Re: Hacked again???

[Christoph 'knurd' Jeschke <christoph.jeschke () gmail com>]

Valentin Höbel schrieb:

> so for the appearance of the process, he has to start the messenger
one time.

And the integrity of the msnmsgr.exe is important, too. Malware can
easily replace a existing msnmsgr.exe or simply create a new one at
another place (like Rbot did - especially if a user is over-privileged.

To be sure, the OP should take sysinternals Process Explorer.

> If he did, then the problem in this way is solved, bit if he didn't,
> there would still be an open question.

He should check very carefully every running process.