CrisPDuk

A folder called TSA has appeared on my PC this morning and keeps trying to activate my modem. I've tried deleting it, and also it's contents individually, but Windows keeps saying "Access Denied: Source File may be in use."

What is it, and how do I get rid The folder contains six things;

wu.exe, ts.exe, tsl.exe, tsm.exe, tsuninst.exe and a folder called rainbow.

I tried the uninstall application, but it tried to access t'internet to download more stuff


I've also had a toolbar appear on IE that I cant get rid of, it calls itself the Norton AntiVirus Toolbar, but all it has on it are links to debt management, loan & **** sites. And it keeps changing my homepage from SN to a search engine called 'bigwebportal.com'

Ps I do have zonealarm running, and my Norton subscription is current

SJ_Skyline

download CWShredder from http://www.majorgeeks.com/download4086.html and run it, let it fix everything it finds.

I've seen CWS install itself from java embedded within a web page so it will bypass zonealarm and most IE settings. Norton won't pickup on it becasue its spyware, not a virus.

If you still have problems then there is a link to HijackThis in ChrisL's post at the top of computer related

Nicks VR4

'bigwebportal.com' is part of Kazza spyware AFAIK

Are you running Kazza if so might be worth deleting it fully or has someone put it on your PC without you knowing it ???
Try running Spyware Search and Destroy , Ad-ware and CWshreder just to mate sure

Links are at the top of the Computer page

Hope this helps Nick