Crunchie,


The worm you previously mentioned did not come up in a scan.

Interestingly, the "suspect files" we have discussed were apparently deleted from an earlier scan, and I do not see them being "reinstalled" any more. Apparently my utilities finally nailed it, whatever it was.

My antivirus detected and healed some found items while I was away, but I did not see a reference as to what it was.

I am not getting any adverse results from any scans, so for now, I guess I will consider things as 'back to normal'.

I assume nothing .... and I will continue regular scans (antivirus, HJT etc.), and will keep an eye out for any anomalies reported in scans from a.v. and utilities.

Thank you again for all your help .....


cautiously,
- Dave G.

I will take it as good news :D. Looking forward to not hearing from you in the near future :D.
You are welcome too.