us.imrworldwide.com/redsherrif.com constantly transferring my data

[mover2100]

I'm not sure if this is the right spot, or even if I'm asking my question right. I did a search but didn't find any posts referring to these data mining sites.

something called "secure-us.imrworldwide.com" is constantly transferring data from my PC when I go to a free stock chart site using Mozilla browser. It appears at the foot of my screen, and slows down my browser on that site.

When I go to the site in IE, I don't notice anything telling me it's doing it thru IE browser.

From a google search, some have ID'd it as connected to redsherrif.com, e.g., http://kalsey.com/2002/11/java_spyware/

I'm not a programmer and can't figure out how to "replaced their Java class file (measure.class) with a blank file and set it to read-only" like this blogger suggests.

I use AVG 8.0 (free virus/spyware software). I also periodically use the free AdAware to check for spyware/etc., but it's not running in the background.

I went into my Mozilla "options" menu and tried to put both these companies in the cookies "exception" file to block them both (secure-us.imrworldwide.com and redsherrif.com) but it doesn't affect it.



Is there a way to block these sites and keep them from constantly transferring data?
Or is it just one of those annoyances we have to put up w/?

i fear they are stealing my soul? ;-)

Besides the software mentioned above, my hardware is:

Dell Dimension 3000 – Desktop/Tower model
Processor Speed 2.34 GHz
512 MB RAM
Microsoft Windows XP Home Edition
Also I have service pack 3 installed recently

[evilfantasy]

Let's get a look at a HJT log and see what we can find in it.

Download and rename TrendMicro HijackThis.exe (HJT)

• Double-click on HJTInstall.
• Click on the Install button.
  
• It will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe.
  
• Upon install, HijackThis should open for you.

• Close HijackThis and rename it.
  
• Go to C:\Program Files\Trend Micro\HijackThis.exe
  
• Right click on HijackThis.exe and select Rename.
  
• Type in sniper.exe and press Enter.
  
• Right-click on sniper.exe and select Send To > Desktop (create shortcut)

• From the desktop open Hijackthis.
• If using Windows Vista, Right-click and Run As Administrator.
  
• Click on the Do a system scan and save a log file button
  
• Hijackthis will scan and then a log will open in notepad.
• Copy and then paste the entire contents of the log in your post.
  
• Do not have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Although we have renamed Hijackthis to sniper, we will still refer to it as Hijackthis or HJT.