"Trojan Horse" program

[Restrain]

There is a little program that sometimes gets loaded inadvertently called SaveNow.EXE. It has an Icon that is a green $. That sucker was loaded with some trash software on the machine over a year ago by the manufactuer prior to purchase. It's used for some kind of shopping program. Then today, something came in over the internet that got past my Nortons and triggered it. It sat there and tried to package up my data and send it out on the internet to another machine. The only way to stop it was to call up Task Manager and turn it off. The clue that it was trying this was a 100% CPU usage that came up on my screen. The Task Manager showed an extremely high usage by that program.

You should check your machines and be sure it's not there.

Roger

 

[Nancy in Friday Harbor]

Roger,
Thanks for the "heads up!"
Did you contact Symantec (Norton)? This one is not showing in their virus encyclopedia. They'd probably appreciate hearing from you!!
Nancy

 

[Steve Owen]

Roger, in addition to notifying Norton, you might want to go to the Windows Update site at:

http://v4.windowsupdate.microsoft.com/en/default.asp

and install all critical updates for your system. This is something I do on a regular basis and will often eliminate vulnerabilities like the one you described.

 

[Ed Potrafke]

Go to www.download.com and download Ad-aware. It is a nifty little program, that will delete all of the spy-ware on your computer. You'd be surprised how many "free" applications that you download come bundled with that garbage. :twisted:

 

[KD247]

SaveNow has a bug that can sometimes cause 100% CPU usage, but it's not dangerous and can be easily removed.

It's a small program that generates pop-up ads for websites that are related to websites you are visiting. You probably installed the program when you downloaded BearShare, Morpheus, or Kazaa. I don't think it wants your data; it just wants to show you an advertisement.

 

[jtrotta]

Have Pest Control - from Zone Alarm - works fine from my point of view; have had no problems over the past few years- guess it's all been intercepted.

Good Luck with yours

8)