in the 'making an unattended windows xp cd' section of this site, in the advanced section, where you create your own boot up screen (to replace the one windows has) it says to use a program called "boot editor". SPYWARE!!!!!!!!!!!!!!!!!!!!!!! this program creates a kernel .exe you put in your system32 folder. then you have windows call this kernel at bootup instead of the one it normally does. i create a kernel and named it 'singlekernel.exe' as soon as this .exe ran i noticed my internet connection was hijacked. i can tell cause i have 56k and lots of weird traffic kept going out. i checked netstat -n and a long list of weird connections were there. i know it was this program that did it cause i reformated with my original windows cd and the spyware/trojan was gone. but as soon i ran this kernel .exe the trojan came back. it doesn't show up in scanners but i know it was this program that did it. just a heads up.
