Windows Vista Forum / Vista Technical / Security

VIRUS ATTACK

deepak — Tue, 09 Jun 2009 01:13:40 GMT

I have a laptop. Dual boot with xp & vista. (vista in second partition D:\)

Problem:
Unable to boot into any admin account. When i login the system shows a blank screen.
Upon pressing ctrl+alt+del the taskmanager option is not avilable. This is for admin accounts only.
The standard users allow the use of taskmanager & i am able to run explorer.exe.

I checked the registry from standard user
In the shell entry of winlogon there is a additional statement D:\windows\system32\winsit.exe added.
Unable to remove this from standard user.

I deleted this file. Then i the admin user account it showed the Documents folder instead of blank screen.
I used UserAccounts to convert a standard user to admin and restarted the system. Same prob with that account
and the other one & blank screen came back on login.

Any more ideas?:crying:

trojan virus

jdukes — Sun, 15 Nov 2009 13:01:35 GMT

Help! I ran the Windows Safety Scanner. It detected four issues, but apparently, the scanner cannot clean three:

Exploit:Java/CVE-2008-5353.B
Trojan:Java/Selace.A
Trojan:Java/Selace.B

I've unisntalled java but it was still detected when i did live care scan. I also downloaded avg virus scan,which did not detect the trojans. I followed up by doing another live care scan in which they were still detected. please Help

Sincerely

Joseph

How to Reset / Recover Forgotten Windows NT / 2000 / XP / 2003 Administrator Password?

wskaihd — Wed, 04 Nov 2009 00:58:55 GMT

Moderator: Text removed. Repeated references to advertising commercial SW -- which is prohibited on this forum. Plus, the steps in the post referred specifically to windows XP -- and this is a VISTA forum, not XP!!

I want to disable internet connection in Firewall for some programs... well

lse123 — Thu, 29 Oct 2009 07:08:32 GMT

I want to disable internet connection in Firewall for some programs... well
well tell what I do disable/enable internet conn, when :
1)Firewall ON or OFF
2)In Exceptions the software title is ticked or un-ticked?
tell me for all combinations? i-conn is disabled or enabled for the particular program?

Domain account vs Local account on Vista

pbodavula — Mon, 12 Oct 2009 13:42:12 GMT

Hi,

We are creating a PDF file in login user's local application folder (C:\Users\%username%\AppData\Local\folder1) through a custom .Net application and displaying the created pdf file in application.

The above functionality is working for users who are part of domain and added to local vista machine as users (both for administrator and standard user accounts).

The same is not working for local users (both administrator and standard user accounts created in vista box).

File is getting created for any user under their local appdata folder and can able to open from that location, but not displaying from app in case of local system users (admin or standard type).

Can anyone help me what security settings differ between domain users vs local users in vista business 32 bit OS?

Thanks
Padmaja

Two Whole Days of BS

Meteora — Thu, 08 Oct 2009 21:47:49 GMT

Got infected by pretty much a virus that was probably made the day of the infection. I predict this because I couldn't find even one google result about the malware that I had, which is "windows smart security" that somehow changes itself to Registry Defender 2009 and Antivirus 2010, or both, randomly etc.

It wasn't until this morning someone on the net made a topic about it on CNET and even the suggestions someone gave on it to prevent the virus from disabling virus fighting programs like malwarebytes failed in my case. It didn't do anything (especially when he says to end the processes in task manager under the username that "doesn't make sense" http://forums.cnet.com/5208-6122_102-0.html?threadID=362760) However what if I don't have this one weird username on my task manager? This is why this method fails.

This piece'o **** trojan has been disabling every possible attempt to remove it. EVERY single anti-malware program, even Stopzilla which claims to be uber in erasing viruses can't do anything to this thing.

However when I installed Avast (which deleted the last trojan I had and I had the trojan for probably 5 minutes as opposed to 2 whole days of this bs) it asked me if I wanted it to do a scan after it reboots. Obviously I clicked yes, and this was the very method that got rid of the virus last time.

However more bs, somehow my computer keyboard gets disabled (AND ALL OTHER USB DEVICES DON'T?!) so I can't even freaking delete the trojan when Avast detects it! What kind of garbage is this?

Any help would be appreciated.

Avast conflict

rohandel — Sat, 17 Oct 2009 06:55:20 GMT

I am using a computer that someone else in my position had before me. I am not quite sure what they did with the virus on this computer. I have been having problems for a while, and I think it may be due to the virus software. Since I got the computer, on startup, it has been saying I have 1 day left to renew Avast. Also, I have been having a problem with Windows Update, and when I go there in the Control Panel, just a few parts of Windows Updates displays, with a yellow exclamation point that I think is some type of virus software (if I remember correctly).

Anyway, first of all, I uninstalled Avast. At least, it doesn't show anymore in my Uninstall folder of programs. I then installed AVG. When AVG downloads, it comes to a point where it says there is potentially conflicting software, and it says Avast is that software, then it directs me to Uninstall to remove it, BUT Avast is not there!! I can install AVG without selecting to uninstall Avast, but I am not sure if this will solve the problem.

Thanks.

AVG and AVAST at the same time

whatisup — Sun, 09 Mar 2008 20:58:14 GMT

can u run avast free edition and avg free edition on a pc. will there be any conflict or will it slow down ur pc? have any one used it
thanx

TweakUAC causes notification icon

walterius666 — Mon, 05 Oct 2009 00:21:10 GMT

TweakUAC is a freeware pgm that allows setting UAC in Silent Mode, where it still retains most of its protections but no longer stops pgms from running. I found and installed it because UAC forced me to hit Continue every single time I ran Photoshop 7, which I use several times a day. Turning UAC off was just as bad (more nags) and it removed UAC's protections. It was driving me nuts. :w00t:

TweakUAC shut it up.

Alas, all is not perfect. Vista keeps putting an icon (no balloon, just icon) in the Notification Area, nagging me to turn UAC back on. It isn't off, exactly, and I'd like to get rid of the icon nag too.

Does anybody know enough about TweakUAC to accomplish this, if it can be done?

P.S.: if you have an endless problem running the same pgm, TweakUAC will solve it. Its worth the icon nag even if you can't get rid of it.

what antivirus do you use

allanb — Sat, 19 Aug 2006 02:28:47 GMT

:)hi all,i am just curious as to what each and everyone of you are using currently as virus protection,i am using trend micro 14 which is specifically designed for vista,as i was directed to download this from microsoft themselves it is a trial version which runs out in october.regards ALLAN:hehe:

Svchost.exe virus i need help!

flyboyfloz — Fri, 02 Oct 2009 09:38:39 GMT

Hey all,

Please can someone help me fix my laptop. I have the svchost.exe virus and my pc is rapidly deteriorating. Any help would be much, much appreciated.

Thanks, Chris

Is this a security issue?

carocuth — Tue, 29 Sep 2009 20:30:44 GMT

;) What the heck is this?

㩃停潲牧浡䘠汩獥剜杯牥⁳湏楬敮倠潲整瑣潩屮潒敧獲传汮湩⁥牐瑯捥楴湯卜晡䍥湯敮瑣䍜湯楦屧噘敩⹷潣普杩

It's in my sys32 folder, and passes virus checks - what is it? Can I delete it?

Best Firewall Program for Vista

plasmo — Wed, 31 Jan 2007 23:21:07 GMT

Since there are threads for Best antivirus and Spyware programs, was wondering what people were using for Firewall (other than Microsoft Vista's ).

Kaspersky crashed my system twice, so i'm looking for a different one....

Need help with Virus please.

Riff88 — Sat, 05 Sep 2009 01:32:35 GMT

Hi all,

I have a vista 32 bit. I have Avira Antivirus for Protection.

Yesterday my Windows Defender warned me of a "Trojandownloader: Win32/Renos.JM" virus. The Warning keeps popping up every couple of minutes. When I tell Windows defender to delete it, it only moves it to quarintine.

How do I get rid of this virus? Why didn't Avira warn me? I reckon I should get another anti-virus program.

Thank you!

best antivirus?

whatisup — Sun, 09 Mar 2008 21:01:38 GMT

what is the best anti virus in ur opinion?

private browsing!

LilPixiie — Tue, 11 Aug 2009 06:27:21 GMT

when i delete the history it deletes but den somehow a certain "someone" finds it out the hardware so now i need to know how to delete it permanently out the hardware n all!!!! please help!!!!!!!!!!!!!!!!!!!!!! URGENT HELP NEEDDEDD!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! THNX!!!!

Creating a custom asymmetric algorithm using CNG

scratchhead — Tue, 11 Aug 2009 06:03:56 GMT

In the CNG SDK, creation of a custom asymmetric algorithm is provided. However, I would like to create an asymmetric encryption algorithm instead. Are there any available samples?

Specifically, can anyone guide me as to the creation of the interface for BCRYPT_CIPHER_FUNCTION_TABLE/NCRYPT_CIPHER_FUNCTION_TABLE to register the asymmetric algo?

Thanks.

How I disable AUTORUN of a DVD DRIVE ?

lse123 — Tue, 30 Jun 2009 12:07:41 GMT

How I disable AUTORUN of a DVD DRIVE ?

In VISTA & XP ...

BY this I may SCAN the optical disc without the posibility catch virus (if it has viruses) , correct ?

Best antivirus for Vista Beta 2

Jason — Tue, 27 Jun 2006 10:58:45 GMT

Ive been using AVAST and it works great. And Free.

[url]http://www.avast.com/[/url]

What are you guys using?

file/folder Permission Questions NTFS/Network

lse123 — Thu, 18 Jun 2009 05:38:58 GMT

When copy/move files in vista I must keep in mind Permissions, if I want secure files in a networked environment hence these mostly inherited [this is common issue?] ?
If this copy/move files done unauthorized may my private files become public ?

May a folder have more specific permissions and a file inside more general permissions ?

In a textbook tip I saw below what is mean ?

"When you work with permissions and encounter a grayed out permissions check box, you know that you need to prevent permission inheritance."

why "prevent" ?

Reboot vista

leon4l — Sun, 07 Jun 2009 21:42:20 GMT

hey mates am new at this forums, well my computer got infected with some kind of trojan/spyware, well i have norton and i scaned it didnt do much help, so i went for adaware, but it didnt want to update the files or something, so i went for spybot and it didnt want to install it, and this trojan/spyware is ruining my computer it already messed up my dvd burner setting as well as my printer settings, my computer gets stuck on the shutting down screen when i try to shut down, and when i use search enginges i get redirected to some other sites, so now the only solution i see is to erease everything by formatting the disk, but i dont know how!!! the bright side is that i have the recovery disk for my pc but i dont know how to use it to erease my computer, well my question is how do i format my disk?

my system a lenovo vista computer

wow i think i have a run-on sentence ::D

antivirus 2008

Grant — Tue, 13 May 2008 08:33:25 GMT

i keep getting windows logoed antivirus 2008 saying ive got 40+ infections-viruses trojans etc , and i should eliminate them by se nding 50$ --but when i check my norton i have no infections --its beckoming a pain--anyone else getting this and-or how can i stop it?

Desktop "set as backround" puts pic on the taskbar.

m0tive_unclear — Sat, 28 Mar 2009 03:44:02 GMT

No matter what i do to change backround on the desktop, it just changes color.. no pic i set... worked before but all of a sudden i right click "set as backround" and the pic i chose is now in the taskbar on the bottom.. u can see the pic all blown up on the taskbar.. never seen that before.. please help.. researched and come to conclusion.. virus/spyware/malware? Vista home premium 32 bit. Hp pavilion a1720 Intel core 2 cpu 6300 @ 1.86 ghz 1.87 Ghz 1gb ram -- hope thats what u need to know.. please help.. vista corrupt .. if so.. i bought pc with vista in it and have no cd.. (original pc crashed over and over and i called hp and they sent me this one.. worked pretty go for like a year and half .. then really getting slow to use applications and desktop wallpaper only appearing on in the taskbar/toolbar on bottom.)

resetting adminstrator password without haveing admin rights

coolhndluke — Sat, 07 Mar 2009 13:51:09 GMT

I was given a used laptop computer recently. There are 2 accounts. 1 haveing full admin rights and the other limited with parental control enabled. I cant do anything in the limited account due to no admin priveledges and the other i cant even get into because not haveing the password to the admin account. I tried various programs to reset the password but no luck. I cant even run a as admin in the cmd prompt.

I am useing vista home premium 32bit. Ironically the computer i purchased is the exact same as my old one wich also runs vista home premium. Is there a way to add newly purchased com to network and remotely change admin rights or disable uac via old computer or something like that? If it is possible i need info on how and/or link. Thanks in advance.

So why do they say Vista is more secure?

Jason — Tue, 24 Apr 2007 12:51:18 GMT

Windows Vista

Vista comes in an unpreceded number of editions. Take care to choose the one that is right for you. For instance, BitLocker drive encryption is available in Vista Enterprise, but not in Business.
Administrators mostly run as normal users. Privilege elevation occurs only when necessary.
Users can do more than they could in XP. Examples: change time zone, tune power management settings, and install critical Windows updates.
The TCP/IP stack includes native IPv6 support.
Event Viewer can be configured to alert an administrator e.g. by mail in response to selected events.
The network access protection (NAP) feature can isolate “unhealthy”, such as unpatched, clients until they have been brought into appropriate trim.

UAC on 1 User but not another

benps — Mon, 16 Feb 2009 01:45:47 GMT

Hi,
I use my computer as a reference to troubleshoot other people's computer problems. Personally I hate User Account Controls, but most Vista users still have it on, so I have one user account where I have all of the default Vista settings in which I want to have User Account Controls turned on, so I can experience what the people I am helping will experience, but I want my main account I primarily use not to be burdened by this feature. Does anyone have any suggestions?

Kindly hep me.....

dr.emraan — Wed, 11 Feb 2009 20:06:01 GMT

hello all

i m very new to vista......i ve vista home basic edition ...pre installed on my hp note book....i work on DSL network on wich we ve seceral computers attached on one internet connection...(i m sorry but dont know the exact technical term used for it)...its like we all have a network administrator on it......i just wanted to ask is it possible for a person(administrator) to get into my personal data wen i log on to this network????...and if so...how can i be able to protect myself from it.......it just happened dat i was on yahoo chat one day n the person on the other side said"I have all your data copied from your pc on my hard disk"........i m a bit reluctant to attach my personal pc on this network......is there any software wich i ve to use?.....please guide me

thanks in anticipation of your replies

A program to help people

chrisscorsese88 — Sat, 03 Nov 2007 11:47:34 GMT

If people can ask about protection here, I can give advice too, right? I don't know if anyone else knows about this, but my dad recently discovered something called SafeSpace. My dad basically explained it as having a "computer inside the computer". Which means when you get spyware, etc., it affects the inside computer, and not your actual computer. I think this will greatly help anyone who wants to use it.

Better description of it:

[quote]SafeSpace eliminates the problem of malware by creating a secure barrier between your computer and the internet, protecting you and your personal information against known and unknown malware threats. SafeSpace isolates internet facing applications in a virtual sandbox, which protects your system files and settings from unwanted changes, and blocks unauthorized access to your private files and data. When you next log off, or purge SafeSpace all virtualized changes are wiped, leaving your computer clean and malware free. Downloaded files are tracked by SafeSpace to ensure that they always open in the virtual sandbox. Tracked files can be saved to any disk location and stored alongside private files without any additional management. Surf in complete safety. Download with absolute confidence. Log off knowing your computer is clean and your personal information remains private[/quote]

Download here: [url=http://www.download.com/3000-2239_4-10717732.html]http://www.download.com/3000-2239_4-10717732.html[/url]

vista is just not working

tlady — Sun, 25 Jan 2009 11:16:56 GMT

I having a real problem, i don't know if i have had a virus or what is going on but, i have even tried to go back to my factory settings and it wont work, i cant uninstall anything, i have lost the adobe acrobat, its still there but wont work. everything is crazy. i have run my virus scan and it comes up clean. I hope someone reads this I going nuts here ....

Freezing vista upon startup

mystaker — Tue, 16 Dec 2008 20:58:04 GMT

Okay I downloaded super antivirus and avira antivir both freeware, then as i started to scan i got blasted by millions of trojans caled tr/crypt.xpack.gen. as i did scans and tried to quarantine all of these trojans, my com got the blue screen of death. then afterwaRDS restarting, the com will load like normal until about 3 mins and it will freeze. i went into safe mode, safe mode works fine. can any of you please help? thanks.

Anyway its kinda cool that some of you are always others like us and you dont get any thing in return so i just wanna say i really appreciate your help :)

Unlocking Vista using power button on Screensaver

malexander — Fri, 07 Nov 2008 10:20:46 GMT

I have two vista business machines, a laptop and desktop. Both are password protected and lock after 10 minutes of no activity. I was in a hurry this morning and my laptop's screensaver was on and I hit the power button for a second or two to send the shutdown signal to vista. I noticed immediately that a list of running programs popped up asking me if I wanted to continue or cancel. I hit cancel and realized i was never confronted with the ctrl+alt+del to enter the desktop. I was able to duplicate this on my other vista machine today also. Hitting the power button on the logon screen does not do the same thing, only when the screen saver is running. Any ideas why this is happening? Anyone else able to do this?

Desperate Help!!!

moespanxx — Tue, 04 Nov 2008 12:31:42 GMT

Ok let me lay it out for you guys hope you can help!

I have Windows Vista... I wanted to Keystroke a password for my own personal use in my own computer.. Had some trouble finding a keylogger with a backdoor and stuff I finally found a working on Ive deleted the other files and installations and such. And now everytime I open FireFox it eiether shuts down or when I surf or anything by that microsoft windows box " FireFox has stopped working " then it shuts off. This never happened only after I installed the keyloggers and A program that is a IE Browser looking like MySpace FriendBlasterPro it doesnt the same thing with Firefox.... So I'm thinking the keyloggers infected those programs and sometimes Eset from NOD shuts down but the GUI is still on with the same issue like FF and FBP anyway... i got the newest updated version of NOD32 MalwareBytes and SpyBot Search and Destroy and did a full scan and found threats and was cleaned. And restarted and my issue is still occurring? I even ran a safemode and ran some tests and a few was cleaned as well. I did a HiJackThis and I dont really know what is it but people told me it scans and logs everything that is running so here it is if It might help:

[quote]Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:31:33 AM, on 11/4/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\AIM6\aim6.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=20011&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Presario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Presario&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [L08AXLRD_246122] "C:\Program Files\Microsoft Student\Microsoft Student with Encarta Premium 2008 DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Encarta Search Bar - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\drivers\itech4\imonlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drivers\itech4\imonlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drivers\itech4\imonlsp.dll
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 9289 bytes
[/quote]

So is it the software's issue from there company? Or is it from the keyloggers in my point ? I can barely use FF because it shuts down, and I gota use IE which is ew=/

Should I do a re-insall on Windows? Will it backup my files? Or will the issue still continue? What are my options?

Please anyone can help me!!!!!!!!

Reguards

C DRIVE Memory Self-Fluctuation????? Am I hacked?

Rastro — Wed, 24 Sep 2008 15:22:27 GMT

My 130GB of space on my online Vista desktop has 8GB left and the C Drive status bar is in the red, which is fine. However, I have noticed up to a 2GB variation from day to day without me downloading or deleting anything from my computer. Is it possible that my computer is "hosting" as storage and distribution hub for some hacker without my knowledge? Nortons Antivirus, of course, does not register any malacious or third party use. Nortons did stop and resolve a "SillyDC" trojan last week from a USB thumbdrive from a print store, or did it? I think the Memory probs predates the preempted virus. Subsequent scans come up clean. Or is the 2GB variation a function of Vista's continuous defrag? Moreover, the "COMPAQ(C)" window which has the boot and user files, etc. I noticed or may have not noticed this before are now hidden. If I remember correctly they were not hidden in the past, but I could be wrong. There has been a lot of desktop.ini activity in the last couple of weeks. Can Nortons help detect third party use? What is better than Nortons? Please advise. Thanks

SOME COMPAC (c) FOLDER CONTENTS

$Recycle.bin Boot Config.MSi MSOCache Hiberfil.sys IO.sys MsDoc.sys pagefile.sys sqmdata0o.sqm sqmnoopt00.sqm YServer.txt

TestBugID1

jsalazar05 — Sat, 20 Sep 2008 22:31:29 GMT

I Just got this error TestBugId1, SpiralOrbit. Does anybody had this same problem and solved it?

AVG 8.0 HELP REQUIRED

wilsonhoe — Tue, 09 Sep 2008 00:10:03 GMT

Hi,

some one please help me. i have AVG version 8.0.169 installed on WindowXP, and it work well. But incident come when i try to install on the Window Vista Home premiuem. I was suprise it keep prompt me invalid license key error message. But once i run using WindowXP it's working well.

Please help. :)

Freeware Security Tools

BladeRunner — Fri, 12 Sep 2008 09:21:41 GMT

Free Antivirus:
BitDefender10: http://www.bitdefender.com/site/Downloads/
Avast: http://www.avast.com/eng/avast_4_home.html
AVG: http://free.grisoft.com/doc/5390/us/frt/0?prd=aff
Avira AntiVir: http://www.free-av.com/
PcTools Antivirus: http://www.pctools.com/free-antivirus/
ClamWin: http://www.clamwin.com/content/view/18/46/
Comodo: http://antivirus.comodo.com/ (NÃO funciona no VISTA, para já)
MoonSecure: http://www.moonsecure.com/index.php?...d=30&Itemid=66

Free Security Suites:
McAfee VirusScan Plus - Special Ed. from AOL: http://safety.aol.com/isc/BasicSecurity/
CyberDefender: http://www.cyberdefender.com/products.html (Contém publicidade)
PCLive Security: http://www.download.com/PCLive/3000-...-10755792.html

Free Firewalls:
Comodo: http://www.personalfirewall.comodo.com/
ZoneAlarm: http://www.zonealarm.com/store/conte...try=US&lang=en
Agnitum Outpost: http://www.agnitum.com/products/outpostfree/index.php
Ashampoo: http://www2.ashampoo.com/webcache/ht...t_2_0050__.htm
Jetico: http://www.jetico.com/jpfirewall.htm
Filseclab: http://www.filseclab.com/eng/products/firewall.htm
R-Firewall: http://www.r-firewall.com/
SoftPerfect: http://www.softperfect.com/products/firewall/
Sygate: http://www.simtel.net/product.php?id=53687
Pc Tools Firewall Plus: http://www.pctools.com/firewall/
Core Force: http://force.coresecurity.com/index....&page=download
Online Armor: http://www.tallemu.com/free-firewall...-software.html (NÃO funciona no Vista)
Microsoft: http://www.pcworld.com/downloads/fil...scription.html (AddOn for Windows Firewall - Outbound Traffic)
and here:http://www.sphinx-soft.com/Vista/order.html

Free AntiSpyware:
SpyBot Search & Destroy: http://www.safer-networking.org/pt/index.html
AdAware: http://www.lavasoftusa.com/
AVG: http://free.grisoft.com/doc/download...yware/us/frt/0
Spyware Terminator: http://www.spywareterminator.com/
Arovax: http://www.arovaxantispyware.com/
CWShredder (Trend Micro): http://us.trendmicro.com/us/products...der/index.html
A-Squared: http://www.emsisoft.com/en/software/free/
SpywareBlaster: http://www.javacoolsoftware.com/spywareblaster.html
SUPERAntiSpyware: http://www.superantispyware.com/
Windows Defender: http://www.microsoft.com/athome/secu...e/default.mspx
SpywareGuard: http://www.javacoolsoftware.com/spywareguard.html
eTrust PestPatrol: http://www.pestpatrol.com/details.htm

Free Anti Spam:
Comodo: http://www.comodoantispam.com/
Mail Washer: http://www.mailwasher.net/
SPAMfighter: http://www.spamfighter.com/Download_Download.asp
Antispam Scanner: http://www.styopkin.com/free_antispam_scanner.html

Free Anti Rootkits:
AVG: http://www.grisoft.com/doc/download-...otkit/us/crp/0
Ice Sword: http://www.antirootkit.com/software/IceSword.htm
Sophos: http://www.sophos.com/products/free-...i-rootkit.html
Hook Explorer: http://labs.idefense.com/files/labs/.../HookExplorer/
RootkitRevealer: http://www.microsoft.com/technet/sys...tRevealer.mspx

Free Online Security Check:
Kaspersky: http://www.kaspersky.com/virusscanner
Trend Micro: http://housecall.trendmicro.com/emea/
McAfee: http://us.mcafee.com/root/mfs/default.asp
BitDefender: http://www.bitdefender.com/
F-Secure: http://support.f-secure.com/enu/home/ols.shtml
Norton (Symantec): http://security.symantec.com/ssc/
Audit My Pc: http://www.auditmypc.com/
Prevx Free: http://free.prevx.com/
Microsoft: http://onecare.live.com/site/pt-pt/d...cid=ideas_wlsc
Panda: http://www.nanoscan.com/
Eset: http://www.eset.com/onlinescan/
Ewido: http://www.ewido.net/en/onlinescan/

Online Security Info:
VirusList: http://www.viruslist.com/en/index.html
McAfee: http://www.freebyte.com/antivirus/#prevention
Symantec: http://www.symantec.com/business/sec...er/threats.jsp
Trend Micro: http://www.trendmicro.com/vinfo/
Trend Micro Malware Map: http://itw.trendmicro.com/index.php?id=25

More:
Peerguardian: http://phoenixlabs.org/pg2/
Web Security Guard: http://www.websecurityguard.com/pt/download.aspx
PC Flank: http://www.pcflank.com/test.htm
Anti-Trojan Shield: http://www.atshield.com/
HijackThis!: http://www.trendsecure.com/portal/en...ols/hijackthis
a-squared HiJackFree: http://www.emsisoft.com/en/software/download/
a-squared Anti-Dialer: http://www.emsisoft.com/en/software/download/
AnalogX Script Defender: http://www.analogx.com/CONTENTS/down...em/sdefend.htm
VundoFix: http://vundofix.atribune.org/
SmitFraudFix: http://siri.geekstogo.com/SmitfraudFix.php
Pc Security Test 2007: http://www.pc-st.com/us/index.htm
Comodo Anti-Malware: http://www.comodo.com/products/free_products.html
McAfee Stinger: http://vil.nai.com/vil/stinger/
McAfee Free Services: http://us.mcafee.com/root/catalog.asp?catid=free
Mcafee Site Advisor: http://www.siteadvisor.com/
Haute Secure: http://hautesecure.com/ (BETA)

Malware Removal Tools:
F-Secure:http://www.f-secure.com/security_cen...val_tools.html

Wireless Tools:
AirSnare: http://home.comcast.net/~jay.deboer/airsnare/
iPig: http://www.iopus.com/iPig/download/
LucidLink WiFi Client: http://www.lucidlink.com/lucidlink_wifi_client.htm

Analyze HijackThis! logs here: http://www.hijackthis.de/

Online Firewall tests:
Shields UP!: https://www.grc.com/x/ne.dll?bh0bkyd2
Firewall Leak Tester: http://www.firewallleaktester.com/leaktest6.htm

Stable your pc here: http://pcpitstop.com/

Extra:
http://www.freebyte.com/
http://www.techsupportalert.com/best...tilities.htm#5

Accessing XP shared folder from Vista

dyowee — Thu, 28 Aug 2008 01:27:31 GMT

Good day!
I'm setting up a couple of PC in a workgroup scenario. Some of the machines are XP, and some are running Vista. To be able to share documents, I set up shared folders in both the XP machines and Vista machines. I've also set up that users have the same username and password in each machine. When I tried to access from XP the Vista machine (\\Vista1) or a shared folder (\\Vista1\Documents), XP doesn't prompt me for a username and password anymore. But when I do it from Vista to XP, Vista prompts for a username and password, eventhough I have logged in with the same username and password in Vista with my account details in XP. Why is this so? (I haven't touched the "Manage My Network Passwords", in both the XP and Vista machines).

Thank you very much.

DESPERATE HELP

lugidees — Mon, 21 Jul 2008 01:27:15 GMT

ok heres the story....my gf booked it( got out) bout a month ago and left me her lap top saying i deserved it since i bought it and she dint feel right taking it. We haven't really spoken since she moved out east. my problem is i cant log into the comp. its runing Vista Home premium and it needs a password. I tried a program where i could reset but i could only reset the guest password. When you go to log on it stays stuck on her Profile and asks for her password. I cant log in as admin or cant pick another user. CAN ANYONE HELP ME PLEASE?? i have all my photos and music on this lap top and would like to get it off b4 i sell it....any helpers?

DEP block Windows Mail with Plugin build in VC++ 6.0

dolly — Tue, 08 Jul 2008 01:23:26 GMT

Hello Friends,

I am using Windows Vista and I am builing an c++ ATL DLL in Visual C++ 6.0, which is an addin DLL for Windows Mail.

When I run my Windows Mail, Vista's DEP (Data Execution Prevention) feature blocks it, and prompts that it blocked for security purpose as some other program tried to use windows mail data.

But I have to hook into Windows Mail as have to put an addin to customize its GUI.

I tried to turn DEP off for Windows Mail, but it didnt allow me (even in Full Admin Account).
Also I turned DEP off for my exe (which loads my addin DLL, which further hooks into Windows Mail), but despite that Windows Mail is blocked.

Also, when I build the project in Visual Studio 2005, it runs very well. (And I have not made any change in the project settings or code)

It seems, VC 6 uses older compilers and VS 2005 uses latest ones so are compatible with Vista!

But I have to use VC 6 only as it's my project's requirement!

Please Help!

Thanks a lot !!

On startup, Windows Firewall asks to allow all sharing to be turned on.

tulsi — Wed, 16 Jan 2008 22:40:41 GMT

On startup, on every startup windows firewall asks for my permission to change the firewall settings. After clicking 'OK' it then changes the sharing options from only password protecting sharing being on, to turning on all the sharing options. I have run a virus scan using Norton with the latest signatures with no positives coming up. From now on I do click 'Cancel' and the sharing settings remain unchanged and the internet runs fine. However this is happeneing upon every startup and is getting annoying. Also being connected to a university halls network does not help as all my files are up for grabs by another 200 people on my network.

The Code windows gives in the detail drop down menu when asking for permission is:

{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}

I must add that this has only started occuring after a vista update, however I am not sure of whether it was straight after or some time after the update.

Any advice will be much appreciated.

Thank you in advance.