firewall reports program changes (not made by user)

Outpost pro has begun reporting changed components used by programs that I have not recently changed. Programs include IE, Crazy Browser, Opera, Eudora, ePrompter. When I check the details, the changes are always to dlls — hooker.dll (Google reveals a similarly named trojan) and msonsext.dll are two I can recall.

Because of the trojan scare, I have been blocking each reported change. I renamed hooker via DOS but that didn't help at all. So I lose internet access for each program.

I am able to "begin again" by replacing my system files with old backups but before the day ends, programs begin to return to Outpost's warning list... around we go again endlessly.

No viruses show up with AVG6 or Avast (both suitably updated) same story with AdAware and SpybotS&D.

Can anyone please help me with advice?

 

For starters, it would help a lot if you send those DLL's to submit@diamondcs.com.au as they may be trojan DLL's

They would be loaded by an EXE, so if you send your autostart entries that would help more. Run ASViewer (http://www.diamondcs.com.au/index.php?page=asviewer) and show ALL autostarts by pressing F2 F3 F4, then choose SAVE and email the saved text file as well

submit@diamondcs.com.au