A family member has been hit with a bug. *Opening IE brings up a yellow screen and a search engine. * Home page has been changed to http://win-eto.com/hp.htm?ID=31265 * Norton and Adaware "cannot access" Win386.swp when doing a scan Anyone know this win-eto? Where would it come from? Thanks very much for any input.

Plenty of hits The secret of life is honesty and fair dealing..if you can fake that, you've got it made.

You could try this GOOGLE Dog's Security Ideas D4

I just got rid of it tonite. I let it run in my system while I watched certain folders and the task manager to see how it worked. Had I known I was going to write this, I would have taken the time to write down all the file names, but I have partials. First, look for the following .exe files: they begin with tu88, l4t zona02 and iinstall. They hide in the windows, windows\system and windows\temp folder. Check your msconfig startup for romahere3 at or near the first line. Also, check the system registry (regedit) at these locations and delete the entry with these files: hkey_current_user\software\microsoft\windows\current version\run hkey_users\software\microsoft\windows\current version\run local_machine\software\microsoft\windows\current version\run