Virus & Spyware Discussions

INSPIRON 1520 shuts down

mamawyan — Sun, 22 Nov 2009 14:50:55 GMT

laptop is great, but then started shutting down after status code 1073741819 is found. What do I do?

Updates - November 21, 2009

Bugbatter — Sat, 21 Nov 2009 10:25:00 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

S.O.S!!!!!

michael champ — Sat, 21 Nov 2009 11:33:10 GMT

I Have a serious problem with my desktop and I'm not at all sure what to do about it! one day i was looking for a site to find PSP things and the next thing i knew, my screen had error amount #'s and they were climbing and going bezerk and i noticed (in one of the screen flickers) the word "trojan" so I got spooked and held down the power button until the whole thing shut off. Now, it turns on, but i cant get back on the internet. I use a verizon broadband USB card as my isp. the comp. is about 4 years old, so the stuff on it is not of great importance, can someone just tell me how to just erase it all so that I can just start from scratch, like it would be blank like when I bought it? i have a windows xp start up disk to reinstall back onto it along with a few other start up disks to re-add back on. I mean, this virus or whatever i got into with this thing, wont allow me to remove my verizon program, i was trying to erase it so that i could reinstall it but it wont let me. besides that, I had a friend "fix" it a while back because it sat up unplugged for awhile because i had bought a new laptop, and he borrowed it and got into a wreck with it in his truck. Needless to say, the laptop is totaled so I need to get this desktop in working condition again.

PLEASE HELP!!!

thanks, mjc

Updates - November 20, 2009

Bugbatter — Fri, 20 Nov 2009 13:09:02 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

PC TUNE UP -- problems. Wipes out McAfee

hobnail — Thu, 19 Nov 2009 11:17:46 GMT

Just bought a inspiron 1750 last month and have had nothing but problems with the PC tune up. After the PC tune up scans, it notifies it needs to make repairs to the hard drive. After it does so, my McAfee and my windows sidebar malfunction. Have to do a system restore to fix the problem. No luck with support. They say it's a software problem and won't troubleshoot it without a charge. Getting ready to return the computer unless this gets fixed. Please help.....

Dell My Way Page-Norton Security warnings

cotatijsk — Fri, 13 Nov 2009 18:25:17 GMT

My Norton Security tool bar says that my Dell My Way Home page has drive by security threats (2).There is a red X on the Norton tool bar.

What's up with this Dell My Way susceptible to threats?

Updates - 11/19/09

ky331 — Thu, 19 Nov 2009 13:23:24 GMT

Apple QuickTime Player 7.6.5

QuickTime 7.6.5 addresses the following issues:
- Applications not reliably loading libraries required by QuickTime at startup
- Incorrect display of QuickTime movies embedded in a webpage using custom scale attributes

Comment: It's unclear yet whether this is a "security" update, or "merely a bug fix". I'll update this post, should more details become available.

Be sure to uncheck any optional toolbars/programs (e.g., iTunes) and newsletters, if offered.

(Almost 31 Meg. Ugh! )

http://www.apple.com/quicktime/download/

A Squared At It Again

dalem29 — Mon, 16 Nov 2009 23:26:59 GMT

After some problems a few weeks ago about frequent and large updates thought that the problem was solved by looking for updates more frequently. In my case that was twice about day about 12 hours apart...or less, just no more than 24 hours between searches. After a small update this morning about 9:30 came home and looking again about 3:30. The update this time was for 49748 KB...almost 50 Meg. All this after only 6 hours. Won't be using it anymore until this problem with the Ikarus engine is dealt with and would not recommend the program.

Updates - November 18, 2009

Bugbatter — Wed, 18 Nov 2009 12:28:57 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

Online Membership Scams

Bugbatter — Wed, 18 Nov 2009 00:27:29 GMT

I recall Steve Gibson of Security Now talking about Web Loyalty scams with Leo Laporte a while ago.

The Today Show warning about online membership scams is now online- Shutterfly, Classmates.com, and others.
http://today.msnbc.msn.com/id/26184891/vp/33987109#33987109

Updates - November 17, 2009

Bugbatter — Tue, 17 Nov 2009 13:30:43 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

Microsoft confirms first Windows 7 zero-day bug

ky331 — Mon, 16 Nov 2009 21:50:10 GMT

Microsoft... has confirmed that an unpatched vulnerability exists in Windows 7...

Windows Vista, Windows Server 2008, Windows XP, Windows Server 2003 and Windows 2000 are not affected...

Attacks could be aimed at any browser, not just Internet Explorer (IE)...

the company suggested [a workaround whereby] users block TCP ports 139 and 445 at the firewall. Doing so, however, would disable [=cripple] browsers as well as a host of critical services, including network file-sharing and IT group policies.

---------------

Full article: http://computerworld.co.nz/news.nsf/scrt/E9592E1A9719742ACC25766F0066B38D

(link provided courtesy of forum member mombodog)

Updates - November 16, 2009

Bugbatter — Mon, 16 Nov 2009 12:21:30 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

Live OneCare Backups after OneCare expires

paindoc — Sun, 15 Nov 2009 20:59:59 GMT

After Windows Live OneCare expires you can download and install a tool to recover bacups. Look for Windows Live OneCare backup restore.exe. It is an 81 MB program and will not load onto this page so you will have to look for it on your own,. Try this site: Windows Live OneCare Help

Restore files on a computer without Windows Live OneCare installed ... If your backup collection contains more than one disc, search the ...

help.msn.com/(bWt0PWVuLVVTJnByb2plY3Q9YTF2MQ==)/Help.aspx?market=en-US&project=a1v1&query...
· Cached page

Updates for "Patch Tuesday" - November 10, 2009

Bugbatter — Tue, 10 Nov 2009 07:52:22 GMT

This topic is for anyone who would like to discuss a specific update -- Microsoft or any others.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

Updates November 14, 2009

Bugbatter — Sat, 14 Nov 2009 13:19:12 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

Updates for Friday the 13th

Bugbatter — Fri, 13 Nov 2009 10:58:57 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

A-squared anti-malware 4.5 paid version FREE

Red Dawn — Mon, 02 Nov 2009 23:52:25 GMT

EmsiSoft is offering 1 year license of the paid version of a-squared anti-malware 4.5 absolutely FREE!

This exclusive offer will be available on 11th November 2009 at 11:11 (CET), and will be open for 24 hrs only.

OFFER PAGE

Updates - November 12, 2009

Bugbatter — Thu, 12 Nov 2009 06:11:12 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

Flash flaw puts most sites, users at risk, say researchers

Bugbatter — Fri, 13 Nov 2009 00:30:42 GMT

Hackers can exploit a flaw in Adobe's Flash to compromise nearly every Web site that allows users to upload content, including Google's Gmail, then launch silent attacks on visitors to those sites, security researchers said today....Adobe is trying to educate site administrators to close the hole on their end. But they've not had much success.

Complete article:

http://www.computerworld.com/s/article/40768/Flash_flaw_puts_most_sites_users_at_risk_say_researchers

Cyber Security Awareness Month 2009 - Summary and Links

joe53 — Fri, 13 Nov 2009 01:08:18 GMT

Published: 2009-11-01, by SANS Internet Storm Center

"... This year we examined 31 different ports/services/protocols/applications and discussed some of the major security issues. Many readers submitted comments, tips, and tricks for securing them."

http://isc.sans.org/diary.html?storyid=7504

Below are links to prior years sharing best practices by the Internet Storm Center during Cybersecurity awareness month:

SANS - 2008 Security Incident Handling tips
http://isc.sans.org/diary.html?storyid=5279

SANS - 2007 Cybersecurity Awareness tips
http://isc.sans.org/diary.html?storyid=3597

Tip of the hat to Harry Waldron for these links.
http://msmvps.com/blogs/harrywaldron/archive/2009/11/11/sans-summary-of-31-tips-for-better-port-security.aspx

Activation required for McAffe antivirus

kirannandedkar — Wed, 11 Nov 2009 06:56:05 GMT

I have bought Dell Inspiron and have got 15 month Mcaffe subscription free. but now it is asking me for account activation. when i go for account activation it ask for email address and password. i dont know which email id and password to give.

I called up Dell customer care and they asked me to contact Mcaffe support. I am really fade up of this now .

Please somebody help me.

Thanks in advance

Security Software

rickster2752 — Thu, 12 Nov 2009 17:20:40 GMT

When I bought my Dell computer both the Webroot Internet Security Essentials and the Trend Micro Antivirus software were installed. Now I am hearing that I should not have both programs running and that I should delete one of them. I this true?

Updates - November 11, 2009

Bugbatter — Wed, 11 Nov 2009 05:03:17 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

File download when clicking on "Walmart.com" link

nicc — Sun, 08 Nov 2009 07:43:34 GMT

I done a fresh installed of Winxp Media Center on my Dell Desktop. Now when I type in "walmart.com" in the address bar or click on the link on a search page it brings up a file download window. Could this be because in the past I have downloaded music from the Walmart site? Is it wanting me to reinstall the Walmart music downloader program?

Or could this be a virus type file tring to get me to install it? I am using McAfee Security Center.

nicc

MBAM false/positive atapi.sys

iroc9555 — Wed, 11 Nov 2009 17:34:57 GMT

If you scan your system with MBAM data base v.3143 you might find that C:\WINDOWS\$NtServicePackUninstall$\atapi.sys is shown as a Rootkit. Update to latest data v.3147 base to avoid this false positive. If you quarantined atapi.sys you can take it back where it belongs.

Hope it helps.

Hitman Pro 3.5.3

joe53 — Wed, 11 Nov 2009 04:10:26 GMT

Heard about this scanner at remove-malware.com from Matt. He was impressed with its detection and removal capabilities:
http://remove-malware.com/antimalware/anti-malware-reviews/hitman-3-5-3-review/

It uses 5 scan engines (from GData, NOD32, AntiVir, Prevx, and a-squared) to examine important areas of your PC for malware (rootkits, trojans, bots, viruses, worms, spyware/adware). It's available as a 30 day free trial, with full removal capability, and continues as a free scanner only thereafter. It's a simple program, with minimal configuration options, and as far as I can tell no real-time protection.

Runs on Windows XP/Vista/2000/2003/2008 and Windows 7

So I installed it, and ran a scan (disabling my resident AV and Defender first). It's a small download (4.6 MB), and installed easily.

It took only 2 minutes to complete a scan, and found 3 suspect objects: clamwin-0.93.1-setup.exe, and 2 other mozilla plugin .dll files. It took another 6 minutes to upload these files to the Scan Cloud for analysis , which declared them safe. Total time about 8 minutes - now that is fast! And no false positives, on a PC I'm almost certain is clean. I removed the clamwin installer, and the total scanner/analysis time was reduced to 1 minute 26 seconds. No conflicts encountered.

Downsides?
- Apparently no quarantine, so be careful what detections you allow it to remove.
- No English support user forum I could find.

As usual, I can't comment on its efficacy at detection/removal. It only scanned some 1100 files. But it sure is the fastest on-demand scanner I've tried. And its use of 5 scan engines from top notch programs is encouraging. I'll be keeping it for awhile, but doubt it is worth buying.

As always, try at your own risk.

Hotmail sending mail with virus for my address

osoriolara — Tue, 10 Nov 2009 15:25:38 GMT

After Combofix and HijackThis I would like to know if the analysis of the log are OK. Thanks

ComboFix 09-11-07.02 - Osorio 08/11/2009 2:57.1.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.55.1046.18.2037.1083 [GMT -2:00]
Executando de: c:\users\Osorio\Desktop\ComboFix.exe
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
ADS - drivers: deleted 208 bytes in 1 streams.
ADS - Windows: deleted 72 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((( Outras Exclusões )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-1248145978-3295770553-3091907398-500
c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\$recycle.bin\S-1-5-21-398551888-237272106-1430867366-500
c:\program files\Mx One
c:\program files\Mx One\mogtr.exe
c:\users\Osorio\AppData\Roaming\inst.exe
c:\windows\system32\drivers\RKHit.sys
c:\windows\system32\oem7.inf
c:\windows\System32\SYSInfo.ocx

.
((((((((((((((((((((((((((((((((((((((( Drivers/Serviços )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_RKHIT

(((((((((((((((( Arquivos/Ficheiros criados de 2009-10-08 to 2009-11-08 ))))))))))))))))))))))))))))
.

2009-11-07 18:50 . 2009-11-07 18:53 -------- d-----w- C:\$AVG
2009-11-07 18:50 . 2009-11-07 18:50 25608 ----a-w- c:\windows\system32\drivers\AVGIDSvx.sys
2009-11-07 18:50 . 2009-11-07 18:50 161800 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2009-11-07 18:49 . 2009-11-07 18:49 4096 d-----w- c:\programdata\avg9
2009-11-06 18:32 . 2009-11-06 18:32 -------- d-----w- c:\programdata\Yahoo! Companion
2009-10-28 12:24 . 2009-09-10 14:58 310784 ----a-w- c:\windows\system32\unregmp2.exe
2009-10-28 12:24 . 2009-09-10 14:59 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-10-13 22:47 . 2009-10-13 22:47 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-10-13 20:48 . 2009-08-04 12:34 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-10-13 20:48 . 2009-08-04 12:34 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-10-13 20:48 . 2009-09-10 16:48 218624 ----a-w- c:\windows\system32\msv1_0.dll
2009-10-13 20:48 . 2009-09-04 11:41 60928 ----a-w- c:\windows\system32\msasn1.dll
2009-10-13 20:48 . 2009-05-08 12:53 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2009-10-13 20:47 . 2009-09-14 09:29 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2009-10-13 13:45 . 2009-10-13 13:45 -------- d-----w- c:\users\Osorio\AppData\Roaming\GlarySoft
2009-10-12 16:35 . 2009-10-12 16:35 -------- d-----w- c:\program files\Naevius USB Antivirus

.
((((((((((((((((((((((((((((((((((((( Relatório Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-08 04:25 . 2006-11-06 01:32 634202 ----a-w- c:\windows\system32\prfh0416.dat
2009-11-08 04:25 . 2006-11-06 01:32 121888 ----a-w- c:\windows\system32\prfc0416.dat
2009-11-07 18:50 . 2009-04-20 13:19 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2009-11-07 18:50 . 2009-04-20 13:19 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-11-07 18:50 . 2009-04-20 13:19 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-11-07 18:50 . 2009-04-20 13:19 28424 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-11-07 18:49 . 2009-04-20 13:19 -------- d-----w- c:\program files\AVG
2009-11-07 14:43 . 2008-12-27 15:45 8192 d-----w- c:\program files\Spybot - Search & Destroy
2009-11-06 21:33 . 2008-12-27 15:45 4096 d-----w- c:\programdata\Spybot - Search & Destroy
2009-11-06 21:30 . 2008-12-15 20:10 -------- d-----w- c:\program files\CCleaner
2009-11-06 18:32 . 2008-12-26 14:50 -------- d-----w- c:\program files\Yahoo!
2009-11-02 22:42 . 2009-10-02 16:59 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-10-27 19:04 . 2009-10-05 16:37 837 ----a-w- c:\windows\WinReg.Sys
2009-10-18 00:55 . 2008-08-21 20:44 4096 d-----w- c:\program files\MP3
2009-10-13 22:52 . 2006-11-02 11:18 4096 d-----w- c:\program files\Windows Mail
2009-10-13 22:47 . 2008-08-02 21:39 4096 d-----w- c:\program files\Windows Live
2009-10-13 20:58 . 2009-06-11 17:49 -------- d-----w- c:\program files\Microsoft
2009-10-05 21:21 . 2009-10-05 20:10 1905 ----a-w- c:\windows\system32\unins000.dat
2009-10-05 21:21 . 2009-10-05 20:10 697696 ----a-w- c:\windows\system32\unins000.exe
2009-10-05 16:32 . 2009-10-05 16:32 -------- d-----w- c:\program files\Centralx
2009-10-05 15:47 . 2009-10-05 15:44 4096 d-----w- c:\program files\DAsap
2009-10-04 16:23 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-10-04 16:22 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Sidebar
2009-10-04 16:22 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Journal
2009-10-04 16:22 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Collaboration
2009-10-04 16:22 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Photo Gallery
2009-10-04 16:22 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Defender
2009-10-04 16:19 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-10-03 23:44 . 2008-08-05 23:55 -------- d-----w- c:\programdata\GbPlugin
2009-10-02 11:51 . 2008-08-05 23:55 4096 d-----w- c:\program files\GbPlugin
2009-09-23 19:51 . 2009-06-02 22:33 27368 ----a-w- c:\windows\system32\drivers\GbpKm.sys
2009-09-10 12:59 . 2008-12-25 18:30 4096 d-----w- c:\program files\Microsoft Silverlight
2009-08-29 00:27 . 2009-09-02 22:44 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-08-29 00:14 . 2009-09-02 22:44 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-08-27 05:22 . 2009-10-13 20:51 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-27 05:17 . 2009-10-13 20:51 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-08-27 05:17 . 2009-10-13 20:51 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-08-27 03:42 . 2009-10-13 20:51 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-08-15 00:24 . 2009-08-15 00:34 126976 ----a-w- c:\windows\system32\FreeMe.exe
2009-08-14 16:27 . 2009-09-09 06:18 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-08-14 15:53 . 2009-09-09 06:18 17920 ----a-w- c:\windows\system32\netevent.dll
2009-08-14 13:49 . 2009-09-09 06:18 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-08-14 13:49 . 2009-09-09 06:18 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-08-14 13:49 . 2009-09-09 06:18 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-08-14 13:49 . 2009-09-09 06:18 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-08-14 13:49 . 2009-09-09 06:18 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-08-14 13:49 . 2009-09-09 06:18 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-08-14 13:49 . 2009-09-09 06:18 10240 ----a-w- c:\windows\system32\finger.exe
2009-08-14 13:48 . 2009-09-09 06:18 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-08-14 13:48 . 2009-09-09 06:18 105984 ----a-w- c:\windows\system32\netiohlp.dll
2008-07-26 16:10 . 2008-07-26 16:10 76 --sh--r- c:\windows\CT4CET.bin
2009-01-24 14:44 . 2009-01-24 14:44 0 --sha-w- c:\windows\SDCA261D1.tmp
2008-07-26 23:41 . 2008-07-26 23:27 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

(((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vazias e legítimas por defeito não são mostradas.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2009-11-07 2010904]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ GbPluginAbn]
2009-09-23 19:47 300072 ----a-w- c:\program files\GbPlugin\gbiehabn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-07-26 16:25 10536 ----a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Digital Line Detect.lnk]
backup=c:\windows\pss\Digital Line Detect.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QuickSet.lnk]
backup=c:\windows\pss\QuickSet.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^Users^Osorio^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^HotSync Manager.lnk]
backup=c:\windows\pss\HotSync Manager.lnk.Startup
backupExtension=.Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotSync

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"SigmatelSysTrayApp"=%ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
"OEM02Mon.exe"=c:\windows\OEM02Mon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):d4,ea,d5,b4,0f,45,ca,01

R0 AVGIDSErHrvtx;AVG9IDSErHr;c:\windows\System32\drivers\AVGIDSvx.sys [07/11/2009 16:50 25608]
R0 AvgRkx86;avgrkx86.sys;c:\windows\System32\drivers\avgrkx86.sys [07/11/2009 16:50 161800]
R0 GbpKm;Gbp KernelMode;c:\windows\System32\drivers\GbpKm.sys [02/06/2009 20:33 27368]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [20/04/2009 11:19 333192]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [20/04/2009 11:19 360584]
R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\AEstSrv.exe [26/07/2008 13:55 73728]
R2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [07/11/2009 16:50 285392]
R2 GbpSv;Gbp Service;c:\progra~1\GbPlugin\GbpSv.exe [02/06/2009 20:33 53864]
R3 AVGIDSDrivervtx;AVG9IDSDriver;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSDriver.sys [07/11/2009 16:50 122376]
R3 AVGIDSFiltervtx;AVG9IDSFilter;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSFilter.sys [07/11/2009 16:50 30216]
R3 AVGIDSShimvtx;AVG9IDSShim;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSShim.sys [07/11/2009 16:50 27800]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\System32\drivers\IntcHdmi.sys [26/07/2008 21:49 111616]
R3 OEM02Dev;Creative Camera OEM002 Driver;c:\windows\System32\drivers\OEM02Dev.sys [10/10/2007 17:03 235648]
R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;c:\windows\System32\drivers\OEM02Vfx.sys [26/07/2008 21:49 7424]
S2 AVGIDSAgent;AVG9IDSAgent;c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [07/11/2009 16:50 5832712]
S2 IcRecUsb;IC Recorder Driver;c:\windows\System32\drivers\IcRecUsb.sys [02/08/2008 14:00 17432]
S3 LTXMD_VAC;Litex Media Virtual Audio Cable (WDM);c:\windows\System32\drivers\lmvac.sys [14/08/2009 21:50 25616]

--- =Outros Serviços/Drivers Na Memória ---

*NewlyCreated* - MBR
*Deregistered* - mbr
.
Conteúdo da pasta 'Tarefas Agendadas'

2009-11-07 c:\windows\Tasks\User_Feed_Synchronization-{D2A5B62D-59AC-47B1-8E86-B36A71BC772A}.job
- c:\windows\system32\msfeedssync.exe [2009-10-13 03:41]
.
.
------- Scan Suplementar -------
.
uStart Page = hxxp://www.uol.com.br/
IE: E&xportar para o Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: realsecureweb.com.br\www
Trusted Zone: realsecureweb.com.br\www2
FF - ProfilePath - c:\users\Osorio\AppData\Roaming\Mozilla\Firefox\Profiles\folckmcx.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.uol.com.br/
FF - prefs.js: keyword.URL - hxxp://br.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_br&p=
FF - plugin: c:\progra~1\Palm\PACKAG~1\NPInstal.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox 3.5 Preview\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".com.br");
.
- - - - ORFÃOS REMOVIDOS - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
MSConfigStartUp-TomTomHOME - (no file)

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-08 03:08
Windows 6.0.6002 Service Pack 2 NTFS

Procurando processos ocultos ...

Procurando entradas auto inicializáveis ocultas ...

Procurando ficheiros/arquivos ocultos ...

Varredura completada com sucesso
arquivos/ficheiros ocultos: 0

**************************************************************************
.
--------------------- CHAVES DO REGISTRO BLOQUEADAS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Outros Processos em Execução ------------------------
.
c:\windows\system32\WLANExt.exe
c:\programdata\EPSON\EPW!3 SSRP\E_S40RP7.EXE
c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\windows\system32\STacSV.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\AVG\AVG9\avgam.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\program files\AVG\AVG9\avgtray.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Windows Media Player\wmpnscfg.exe
.
**************************************************************************
.
Tempo para conclusão: 2009-11-08 3:16 - Máquina reiniciou
ComboFix-quarantined-files.txt 2009-11-08 05:16

Pré-execução: 23.650.197.504 bytes disponíveis
Pós execução: 23.457.943.552 bytes disponíveis

- - End Of File - - 45CC3EC6E6DE9586B608F004BAAEBA32

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:08:09, on 10/11/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Users\Osorio\AppData\Local\temp\Temp2_HiJackThis.zip\HijackThis.exe
C:\Windows\System32\mspaint.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Osorio\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.uol.com.br/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: G-Buster Browser Defense ABN AMRO - {C41A1C0E-EA6C-11D4-B1B8-444553540007} - C:\Program Files\GbPlugin\gbiehabn.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: TextAloud - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - C:\PROGRA~1\TEXTAL~1\TAForIE.dll
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll C:\Windows\System32\avgrsstx.dll
O20 - Winlogon Notify: GbPluginAbn - C:\Program Files\GbPlugin\gbiehAbn.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Gbp Service (GbpSv) - - C:\PROGRA~1\GbPlugin\GbpSv.exe
O23 - Service: Gerenciador do Google Desktop 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 6098 bytes

RA Media Server

gottabgood2U — Tue, 10 Nov 2009 06:37:26 GMT

I can't remove RA Media Server! I have tried, but it STILL wants a RA PASSWORD! Help what do I do?

Remove McAfee Firewall

arthurghewett — Mon, 09 Nov 2009 17:04:05 GMT

I have a Dell Laptop 1525 a little over 1 yr old, Vista 32bit Home Premium.

Several days ago Dell helped me re do my laptop as when I received it.

I did not want McAfee that comes with the PC so after my PC was redone I went to control panel , add/remove programs and removed McAfee (so I thought).

Now I started to load back my programs and went to Windows Security to turn my firewall off.

I found that McAfee Firewall is running but Windows Firewall is turned off.

How do I remove McAfee firewall from my PC ?

Thanks

Arthur H

Host Process for Window Services

control_tps — Sun, 08 Nov 2009 08:43:15 GMT

Hello,

My Vista 32 PC, keep saying the "Host process for Window Services stopped woking and was closed." What is this message all above? Scanned the PC with MBAM, SAS, Norton 360 3v, all clear no virus or spyware. But, started having problem with Norton 360, therefore, I uninstalled it. Downloaded the Microsoft Security Essentials and enable Window Firewall. I had checked for Window Updates and my PC has the current updates. Still, the problem exist. Also, I received a Base Filter...somethings and it disapear, then the DEP pop up and the setting was ON and protecting the PC. I believe it not a malware related issues because the Microsoft Security Essentials stated that my PC is clear. Please, can somebody help me or direct me to the right forum. Also, I'm getting a blue screen and the Window Error Recovery.

A question about firewall.

snowshine — Mon, 09 Nov 2009 17:24:52 GMT

Hello,

1. Windows 7 OS has a built in firewall. This automatiocally become active on completion of the OS installation.[As I understand]

2. Does this firewall only has the effect of a defence wall against the incoming traffic from internet. In other-words this firewall do not have protective function on the out- flowing information from a computer? Is that correct?

3. Now when I installed the Microsoft's security essentials [freeware] after the windows 7 OS installation, the firewall of the MS security essential has inactivated the Windows 7 OS firewall. That is what expected, I understand & not a surprise.

I am asking above question because a collegue who is not computer man claims that the firewall that comes with a OS or a freeware security essential has no barrier on the out going traffic [information] from a computer. As a result sensitive information would be shared from a computer without the knowledge of a user, he claims.

Is that correct? If so..

What is the best way to set up a firewall that will not just protect form incoming threats from internet but also outgoing informatin from a computer or his claims are without foundation.

Regards

Updates - November 8, 2009

Bugbatter — Sun, 08 Nov 2009 13:35:06 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

Framed for child porn — by a PC virus

ky331 — Mon, 09 Nov 2009 12:47:31 GMT

"Of all the sinister things that Internet viruses do, this might be the worst: They can make you an unsuspecting collector of child pornography.

Pedophiles can exploit virus-infected PCs to remotely store and view their stash without fear they'll get caught. Pranksters or someone trying to frame you can tap viruses to make it appear that you surf illegal Web sites.

Whatever the motivation, you get child porn on your computer — and might not realize it until police knock at your door."

Full story: http://tech.yahoo.com/news/ap/20091108/ap_on_hi_te/us_tec_a_virus_framed_me

UNMOUNTABLE_BOOT_VOLUME

Ridzilla — Tue, 14 Oct 2003 03:15:50 GMT

Hi, I recently got a virus that I think was the blaster. It made my computer go really slow, and sometimes my internet wouldn't even work. I downloaded the FixBlast. It gave me in error and said to restart in Safe Mode or something. So when I went to restart I got this blue screen that said UNMOUNTABLE_BOOT_VOLUME. Now evertime I restart I keep getting the same error. I have no idea what to do. I tried on mircrosoft.com on their tech support and it told me to run 6 setup disks or something. So I did that and it gave me an error on disk 5 and I am now clueless about what to do.

URGENT! McAfee claiming Alienware file Oscust.exe is a trojan

Countryhm — Sat, 07 Nov 2009 02:10:03 GMT

New Alienware laptop, McAfee (installed on system by manufacturer) has no way to leave this file alone, it just keeps quarantining it. I've uploaded it at virustotal, 16/40 flag this file as a trojan, but I found a post from an Alienware software developer who says this file is legit and that some antivirus software may flag it as malware. At the moment, we're likely going to have to uninstall McAfee. We're kind of concerned that the laptop won't run properly without this file.

Anyone else having this problem tonight? I can no longer view the properties of the original file because every time I restore it, McAfee changes the date stamp in the properties, so I am unable to see any of its properties to verify its legitimacy. The file is 75264 bytes in size, MD5 1d71f24bcb47d8e63d647b412afd0beb. Super quick response would be appreciated.

Microsoft Security Center vs Third Party, eg. McAfee

firstace — Wed, 04 Nov 2009 20:36:20 GMT

Dell system (Dimension 3000, XP SP3) recently updated to IE 8. I'm trying to figure out first, if Windows Defender is part of or separate from Windows Security Center. I note that I have a Windows Defender folder listed in my Programs files, but when I open Windows Security System (from Start Page) I don't see the features of the Defender portion. How do I get the Defender features activated?

Second, I'm running McAfee as my primary security system and which is confirmed by Windows Security Center. I also maintain "on the side" the free/public Malwarebytes-antispyware security for backup system security scanning checks. But I'm wondering about dropping the McAfee subscription and going fully with the Windows Security Center - any critiques would be appreciated.

Security Updates for Vista Problems

dalem29 — Wed, 12 Aug 2009 02:03:11 GMT

Windows offered 8 updates today with a size a bit over 16 MB. Of these, only the ones for Windows Malicious Software Removal Tool and Windows Defender downloaded and installed correctly.

The updates for Vista :KB973540, KB968389, KB971557, KB956744, KB971657, and KB973507 seemed to download and install correctly. On this Vista machine the updates are a bit more belabored than on the XP computer...you get a screen saying "configuring updates", then another a bit later about "reverting updates", a black screen with a rough white font which are apparently registry entries that quickly pass by, and various splash screens that are indicative of the computer trying to start up. When I check for Windows updates again after getting back on line, it briefly shows that updates are up to date, then changes to the 6 mentioned above that need to be installed. I am pretty sure these updates have downloaded because they show up in the update history as failed, they just won't install. So at this point I unsure what to do next.

I attempted the above steps a total of 3 times with the same result. Is there some way to delete these updates and try to download again. This is the first time I have had trouble with a Windows update. XP has updates of about the same size and are probably OK, but would like some feedback before I update that computer.

Updates - November 7, 2009

Bugbatter — Sat, 07 Nov 2009 18:13:50 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

SUPERAdBlocker v4.6.0.1: Mini Review

joe53 — Sat, 07 Nov 2009 23:40:17 GMT

Ad blocking isn't as major a concern these days as it was in the past, due to browser improvements, but I recently got my hands on this program, which comes from the makers of SUPERAntiSpyware, so I gave it a try. ( on XP/sp3, 2 GB RAM).

It is a commercial product available from here:
http://www.superadblocker.com/?tag=SUPERADBLOCKER
Cost: $29.95, with yearly renewals about half that price.

SAB is a combined popup/spyware/adware/banner/trojan/cookie/ID theft blocker, which includes optional real-time antispyware protection, and the SUPERAntiSpyware Personal edition program. Since I am happy with my current real-time protection I did not enable this. It supports both IE (but not IE8) and Firefox (but not v3.x) but not Opera. Windows 7 is not supported. Since I use both IE8 and Firefox3.5, I wondered how it would perform. I will only address its popup blocking, not its other features.

Results:

- Its installer is a 6 MB download that installed easily. It included no extra bundled software, but it does install a BHO in your browser, an optional toolbar, and of of course inserts itself in your startup (SadBlock), and adds an icon in your tray.
- Its SadBlock.exe process in Task Manager shows a huge memory usage of ~70 K.
- It does not appreciably slow down my startup, system, or internet browsing.
- No conflicts detected with my other security apps.

Efficacy:

With IE8, I rarely get pop-ups or ads, but I still get notifications (where the ad would have been placed on a website page) that the content cannot be displayed. And if I try to use the browser's back button from such a page, I have to click past the many adyieldmanager-type entries, or use the drop-down browser button to bypass them to my last page.

SAB removes the notifications, and allows me to use the back button in IE with one click. Very useful.

I tested my integrated IE8 and Firefox 3.5.5 popup blockers at the following test site:
http://www.popuptest.com/

- IE8's blocker blocked all the common popups, but failed several of the others (floating airplane, drop-down, and sticky popups).
- Firefox blocked all except the drop-down and sticky popups.
- SAB by contrast passed all tests using IE8, but added no further protection to Firefox 3.5.5.

Similarly, when doing a Google (or other search engine) search, SAB blocks all sponsored ads and links in IE8, but not in Firefox3.x.

Summary:

SAB has value as an ad blocker to those using IE8 as their default browser, even if IE8 is not supported. SAB does block all adware and ads very well, and does it better than IE8.

It currently has little or no ad blocking value for users of Firefox 3.x or Opera browsers, or for those using Windows 7.

I note that a new version of SAB v5.x is due to be released soon, which reportedly will support IE8 and Firefox3.x fully, and Windows 7. At this time however, I can't recommend this program.

Updates - November 6, 2009

Bugbatter — Fri, 06 Nov 2009 18:28:27 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

for AVG real-time users getting MBAM error code 703

ky331 — Fri, 06 Nov 2009 18:09:25 GMT

"AVG has some issues with the file that contains [MBAM's] database right now, and to avoid seeing the 703 error in Malwarebytes' Anti-Malware when AVG is your real-time anti-virus, you need to tell AVG to ignore [MBAM's]database.

If you are experiencing this issue...", please see: http://www.malwarebytes.org/forums/index.php?showtopic=29924

Mcafee antivirus with Dell studio 15 not working

Ghaffar2311 — Sat, 31 Oct 2009 08:02:13 GMT

I bought dell studio 15 on 14 sep 09. For my ease i broke the partition and made new one. I installed Mcafee which is in the package that is free for 15 months. Now it gives the message to renew the subscription and ask me to pay more for the same. i m helpless plz guide me on the subject.thnx

Updates Nov. 5/2009

joe53 — Fri, 06 Nov 2009 00:04:14 GMT

Firefox 3.5.5 released.

http://www.mozilla.com/en-US/firefox/3.5.5/releasenotes/

Existing users can update via "Help>Check for Updates"

McAfee antivirus

Bklyn mocha — Wed, 04 Nov 2009 23:58:26 GMT

I am new to the forum so forgive me. I really need some help, I upgraded to Windows 7 on Saturday. I have been on a live chat with tech support trying to figure out why I can not receive updates for my McAfee software. McAfee will scan my laptop, but I can't receive updates for my product. I was finally told by the tech that Windows 7 has compatibility issues with McAffee anitvirus. Can someone give me a solution, I already tried McAffe they told me I had to go throught Dell since I just brought my system less than two months ago. Any help is appreciated, and thanks in advance

IOBit Steals Malwarebytes' Intellectual Property - Malwarebytes Forum

Bugbatter — Mon, 02 Nov 2009 21:05:12 GMT

Malwarebytes has recently uncovered evidence that a company called IOBit based in China is stealing and incorporating our proprietary database and intellectual property into their software.

More here: http://www.malwarebytes.org/forums/index.php?showtopic=29681

Search Engine Redirects

chipmeister — Mon, 02 Nov 2009 18:56:11 GMT

Hi All,

This is a new one for me. Whenever I do a search on Yahoo or Google, when the search results post and I try to click on one of the results, instead of opening the desired site, I'm redirected to something else (ad, retailer, etc.) On Yahoo specifically, if I see I'm not being taken to what I wanted, I hit the back button immediately and try again. It will, on average, take me 4 to 5 clicks (each time being redirected to a different unwanted site) until I finally get what I was looking for. Google is not so bad but it does happen there also. I have run AVG as well as Malwarebytes and Adaware and they have all come up clean. Any ideas what I'm looking at here? Thanks.

computer is slow... very slow

lsz — Tue, 03 Nov 2009 20:11:17 GMT

Hi Gang, my daughters computer, xp home is loaded with junk... I have run AVG which finds something everytime & Malwarebytes.

Any help would be appreciated

TIA

lou

Updates Discussion - November 3, 2009

Bugbatter — Tue, 03 Nov 2009 14:18:06 GMT

This topic is for anyone who would like to discuss a specific update.

Feel free to post daily reminders of updates and version changes for some of the most popular security programs such as: Malwarebytes' Anti-Malware, Spybot, and others.

Many of the free ones are listed here: FREE SECURITY SOFTWARE

Advance Notice: Security Updates for Java SE

Red Dawn — Fri, 30 Oct 2009 20:37:59 GMT

The Sun Security Blog published the following update announcement:

"On November 3, 2009, Sun will release the following security updates:

JDK and JRE 6 Update 17

JDK and JRE 5.0 Update 22

SDK and JRE 1.4.2_24

SDK and JRE 1.3.1_27

The following Sun Alerts corresponding to these updates will be released following the availability of these updates.

269868

269869

269870

270474

270475

270476"

Sun Security Blog