DaveB wrote: ... I've never been keen on running multiple instances of 'bug removal' progs in case they start fighting ...
That's a good policy.
I recently installed MWB on both of my netbooks and it found the same two problems on each - two instances of something called "...hijack..." in IIRC cookies. MWB claimed these were dangerous but at the same time said they were not malware, which I found very confusing. What annoyed me was that nothing else was found on the netbook which recently picked up a strange infection which made MSE both inaccessible and non-operational. A disappointing result from something that seemed to come highly recommended.
Anyway, as far as your system's concerned, I can only suggest the obvious at this point - rerun both SpyHunter and MWB after checking that their quarantine locations are both empty. It might be worth getting a third opinion as well from, say, Avast or Avira, which is what I'll be doing before deciding whether to scrap that "infected" netbook.
As it happens.. Bubble-dock (and it's friends) had hijacked my browser on this pc (IE11). I searched online in order to find something to remove it and ended up on a Microsoft Sponsored site showing SpyHunter which claimed to do just that. I downloaded and ran it and if found very many bugs.. many of which had flown onto the same time as bubble-dock. I hit the button to get rid of them all and found I had to pay £29 for the privilege. I didn't read the small print did I Nothing else I could do in the wee hours but subscribe and after 3 runs.. it said it had got rid of everything harmful. I ran it again a few days later and found 40-odd tracker cookies which it got rid of and advised that these could/would return through normal browsing. They have too. Every time I go onto Allnodes and run SpyHunter immediately after, it finds 4 infections of serving-sys. I know they're coming off Allnodes as I've tested various other sites I go to and checked with SpyHunter after each visit and they've returned a zero.. except Allnodes.
The initial infection of bubble-dock (and Co) was a one off and my fault entirely. When Windows comes up and warns (do you want to run/download this file) and you are dubious of it's pedigree.. ALWAYS say NO! I knew the file was 'hooky' but said YES.. the rest is history. I spent more on software to remove the mayhem left behind than I would have buying the product I was trying to download off a dubious site. There's a lesson there!
It's very sad, but in the last year I've picked up infections from both SimV and allnodes (and its sister train sim site) - and several times from the latter during what should have been routine file downloads but thanks to the accursed java ...
Dave, fancy infecting your computer just to get out of pulling those cards
My current protection is MWB's Anti-Exploit Premium. It claims to zap nasties before they even think about downloading.
Your post prompted me to run a scan using my expired free test version of "ordinary" MWB; it found about 50 nuisance items and quarantined them-despite expired status- but found no threats, so something is working, seeing as I downloaded a free copy of CBFS for only $34.95 from a delightfully semi-dressed Natascka in Eastern Europe last nig♂#§h