What's the best antivirus?
- Thread starter INoi
- Start date
Muddie Murda
smile...
renew it 
But I'm not the best person to take advice from, considering that it was the only anti-virus i've used....(i think?)
But I'm not the best person to take advice from, considering that it was the only anti-virus i've used....(i think?)The thing about Norton, you'd always have to upgrade it. It doesn't keep up with all the new viruses that comes out everyday. I suggest you get some kind of anti-spyware prog. I use Ad-Aware home. Another thing that's good to have is good firewall that stops helps prevents all the spyware or viruses from getting into your system. I recommend Zone Alarm.
hakage
sarNie Egg
Kaspersky Anti-Virus Personal Pro was specially developed for advanced users seeking the most up-to-date anti-virus technologies. Kaspersky Labs implemented its most advanced technologies in this software product. Pro provides full-scale anti-virus protection for home computers running Windows 95/98/ME, Windows 2000/NT/XP operating systems, and Outlook, Outlook Express messaging programs. The software is powered by the most advanced technologies. Kaspersky Anti-Virus Personal Pro is a unique set of anti-virus and security components, some of which were previously available only for corporate clients. Now all these anti-virus tools, offering a comprehensive level of security, are available for home use. A control center unites the components that allow users to defeat the vast majority of system threats. Kaspersky Anti-Virus Personal Pro comes with, free of charge, one year of anti-virus upgrades and 24-hour technical support. Since August 2004, Kaspersky Lab has been releasing antivirus database updates on an hourly basis.
Version 5.0.325 Release date: 23.05.2005:
- Enhancements:
1. Delayed objects processing feature (Treat Infected Files) has been added to the on-demand scan process
2. Fast User Switch mode support has been added
3. Updating module has been upgraded
4. Network search feature has been enhanced and refined
5. The feature of authorization data prompt after an authorization error has been added
6. The feature of exclusions configuration by object name, verdict and by components that use this objects has been added
7. An ability to choose the type of anti-virus database and switch between anti-virus database types without starting the updating process has been added
8. The feature of displaying the list of threats contained in the anti-virus database has been implemented
9. The ability to save, load and restore the initial configuration of Kaspersky Anti-Virus has been added
10. The load on the system imposed when the on-demand scan is started has been reduced
11. An ability to select new objects for scanning (RAM, disk boot sectors, startup objects) has been added
12. An ability to exclude disk boot sectors and startup objects from the scan scope has been added
13. General application statistical data (the total number of files, messages, scripts scanned, number of viruses and suspicious objects detected) has been made available
14. An ability to disable the animation of the Kaspersky Anti-Virus icon in the system tray has been added
15. An ability to disable the incoming mail scan has been added
16. An ability to temporarily disable real-time protection for a specified time or until a specified event occurs (application restart, obtaining connection to the network) has been added
17. A new type of the distribution kit (update) has been added - the size of this kit is reduced by over 50% through excluding the database and some service files. This kit is used for updating existing installations
18. An ability to perform updates from the updates folder with incomplete structure has been added
19. The efficiency of using iCheckerТМ and iStreamsТМ technologies in the on-demand scan process has been increased
20. A bug that resulted in freezing Microsoft Windows 9x has been eliminated
Code:
http://downloads1.kaspersky-labs.com/products/release/english/homeuser/kavpersonal/kav5.0.325_personalen.exe
Code:
http://www.webfilehost.com/index.php?mode=viewupload&id=3078Muddie Murda
smile...
WHOA thank you dood! lol
darvil
sarNie Adult
There are quite a few.. there's like Panda which gives you 30 days trial.. its pretty good.. there's also AVG which offers a free version.. obviously that isn't as good as the paid version.. But to be honest Viruses seems to be a minor problem these days. The #1 threat to your PC these days is spyware/malware .. You should build defenses against those first Then work on virus.. As long as you're careful its hard to get viruses.. (for me anyway).
One day I'll do an eleborate tutorial on this program I use which will pretty much eliminate any of these pesky problems (spyware, virues) etc.. Its called Deep Freeze and its used in colleges and universities everywhere.
Anyway obviously it isn't free lolz but evil people like me.. ahh got their ways
One day I'll do an eleborate tutorial on this program I use which will pretty much eliminate any of these pesky problems (spyware, virues) etc.. Its called Deep Freeze and its used in colleges and universities everywhere.
Anyway obviously it isn't free lolz but evil people like me.. ahh got their ways
Kayla
sarNie Adult
That would be excellent! I'm having major problems with my computer concerning spywares and pop-ups. It's the most annoying thing ever. My computer is running a lot slower because of it. I run the Ad-Aware on it quite frequently, but it doesn't seem to be enough.Muddie MuRda said:
Darvil, do you know of the best/cheapest Spyware blockers that I can purchase? I've been using free version of different programs, maybe that's why it's not working as good as it should. I really do need to do something about it before my computer completely crash.
Thanks!
Kayla
hakage
sarNie Egg
are you sure darvil? ad/spy ware are the minor problems. afterall, they are the little roots of virus.Darvil said:There are quite a few.. there's like Panda which gives you 30 days trial.. its pretty good.. there's also AVG which offers a free version.. obviously that isn't as good as the paid version.. But to be honest Viruses seems to be a minor problem these days. The #1 threat to your PC these days is spyware/malware .. You should build defenses against those first Then work on virus.. As long as you're careful its hard to get viruses.. (for me anyway).
One day I'll do an eleborate tutorial on this program I use which will pretty much eliminate any of these pesky problems (spyware, virues) etc.. Its called Deep Freeze and its used in colleges and universities everywhere.
Anyway obviously it isn't free lolz but evil people like me.. ahh got their ways
[post="8308"][/post]
wanna try a real virus?- for the cheapest ad/spyware, use your common sense (more like common knowledge) - dont click on the popups or install freeware without checking whats going to be installed on ur pc..ahaha
darvil
sarNie Adult
pfff virues don't scare me.. I used to install them on my computer to see what would happenhakage said:are you sure darvil? ad/spy ware are the minor problems. afterall, they are the little roots of virus.
- for the cheapest ad/spyware, use your common sense (more like common knowledge) - dont click on the popups or install freeware without checking whats going to be installed on ur pc..ahaha
[post="8716"][/post]
Anyway those spywares are weak but really when you have a gazillion of them on your system it bogs your system down. Put it this way.. I used to hire myself out as a computer fix it dude and most of the time I was cleaning out spyware/malware out of people's system. Rarely there was a virus problem. If you watch tech news or read tech stuff you'll see that virues are out of fashion already.. spyware/malware is the most annoying thing now.. Good for computer repair businesses though.. they make alot of money
Its really easy to avoid viruses.. nowdays.. all you need is to do is to 1.) avoid using microsoft inbox 2.) have a router. As for spyware/malware I still manage to get a few once in a while. Its not all about the free software that is packed with them or the obvious sites (serial & crack dl sites). Rather you can get flooded with them if you click on the wrong link, like if someone posted a shitty link on a forum.. or even links you get from google searches (this one is really annoying). Don't pay for the free spyware programs.. unless you feel like you owe them something. I don't think its a bad idea to pay.. they are doing something good.Kayla said:
You probably just run those programs right? I don't think you've cleaned your system out of hijackers.. which are a very serious malware. Those free programs like ad-aware and spybot don't do a good job removing those. Anyway I got 2 free program here that will *hopefully* clean your system up a little better.
One is Cwshredder. Just right click and dl it or just run it. MAKE SURE you close all your browser before running it though. Now tell me how many hijackers it removed after you've done running it.
Here is another program that I like to use called Hijack This. Thsi program gets rid of the annoying problem of your browser changing its homepage randomly. MAKE sure you close all your browser and other running programs before doing this. Once you are done.. copy and paste all the things it find and post it here.. UNLESS you know which processes look *suspcious* and kill them. I don't know all the processes but some of them are pretty obvious.
Kayla
sarNie Adult
Have to agree with Darvil. I don't click on pop-up or anything. I work enough with computer to know that. And yes, you CAN and WILL get spyware installed in your computer by just going to random sites.Darvil said:Don't pay for the free spyware programs.. unless you feel like you owe them something. I don't think its a bad idea to pay.. they are doing something good.
You probably just run those programs right? I don't think you've cleaned your system out of hijackers.. which are a very serious malware. Those free programs like ad-aware and spybot don't do a good job removing those. Anyway I got 2 free program here that will *hopefully* clean your system up a little better.
One is Cwshredder. Just right click and dl it or just run it. MAKE SURE you close all your browser before running it though. Now tell me how many hijackers it removed after you've done running it.
Here is another program that I like to use called Hijack This. Thsi program gets rid of the annoying problem of your browser changing its homepage randomly. MAKE sure you close all your browser and other running programs before doing this. Once you are done.. copy and paste all the things it find and post it here.. UNLESS you know which processes look *suspcious* and kill them. I don't know all the processes but some of them are pretty obvious.
[post="8747"][/post]
Darvil, I ran Cwshreder and it didn't show any hijacker present.
I ran Hijack This and saved a log to paste for you to take a look at. Alot does look like some of the error messages or problems I've seen. Take a look and let me know which one seems like a threat. I'm not sure myself.
Logfile of HijackThis v1.99.0
Scan saved at 12:10:15 AM, on 9/15/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\WINDOWS\System32\amstream.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\aamd5326.exe
C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\wuauboot.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\apsi\wtta.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\America Online 9.0a\aoltray.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\palstart.exe
C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
C:\Program Files\interMute\SpamSubtract\SpamSubtract.exe
C:\Program Files\AOL Companion\companion.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us8.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us8.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us8.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://us8.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {25AB40FA-A563-FB9E-4F33-DC38753CC3E8} - C:\WINDOWS\system32\hnoht.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Pure Networks Port Magic] "C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe" -Run
O4 - HKLM\..\Run: [n] C:\documents and settings\owner\local settings\temp\n.exe
O4 - HKLM\..\Run: [sqG42] C:\documents and settings\owner\local settings\temp\sqG42.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [UH] C:\documents and settings\owner\local settings\temp\UH.exe
O4 - HKLM\..\Run: [ldHFYzr] C:\documents and settings\owner\local settings\temp\ldHFYzr.exe
O4 - HKLM\..\Run: [c1a7c8860c11] C:\WINDOWS\System32\amstream.exe
O4 - HKLM\..\Run: [FNjMA6w] C:\documents and settings\owner\local settings\temp\FNjMA6w.exe
O4 - HKLM\..\Run: [D6va] C:\documents and settings\owner\local settings\temp\D6va.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [41lbMr] C:\documents and settings\owner\local settings\temp\41lbMr.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [95e904819e70] C:\WINDOWS\System32\aamd5326.exe
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Ahskab] C:\WINDOWS\System32\wuauboot.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Notn] C:\Program Files\apsi\wtta.exe
O4 - Startup: spamsubtract.lnk = C:\Program Files\interMute\SpamSubtract\SpamSubtract.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0a\aoltray.exe
O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: palstart.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: AOL Connectivity Service - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: AOL Spyware Protection Service - Unknown - C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\\aolserv.exe (file missing)
O23 - Service: Symantec Event Manager - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service - Unknown - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Thanks alot for all of your help. I really appreciate it.
darvil
sarNie Adult
Go ahead and clear out your temp files, as well. Delete everything inside these folders:Kayla said:Running processes:
C:\WINDOWS\System32\amstream.exe
*amstream.exe seems to be something ugly. http://www.google.com/search?hl=th&q=amstream.exe
C:\WINDOWS\System32\aamd5326.exe
*I couldn't find anything doing a google search.. looks suspicious but it might be nothing
C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe
*WildTangent isn't something serious but I would kill it.. I don't like it.
C:\Program Files\America Online 9.0a\aoltray.exe
*Why do you have AOL installed?
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\palstart.exe
*Ok this one is a nasty thing from the google search. Get rid of it. http://www.google.com/search?hl=th&q=palstart.exe
C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
*Looks bad.. you probably want to kill this. http://www.google.com/search?hl=th&q=BackWeb-137903.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
*I can't find any info on this.. but it does look suspicious
O4 - HKLM\..\Run: [n] C:\documents and settings\owner\local settings\temp\n.exe
*see this one looks really suspicious
O4 - HKLM\..\Run: [sqG42] C:\documents and settings\owner\local settings\temp\sqG42.exe
*Another suspicious one
O4 - HKLM\..\Run: [UH] C:\documents and settings\owner\local settings\temp\UH.exe
*Another suspious
O4 - HKLM\..\Run: [ldHFYzr] C:\documents and settings\owner\local settings\temp\ldHFYzr.exe
*Ok this one looks reallly suspicious lol
O4 - HKLM\..\Run: [c1a7c8860c11] C:\WINDOWS\System32\amstream.exe
*Get rid of this.
O4 - HKLM\..\Run: [FNjMA6w] C:\documents and settings\owner\local settings\temp\FNjMA6w.exe
*Looks very suspicious
O4 - HKLM\..\Run: [D6va] C:\documents and settings\owner\local settings\temp\D6va.exe
*Another one
O4 - HKLM\..\Run: [41lbMr] C:\documents and settings\owner\local settings\temp\41lbMr.exe
*suspicious
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
*Me no like Wild tangent
O4 - HKCU\..\Run: [Notn] C:\Program Files\apsi\wtta.exe
O4 - Startup: spamsubtract.lnk = C:\Program
*wtta.exe is bad I think. looks like it records what you do.. kill it
O4 - Global Startup:
*I think this was the palstart.exe one (I accidently deleted it. That file is bad.. you see you're loading it up on startup?.. kill it.
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
*Dunno why backweb is in the HP link.. but I would kill it too.
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
*weather bug is ok I guess.. but it annoys me lol. My sister likes it though.
[post="9011"][/post]
C:\Windows\Temp\
C:\Documents and Settings\Each user\Local Settings\Temp\
BTW.. you have alot of toolbars installed.. I guess they're ok but really... you have too much I think.. google yahoo microsoft? a bit much..
I'm sure I might have missed a few here and there though but that should be good enuff.
Kayla
sarNie Adult
Awww...Thanks, Darvile! I will remove the ones you've mentioned.
LOL About AOL, well when I first got my computer 3 to 4 years ago, AOL was my internet service. I thought I had uninstalled the application already, but it could be little hiden functions that was not completely removed.
I'm not sure myself why I have so many search toolbars. Honestly, I don't even remember how I got it. :blink:
Btw, you've mentioned for me to clear out my "temp files", where are they located, or what drive?
Thanks!
LOL About AOL, well when I first got my computer 3 to 4 years ago, AOL was my internet service. I thought I had uninstalled the application already, but it could be little hiden functions that was not completely removed.
I'm not sure myself why I have so many search toolbars. Honestly, I don't even remember how I got it. :blink:
Btw, you've mentioned for me to clear out my "temp files", where are they located, or what drive?
Thanks!
darvil
sarNie Adult
You might as well take off all the AOL stuff then.. there are quite a few of stuff of it remaining lol.Kayla said:
as for the temp file.. look for the temp folder in your windows directory.. like it mentioned.. if you installed windows on your C:\ drive.. which is where most people installed it then go to C:\windows\temp .. just delete everything in there.
As for the tool bars.. you have to becareful when you install certain softwares. Sometimes when you click on next next they kinda sneak one in.. I accidently installed a google toolbar myself once lol. Anyway might as well clear some of those junk.. the less the better.. You don't need that many tool bar anyway.
darvil
sarNie Adult
comp speed up a little?Kayla said:
as for the palstart..
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\palstart.exe
do you see it there?
ummmmm should remove it.. you get that error because it already loaded itself into your memory and you can't get rid of it.. You can boot into safe mode though.. you know how to do that? F8 in the bootup then click on safemode.. From there you should be able to delete it.
AHHHHHHH!!!! PLEASE HELP ME!!! MY COMPUTER JUST CAUGHT A VIRUS...THE ALERT SAY THAT THE NAME IS CALL "TROJAN HORSE"....BUT PLEASE HELP ME...I DON'T KNOW WHICH PROGRAM SHOULD I USE...I HAVE NORTON ANTIVIRUS..AND SPY SWEEPER...BUT IT'S NOT HELPING..BECAUSE MY ALERT SAY THE VIRUS IS TO STRONG...I DON'T KNOW WHAT DO...PLEASE HELP ME...