With respect that tool, just run, does not invite the sending of files that are suspected of being infected. It merely sends log files, according to the display on screen.
The Adware (that might not be the right term, but that is how it appears here) attempts to pop up IE7 windows and display chinese adverts. The infection is currently not being detected by Spyware Doctor, nor by McAfee security suite, nor by Prevx1. But using McAfee Privacy tool it is possible to detect that something on the computer is attempting to access websites such as j7y.net . That has now been blocked using the McAfee firewall, and indeed IE7 has been stopped from accessing the internet. (Firefox is preferred anyway). And the router box also has a facility to block any access to websites and j7y.net etc have been added to the facility.
The source of the infection? My wife, and it is her computer we are talking about, is a student and sometimes does work in collaboration with other students, two of whom are Chinese! I would like to forward an RTF file to you, originating from one of those Chinese students. I have a suspicion, rightly or wrongly, that you might find something totally new within that RTF file.
Why is that file suspected? My wife gave them a file, size about 110K, and after they added just a page or two of text the file size grew to over 4MB.
I look forward to reading your further comments.
Last edited by John; 12-20-2006 at 12:33 PM.
|