I've discovered Matewatcher is on my computer.  Is there anyway I can
find out how long it has been on my computer?

Also, can I take control to see what info it has already given out?

---

Request for Question Clarification by sublime1-ga on 31 Aug 2006 00:14 PDT

arizonamike...

You may be able to tell the install date by examining the 'last
modified' dates of the files installed with the program, especially
files which might have been modified during installation, such as:
C:\WORKSSETUP\DATA\Cpanel\settings.ini

A full list of files installed with this program is on this page
from Symantec:
http://www.symantec.com/security_response/writeup.jsp?docid=2006-022412-0239-99&tabid=2

As for what has been sent, it's not surprising to discover that
there's no logfile of the program's activity. At best, you might
be able to observe current activity by means of a kind of software
called a "packet sniffer", but it is extremely unlikely that past
activity could be discovered.

Let me know if this satisfies your needs...

sublime1-ga

---

Clarification of Question by arizonamike-ga on 31 Aug 2006 07:47 PDT

II had already tried this only to find that
c:\WORKSETUP\DATA\Cpanel\settings.ini is not there.

Does this mean that Norton (which is running on my machine has already
in part zapped Mate Watcher making it useless?

I disovered Mate Watcher is or was on my computer using  Webroot
spysweeper free download.  I had run full system scans before with
Norton but got no indication of Mate Watcer and feel let down by
Norton.

From the file list on the Norton web site, which ones can I safley
manually delete to render Mate Watcher useless? I'm afraid to go
on-line to get the necessary removal software while it may be still
active

---

Request for Question Clarification by sublime1-ga on 31 Aug 2006 15:08 PDT

You could try to remove all but the non-malicious files (the second
list on the page). If they are in use, you will get an error message,
and you may need to boot up in Safe Mode to delete them.

But, realistically, I wouldn't hesitate to go online to get the
removal software. If there was a potential threat in doing so, I'm
certain they would have mentioned it on that page. This page has
all the info you need to eliminate it:
http://www.symantec.com/security_response/writeup.jsp?docid=2006-022412-0239-99&tabid=3

Let me know where this takes you...

sublime1-ga

---

Clarification of Question by arizonamike-ga on 06 Sep 2006 20:37 PDT

I've now done all those steps and run a test. I installed Specror on
my own computer and Norton didn't efen know it was there....That's
terrible....

Anyway. Thanks for your help. Any other tips would me most welcome. 
I'm happy you have answered my enquiery.

mike...

Thanks for confirming my input as a suitable answer. I'll repost
it here for the sake of future readers.

----------------------------------------------------------------

You may be able to tell the install date by examining the 'last
modified' dates of the files installed with the program, especially
files which might have been modified during installation, such as:
C:\WORKSSETUP\DATA\Cpanel\settings.ini

A full list of files installed with this program is on this page
from Symantec:
http://www.symantec.com/security_response/writeup.jsp?docid=2006-022412-0239-99&tabid=2

As for what has been sent, it's not surprising to discover that
there's no logfile of the program's activity. At best, you might
be able to observe current activity by means of a kind of software
called a "packet sniffer", but it is extremely unlikely that past
activity could be discovered.

-----

You could try to remove all but the non-malicious files (the second
list on the page). If they are in use, you will get an error message,
and you may need to boot up in Safe Mode to delete them.

But, realistically, I wouldn't hesitate to go online to get the
removal software. If there was a potential threat in doing so, I'm
certain they would have mentioned it on that page. This page has
all the info you need to eliminate it:
http://www.symantec.com/security_response/writeup.jsp?docid=2006-022412-0239-99&tabid=3

----------------------------------------------------------------

As for additional tips, I would strongly suggest the use of a more
effective antivirus. As noted in this previous question I answered
about creating bulletproof computer security, I personally recommend
the free version of AntiVir, which identifies what is known as 
"drive by" hidden downloads on malicious websites, and allows you
to delete them before they become activated. Following the other
recommendations given in this question, consisting mostly of free
software, will go a long way to preventing any future occurrences
of infection. I use the software I recommend, and haven't had a
successful infection in almost 3 years:
http://answers.google.com/answers/threadview?id=568868

Best regards...

sublime1-ga

This researcher is a very honest and straight person.  Keen to give a
good service and not rip you off.

BTW I use Avast! antivirus, you need to register it but it is free and
full featured, another good idea is to install and keep updated
SpywareBlaster.

SpywareBlaster:
http://www.javacoolsoftware.com/spywareblaster.html

avast! 4 Home Edition - free virus protection for home PC:
http://www.avast.com/eng/avast_4_home.html

mike...

Thanks very much for the high praise and generous tip!

sublime1-ga

Oh, by the way! Don't miss the Clarification I just added
yesterday to the previous security answer I referred you to:

In the interests of keeping this answer up to date, I feel
obligated to mention this new anti-spyware and Windows 
optimizer for Windows 2000 and XP, from Iobit.com, called
Advanced WindowsCare v2 Personal. It's free, and immunizes
better than Spyware Blaster, in addition to performing many
other optimization functions:
http://iobit.com/

Download the free-for-personal-use version from Major Geeks:
http://www.majorgeeks.com/Advanced_WindowsCare_d4991.html

sublime1-ga