I have a user who, on Friday, became infected with a whole slew of spyware/adware/malware troubles. She is our webmaster, and she knows how to protect herself online, but got bit anyway.
We have tried to rid her system of this malware, but have been having little luck. If anyone has had experience with this. We’d be thankful.
Her symptoms: Popup ads–even when IE is not currently running. She always has InterDev running and is continually being asked if she want’s to debug various poorly written pop-up ads. When we’ve searched her system, she as the following:
AutoUpdate
msbb.exe
SaveNow
Power Scan
Bargain Buddy
EbatesMoeMoneyMaker
eZuLa
FunWebProducts
ISTsvc
xxxtoolbar
Interstitial Ad
They were all installed the day her problems started. We have run Ad-aware and cleaned her system with that, but continued to have some of the problems, but with less freqency. Some of the programs removed by Ad-aware have been reinstalled. We have tried to manually remove some of the software and have edited out all the malware run statements from her registry. However, we are still getting errant behavior every once in a while.
Another user on our network had very similar behavior on her computer and had the same programs installed. I thought this user was just surfing where she shouldn’t have been.
Does this sound familiar to anyone? Is there something more I should be doing to protect our users and network from these malicious programs?