Spyware.MateWatcher - remotely installable?

[electricpete]

I have been a little lax with security on my computer.

I found SpyWare.Matewatcherduring a scan:

http://www.symantec.com/smb/security_response/writeup.jsp?docid=2006-022412-0239-99&tabid=1

The link says "this risk must be manuually installed"

My wife/kids say they have nothing to do with it and I believe them 100%. I am curious if there is a way this could have been remotely installed... particularly by an acquaintance who was targeting me personally.

 

[electricpete]

Actually I may have jumped the gun.

The softwared A-squared identified the directory c:\worksetup as a "trace":
Trace.Directory.Spyware.Mate.Watcher

But that directory has a lot of stuff... I think it was put in my computer by the OEM to enable me to install MSWorks if I need it (?)

Maybe just a bad call by a-squared?

 

[pechenegs]

post a log and I'll check it!


Download hijack this from the link below.Please do this. Click here:

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

to download HijackThis. Click scan and save a logfile, then post it here so
we can take a look at it for you. Don't click fix on anything in hijack this
as most of the files are legitimate.



Member of ASAP Alliance of Security Analysis Professionals

under the name khazars