PC Help Forum - Anti-Virus http://www.pchelpforum.com Anti-Virus Advice and Support en Fri, 20 Nov 2009 22:25:43 GMT vBulletin 1 http://www.pchelpforum.com/images/styles/pchelpforum/misc/rss.jpg PC Help Forum - Anti-Virus http://www.pchelpforum.com Avast message... http://www.pchelpforum.com/anti-virus/80886-avast-message.html Wed, 18 Nov 2009 20:18:39 GMT In Avast, Whenever the virus database gets updated,a message displays saying " Your virus database has been updated "

Is there anyway to disable that message from appearing ? ]]> Anti-Virus davesam http://www.pchelpforum.com/anti-virus/80886-avast-message.html Help with a boot or bios virus. http://www.pchelpforum.com/anti-virus/80834-help-boot-bios-virus.html Tue, 17 Nov 2009 21:36:31 GMT So i'm having some computer laptop virus, it might be a boot or bios virus. I have taken my laptop to computer "experts" but they could not figure out what was wrong. I have tried to reinstall the OS, Windows XP, but it does not work. When its creating a partion or whatever on the percentage bar on bottom it stops around 60% and just stays there forever, I know this is a problem, because I have reinstalled the OS before. The computer people also told me they did that and did have any luck, they also showed me. On the bios, it shows:

IDE Adapter 0 Master [None]
IDE Adapter 1 Master [CD-Rom]

The first one should be the hard drive but its not there. and after you boot the pc and let it load or whatever, it goes black for a couple of seconds then the Intel Boot Agent loads up, it shows:

Intel (R) Boot Agent Version 4.1.08
Copyright (C) 1997-2002, Intel Corporation
PXE-E61: Media test failure, check cable
PXE-M0F: Exiting Intel Boot Agent.
Operating System not found.


I have no idea what this means, well except for the last part, but I am unsure why. Can someone please help me. ]]> Anti-Virus SynfulAdrian http://www.pchelpforum.com/anti-virus/80834-help-boot-bios-virus.html Question: Threat Fire http://www.pchelpforum.com/anti-virus/80768-threat-fire.html Mon, 16 Nov 2009 11:51:01 GMT
Quote:
Traditional antivirus protection fails you when you need it most - That's when you need ThreatFire

 Consumers spend over a billion dollars a year on security software to keep their PCs safe. Every month they spend countless hours configuring and updating their software. And yet every week millions of users are infected by new threats that their traditional antivirus does not stop.
Why? Traditional antivirus solutions cannot protect you until after they've discovered a new threat and produced a signature to counter it.
ThreatFire is different. It does not rely on signatures, but instead constantly analyzes your computer's behavior to detect and block any malicious activity. ThreatFire protects immediately so you know your PC and your valuable data is always secure.
The above statement is from Threatfire website....
Long before once i used Threat fire.i was not having any problems in my pc that time.I also had an antivirus and firewall including it.I used it for 3 months,i think.Some 3 times as i remember,,Threat Fire alerted me for suspicious activity.I dont know it is really protecting or not.

As they are mentioning ,,Threatfire dont rely on signatures, but can analyze computer's behavior ...If this is that much better antivirus,I wonder why it is not appearing in search results from pages 1 to 5.

Anyone knows better information about Threat Fire ?

Is it really useful ? ]]> Anti-Virus davesam http://www.pchelpforum.com/anti-virus/80768-threat-fire.html Internet Explorer and Firefox hanging http://www.pchelpforum.com/anti-virus/80738-internet-explorer-firefox-hanging.html Sun, 15 Nov 2009 18:53:31 GMT I have been trying to sort out my friends PC and not sure if it has a software problem, malware, although I have run several programs through which... I have been trying to sort out my friends PC and not sure if it has a software problem, malware, although I have run several programs through which show nothing, or maybe even a faulty hard drive. The system is XP Pro.
I have run through Hijack This and here is the log file:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:00:36, on 15/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Spyware Doctor\Update.exe
C:\Documents and Settings\Jo\Desktop\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. Antivirus Software – BitDefender - Virus Protection Security Now! - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe

--
End of file - 5653 bytes

If anyone has any ideas as to what the problem is, as Internet Explorer and Firefox are hanging and sometimes even windows on the computer are hard to open.
Thanks ]]> Anti-Virus slickspiv http://www.pchelpforum.com/anti-virus/80738-internet-explorer-firefox-hanging.html Trojan Horse virus http://www.pchelpforum.com/anti-virus/80728-trojan-horse-virus.html Sun, 15 Nov 2009 14:49:42 GMT Hey, guys. Upon start-up, AVG detects the following virus: Trojan horse BHO.KNI. I've also taken a screenshot of the Virus Vault ( http://i37.tinypic.com/2r3a7as.jpg ), which shows a few other threats. In addition, AVG has also detected a virus called Boha/Elsabah/Boh. I've done a Quick Scan with Malwarebytes' Anti-Malware, and it detected a few KeyLoggers which it seemed to have deleted successfully. Ideally I would like to avoid formatting, since all the re-downloading of Windows updates will nail my limited Internet usage. Creating an ISO of an Updated Windows also sounds troublesome. (: Helpful or not helpful, I'll also post a HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:44:36 PM, on 11/15/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\acs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
C:\WINDOWS\System32\ASUSTPE.exe
C:\Program Files\P4P\P4P.exe
C:\WINDOWS\ASScrPro.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\Program Files\ATK Hotkey\WDC.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\WordWeb\wweb32.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\WINDOWS\System32\StkCSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Danie\Desktop\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [ATKHOTKEY] "C:\Program Files\ATK Hotkey\Hcontrol.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUSTPE] C:\WINDOWS\System32\ASUSTPE.exe
O4 - HKLM\..\Run: [PowerForPhone] "C:\Program Files\P4P\P4P.exe"
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\WINDOWS\ASScrPro.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Anti Trojan Elite] C:\Program Files\Anti Trojan Elite\TJEnder.exe :NO
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - S-1-5-18 Startup: CCC.lnk = ? (User 'SYSTEM')
O4 - S-1-5-18 Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: CCC.lnk = ? (User 'Default user')
O4 - .DEFAULT Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe (User 'Default user')
O4 - Startup: CCC.lnk = ?
O4 - Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1248253852765
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Atheros Configuration Service (ACS) - Atheros - C:\WINDOWS\System32\acs.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkCSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
--
End of file - 8663 bytes

Any assistance would be appreciated. ]]> Anti-Virus Sidd http://www.pchelpforum.com/anti-virus/80728-trojan-horse-virus.html Resolved: AVG 9.0 Antivirus upgrade http://www.pchelpforum.com/anti-virus/80542-avg-9-0-antivirus-upgrade.html Wed, 11 Nov 2009 16:20:47 GMT I have AVG Antivirus software 8.5 which will expire on December 1, 2009. I have been trying to upgrade to 9.0 but when attempt the AVG installation... I have AVG Antivirus software 8.5 which will expire on December 1, 2009. I have been trying to upgrade to 9.0 but when attempt the AVG installation I get a error message which indicates "download MSVC Redistributables Installation fail".

I tried downloading it with a parameter "msvcfix.bat" but I still get the same message. I also tried downloading the Microsoft Visual C++ libraries but I tells me that the network sources is unavailabe.

Any suggestions? ]]> Anti-Virus Kitkat http://www.pchelpforum.com/anti-virus/80542-avg-9-0-antivirus-upgrade.html 212 infections in sysWOW64 folder? Help http://www.pchelpforum.com/anti-virus/80509-212-infections-syswow64-folder-help.html Tue, 10 Nov 2009 17:10:24 GMT Hi, my wife's laptop was out of date with Norton for a few months now. I uninstalled it and tried Avira yesterday but it was running too slow with a lot of pop up warning that interferred with normal laptop use. So, I uninstalled it and ran AVG and Ad-ware, each finding an absur 212 infected .dll files with trojans in my windows\SysWOW64 folder. AVG was unable to "heal" any of them and I dont know what is safe to "remove" without harming my computer. Please help! Here is my log from last night's scan. THanks.

Bigtex03


Scan "Scan whole computer" was finished.Infections;"212";"0";"212"Warnings;"19";"19";"0"Folders selected for scanning:;"Scan whole computer"Scan started:;"Tuesday, November 10, 2009, 3:36:58 AM"Scan finished:;"Tuesday, November 10, 2009, 8:01:32 AM (4 hour(s) 24 minute(s) 33 second(s))"Total object scanned:;"1019797"User who launched the scan:;"Ashley"InfectionsFile;"Infection";"Result"C:\Windows\SysWOW64\jscript32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\imapi32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\glu3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\GameUXLegacyGDFs32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\fde32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\EncDec32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\els32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\EAPQEC32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\eapphost32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\eapp3hst32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dxtrans32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dxmasf32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dxdiagn32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dtsh32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dsuiext32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dssec32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dsprop32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dskquota32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dsauth32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\ds16gt32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\drmv2clt32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dpx32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dpnlobby32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dpnhpast32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dpnaddr32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dplayx32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dot3msm32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dot3gpclnt32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dot3api3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dot3api32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\docprop32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dnshc32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmvdsitf32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmsynth32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmscript32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmloader32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmdskres3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmdskres32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmdskres232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmdlgs3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmdlgs32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmcompos3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dmcompos32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dispex3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dispex32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\diskcopy32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dinput3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dinput32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dimsroam32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dhcpsapi3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dhcpsapi32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\DHCPQEC3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\DHCPQEC32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dhcpcsvc63232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dhcpcsvc632.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dhcpcsvc323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dhcpcsvc3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dhcpcsvc32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dhcpcmonitor32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dfshim3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dfshim32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\DfrgRes3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\DfrgRes32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dfrgifps3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dfrgifps32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\DevicePairingProxy3232.dll;"Tr ojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\DevicePairingProxy32.dll;"Troj an horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\DevicePairing32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\deskperf3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\deskperf32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\deskadp3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\deskadp32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\ddrawex3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\ddrawex32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\ddraw32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dciman3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dbghelp3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dbghelp32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dbgeng32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\dataclen32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\d3dx9_273232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\d3dx9_2732.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\d3dim70032.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\d3d932.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\d3d832.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\d3d10core32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\d3d1032.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\d3d10_132.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\ctl3d3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cscdll32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cscapi3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cscapi32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptsvc3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptsvc32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptnet3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptnet32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptext323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptext3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptext32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptdll3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptdll32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cryptdlg32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\crtdll323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\crtdll3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\crtdll32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\credui3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\credui32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\credssp32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\corpol323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\corpol3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\corpol32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\console323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\console3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\console32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\connect3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\connect32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comuid3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comuid32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comsvcs323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comsvcs3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comsvcs32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comsnap3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comsnap32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comres3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comres32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comrepl3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comrepl32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\compstui323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\compstui3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\compstui32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\compobj3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\compobj32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\CompatUI32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comdlg323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comdlg3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comcat323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comcat3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\comcat32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\colorui3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\colorui32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\COLORCNV3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\COLORCNV32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\colbact3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\colbact32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cnvfat3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cnvfat32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmutil32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmpbk3232323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmpbk32323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmpbk323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmpbk3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmlua32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmipnpinstall32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmicryptinstall3232.dll;"Troja n horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmicryptinstall32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmdial323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmdial3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmcfg32323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmcfg323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cmcfg3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\clusapi3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\clusapi32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cliconfg3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cliconfg32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\clfsw323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\clfsw3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\clbcatq323232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\clbcatq3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\clbcatq32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\clb32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cic3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cic32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\CHxReadingStringIME3232.dll;"T rojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\CHxReadingStringIME32.dll;"Tro jan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\chsbrkr3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\chsbrkr32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cfgbkend32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\certmgr32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\CertEnroll32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cdosys32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\catsrvps32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\capisp32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cabinet3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\cabinet32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\C_IS20223232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\C_IS202232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\C_G1803032.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\BttnCmns32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\btpanui32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\blackbox3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\blackbox32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\bitsprx532.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\bitsprx232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\bidispl32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\batmeter32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\AzSqlExt3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\AzSqlExt32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\azroles32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\avrt3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\avrt32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\avifil3232.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\AuxiliaryDisplayCpl32.dll;"Tro jan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\AuxiliaryDisplayApi32.dll;"Tro jan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\autoplay32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\authui32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\AuthFWSnapin32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\AudioSes32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\AudioEng32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\atmlib32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\atl7132.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\atiumdag32.dll;"Trojan horse Agent2.JNE";"Infected"C:\Windows\SysWOW64\atioglxx32.dll;"Trojan horse Agent2.JNE";"Infected"WarningsFile;"Infection";"Result"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@stat.dealtime[2].txt:\stat.dealtime.com.f58c396a;"Found Tracking cookie.Dealtime";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@stat.dealtime[2].txt;"Found Tracking cookie.Dealtime";"Healed"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@revsci[2].txt:\revsci.net.f7ac007f;"Found Tracking cookie.Revsci";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@revsci[2].txt:\revsci.net.e9dbeb91;"Found Tracking cookie.Revsci";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@revsci[2].txt:\revsci.net.6215368c;"Found Tracking cookie.Revsci";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@revsci[2].txt:\revsci.net.55564293;"Found Tracking cookie.Revsci";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@revsci[2].txt:\revsci.net.50e13b1b;"Found Tracking cookie.Revsci";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@revsci[2].txt:\revsci.net.44927ec;"Found Tracking cookie.Revsci";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@revsci[2].txt:\revsci.net.2df99d79;"Found Tracking cookie.Revsci";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@revsci[2].txt;"Found Tracking cookie.Revsci";"Healed"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@euroclick[2].txt:\euroclick.com.87cecae8;"Found Tracking cookie.Euroclick";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@euroclick[2].txt:\euroclick.com.11d3633a;"Found Tracking cookie.Euroclick";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@euroclick[2].txt;"Found Tracking cookie.Euroclick";"Healed"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@burstnet[2].txt:\burstnet.com.c4fe2ebb;"Found Tracking cookie.Burstnet";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@burstnet[2].txt:\burstnet.com.a3218a37;"Found Tracking cookie.Burstnet";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@burstnet[2].txt:\burstnet.com.27341d57;"Found Tracking cookie.Burstnet";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@burstnet[2].txt;"Found Tracking cookie.Burstnet";"Healed"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@bluestreak[2].txt:\bluestreak.com.bf396750;"Found Tracking cookie.Bluestreak";"Moved to Virus Vault"C:\Users\Ashley\AppData\Roaming\Microsoft\Windows\ Cookies\Low\ashley@bluestreak[2].txt;"Found Tracking cookie.Bluestreak";"Healed" ]]> Anti-Virus bigtex03 http://www.pchelpforum.com/anti-virus/80509-212-infections-syswow64-folder-help.html Question: Best antivirus program to use with Windows 7 http://www.pchelpforum.com/anti-virus/80344-best-antivirus-program-use-windows-7-a.html Sat, 07 Nov 2009 00:04:17 GMT Hi, I am currently running windows 7. And I was wondering whats the best free, and not free anivirus programs for Win 7? Hi, I am currently running windows 7. And I was wondering whats the best free, and not free anivirus programs for Win 7? ]]> Anti-Virus musicv22 http://www.pchelpforum.com/anti-virus/80344-best-antivirus-program-use-windows-7-a.html Hello!.. Programs refuse to open randomly? http://www.pchelpforum.com/anti-virus/80214-hello-programs-refuse-open-randomly.html Wed, 04 Nov 2009 05:40:11 GMT Hi! I'm new here, and thought I would check out the forum!.. I hope this is the right place to put the thread. o.o;

Anyway. I noticed a few weeks ago that out of the blue, not a single program would open. Each one came up with their own error. EXE files from games, paint program, FireFox, even Task Manager. Basicly any program would not open, and each one came with up with an error. So, I shut down my computer and restart it. It goes to a black screen for about four minutes, before finally shutting down completely. I turn it back up, and it's perfectly fine.

Exceeeept. The same thing happend again just today. I've ran full scans with Avast!, and a few other anti-virus programs, and not a single things pops up. I'm just wondering if there is some compatability error, being Vista and all, or some software bug.. Or perhaps an evil virus. >_>

I'm planning on backing up everything, just to be safe. I really don't want to have to reboot my computer... Since... I'm not too sure how to go about doing that, since I do not have a backup disk. ;-;

Thanks! ]]> Anti-Virus Mocho http://www.pchelpforum.com/anti-virus/80214-hello-programs-refuse-open-randomly.html Avira AntiVir Problems? Fake Version? http://www.pchelpforum.com/anti-virus/79979-avira-antivir-problems-fake-version.html Sun, 01 Nov 2009 02:21:46 GMT My computer has always had a lot of problems with viruses. I downloaded Spybot - Search & Destroy a while ago which, when coupled with Windows Defender, protected it for a while. Then, a few months ago, I turned on my computer and found that my background had been replaced with some message about my computer needing to download some fake anti-virus program, and small "system notifications" would periodically appear trying to get me to download some product.


Okay, so it was just another virus hijacking my system, right? Apparently not. I tried to open up both Windows Defender and Spybot, but my computer said there was an error that kept either of them from working. Suspicious, to say the least. I tried rebooting my computer in safe mode and opening the programs, but only Spybot worked. Then, I ran Spybot but it said it couldn't find any problems. When I restarted it normally, though, there the background and notifications were. I couldn't even go on the internet without the virus(es?) opening up more fake anti-virus sites.

I searched online (on a friend's computer) for a good anti-virus program that was supposed to be able to solve this problem. I found quite a few that pointed me toward Avira AntiVir Personal Edition. Well, after researching it to make sure it wasn't just the kind of scam I'd been trying to avoid, I downloaded it from free-av.com, the site that all the reviews I trusted kept pointing at.

It downloaded, but the computer got the "blue screen of death" right as it was opening. I thought that might be because the virus(es?) were shutting the program down like they had Windows Defender and Spybot, so I restarted my computer and Avira successfully in safe mode. It found quite a few virus(es), but since it was in safe mode, it couldn't access them so, after checking to make sure it wasn't anything vital, I told it to delete the files the next time the computer was rebooted.

When I turned on my computer, the fake-background was gone...and replaced by a blank red/burgundy color background. I went to go change it to my old background, but the computer wouldn't let me. Interestingly enough, the background is the exact same color as the background of the umbrella-logo Avira uses (highly suspicious). Now, I keep getting error messages (in the form of the usual triangle with an exclamation mark) in the corner of my screen, telling me that various key system files were missing and I needed to "run the Chkdsk utility". I tried to open up Internet Explorer, but all I got past my homepage were random advertisements. When I tried to open Firefox, I got a message that it couldn't start because it was "xul.dll was not found". Now, Avira said that the computer is clean, but it obviously isn't. And Spybot and Windows Defender still won't run.

In short, I think I might have messed up my computer even worse than it already was, not to mention that I might have told Avira (if it was even Avira to begin with?) delete key files on my computer. Please, can anyone help me? I'm completely at

Before anyone asks, I am typing this on a friend's computer. ]]> Anti-Virus Rainstorms http://www.pchelpforum.com/anti-virus/79979-avira-antivir-problems-fake-version.html Resolved: Troube uninstalling Avira AntiVir http://www.pchelpforum.com/anti-virus/79916-troube-uninstalling-avira-antivir.html Fri, 30 Oct 2009 12:43:42 GMT Hi All,

Recently I've been using Avira AntiVir Personal (Free Edition), as my Anti Virus. Yesterday I attempted an update but found that the update progress bar wasnt moving at all, as well as the program displaying an estimated completion time of 26 hours. My internet connection was fine as everything else was responding normally. Anyways, I deactivated the program after attempting an update many times then uninstalled it (which appeared successful).

I then downloaded the newest release from the official site and installed. upon activating it I noticed that the guard was still set to disabled. Although the option is there to enable it no matter how many times I click it, the program says the guard is deactivated, even though I can still scan etc.

I've decided to go back to AVG, which I've downloaded. However I cant seem to uninstall Avira. I can open in, run it, scan with it, everything but it isnt showing up in the Add/ Remove Programs list. I've also tried Revo, CCleaner and even the Avira uninstaller, all which fail to pick it up. Any help would be appreciated.

Cheers ]]> Anti-Virus Buckethead http://www.pchelpforum.com/anti-virus/79916-troube-uninstalling-avira-antivir.html Is there any way to find out the backdoor? http://www.pchelpforum.com/anti-virus/79749-there-any-way-find-out-backdoor.html Tue, 27 Oct 2009 06:53:59 GMT When you hacked by some one, is there any effective way to find out the backdoor quickly and accurately?Thank you in advance. When you hacked by some one, is there any effective way to find out the backdoor quickly and accurately?Thank you in advance. ]]> Anti-Virus wildsniper http://www.pchelpforum.com/anti-virus/79749-there-any-way-find-out-backdoor.html Vista home and Trend Micro - printer sharing http://www.pchelpforum.com/anti-virus/79516-vista-home-trend-micro-printer-sharing.html Sun, 25 Oct 2009 11:05:53 GMT http://www.hardforum.com/showthread.php?t=1338456 I have got one of my client has got a simple office network with three PCs (2 desktops A and B... http://www.hardforum.com/showthread.php?t=1338456

I have got one of my client has got a simple office network with three PCs (2 desktops A and B and one laptop C,,,,,all of them have got Vista Home edition).

Those desktop are connected through a modem router.

He bought a computer B recently and it has a Trend Micro Internet Security installed on it,,,,,,,a USB printer is connected to this B PC to be shared with A and C.

The other two PCs have not got Trend Micro Internet Security (I am aware of security implication , this is not the issue of our thread)

the printer is shared but A and C can not ping and can not print.

I am sure that the problem lies with the Firewall setting for Trend Micro Internet Security, because when I shut down it from A and C I can ping the B and I can print ,,,,while when Trend Micro Internet Security is running I can not ping B and I can not print.

I tried to search how to configure firewall to enable printer sharing I could not find that
XP, Vista, Printer Sharing and One BIG Mess - Vista Forums
Quote:
If using Norton, McAfee, Trend Micro I.S., make sure file and printer sharing is enabled in THEIR firewall (or LAN allowed, depending on how their Exceptions are worded in their Firewall)
I tired google without any success.

Micro Trend internet security enable printer sharing how - Google Search


ActiveSync TrendMicro PC Firewall Internet Security | Windows Mobile

Any idea how to configure the firewall to enable a printer sharing ?

Thanks ]]> Anti-Virus zillah http://www.pchelpforum.com/anti-virus/79516-vista-home-trend-micro-printer-sharing.html Answered: pagefile.sys unable to be scanned !?! http://www.pchelpforum.com/anti-virus/79262-pagefile-sys-unable-scanned.html Tue, 20 Oct 2009 15:28:43 GMT Being that I'm experiencing problems with the system (with posts made in other threads) I wanted to know if all files on a pc should be able to be scanned. The reason I ask is when I do a complete scan, there is only one file that comes back that can't be scanned. It's the pagefile.sys file. I use Avira for the scan. All in all, I'm just curious to know if that might be a possible link to whats going on, or is it simply a file that can't be scanned (as said by the report)?

Thanks guys :) ]]> Anti-Virus gamerdad007 http://www.pchelpforum.com/anti-virus/79262-pagefile-sys-unable-scanned.html Some AV components cannot be enabled http://www.pchelpforum.com/anti-virus/79113-some-av-components-cannot-enabled.html Sun, 18 Oct 2009 09:51:48 GMT After a Windows crash that wouldnt load (not in safe mode, either last good config.) I upgraded from CD. Everyting seems now to work fine except the... After a Windows crash that wouldnt load (not in safe mode, either last good config.) I upgraded from CD. Everyting seems now to work fine except the AV (Kaspersky) which says: Some components cannot be enabled. That happens
becos klif.sys file in C:\WINDOWS\system32\drivers is stopped.
Any idea why/what to do?
ty ]]> Anti-Virus LucyFair http://www.pchelpforum.com/anti-virus/79113-some-av-components-cannot-enabled.html