Recently on my computer at work the excite private messenger has been downloaded without my approval. Intermittently while browsing online (mostly newspaper sites is where I’ve noticed it, but not always the same ones) I will receive a dialoge saying that excite private messenger has been installed, the only option being a button to click that says ‘okay’.
I have Spybot and Ad Aware, and have run both and found nothing. Norton antivirus has found nothing either. Each time I uninstall the program, but it always shows back up. Where is it likely coming from, and how can I block it in the future?
I have Spybot teatimer too and while I am prompted with a notice to deny or allow the change it doesn’t seem to make any difference as the program is installed anyways (usually before the prompt comes up).
Yes, except for rare occasions I am the only one using this computer. The installation happens while I am online, usually visiting news sites (which I do frequently at my job) but sometimes will occur when I am working on something else, such as a document or calendar. I always have my browser window open, however. I haven’t noticed a pattern to which sites I visit with relation to the installations; that is to say it’s not a single site I go to that always prompts the installation, it just seems more prevalent with the news sites.
Geez…only thing I can think of is to uninstall, then run a search or REGEDIT and search for any remaining pieces of the program and get rid of them. Of course, be careful when dickin around in the registry editor. Anyone else wanna chime in?
HijackThis! would be a good start, I’d bet. It’s been a while, but you could look for any log entry related to excite and then google for it to find out what it does. Time consuming, indeed! I taught myself to do that and haven’t had a need to mess with it for so long, I’m not so sure I remember well enough to be useful. I’d be happy to take a look-see if you emailed the log to me.