Malware Prevention & Security

saturday i did a housecall6.5 scan and it left 39 files using up 29mb of disk space. i found the folder under documents and settings. i wished i would have read the EULA agreement first before i continued with the scan. is it safe to remove the files or will be computer blow from some kind of secret rootkit that was installed.

Ever since I dowloaded SP2, when I try to access System Information I get the message: Cannot access the Windows Management Instrumentation software. Windows Management files may be moved or missing. When I close out that window, I get the following error message: An error has occurred in the script on this page. Line: 60 Char: 0 Error: Object required Code: 0 URL: hcp://system/sysinfo/msinfo.htm I have run DAF and have uninstalled and re-installed Windows Management, and I still get the same error. Help! Thanks

I'm not sure if this is the right place to post this, but I'm having several problems with my laptop. I don't know how much information you need, so I guess I'll just start by listing everything that's going on. Btw, I have Windows XP....also, although it's kind of embarrassing to admit that I'm so ignorant about computers, please be patient with me and explain everything in basic terms. Any help that you can give me will be appreciated...thank you so much. 1. When I start my computer, I get a message "error loading 0wao06rs.dll - the specified module could not be found" 2. I get pop-up windows when I start up, although I remove them when I run my spyware scans. …

Are extra buttons and toolbars safe to remove? They just corrispond to stuff in the info bars at the top of IE right? Thanks )corjello(

i think so far Trish4323 has had the most infected computer on lunarsoft so far just by looking at her hjt logs. she has come to the right place to seek proper guidence and help in order to remove the malware thats running amuck in her computer. my question is, are the infections in her computer all random? or are they all in collaberation with each other do a specific job? if a specific job was intended what was it? installing popups?, indentity theft?, or simply to destroy the operating system. what was the ulimate goal of her infection?

ok, i did what you said Tarun. Now what good is this feature? What is it used for? Is this somehow the way you guys show a picture of your desktop on forums? I would love to find out how to do that. :realmad:

Ok, I want to have some basic knowledge on HijackThis Logs so that I dont have to keep running to you knowledgable folks out there (dont want to annoy you guys, for the most part). Honestly, if i get a virus, ill show someone who actually knows what their doing, but i want to know what is safe to remove to improve start up times, and tweak windows. Ive marked these myself, and ill note if i have a question about it * O3 - Toolbar: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file) * O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll **Whats the /r mean** O4 - HK…

i just got a popup from "park-your-domain.com" asking for my password. this is the first popup i ever got on this computer. my computer is not even a year old yet. funny i got a popup with firefox and so far tonight i have only been on lunarsoft and ccleaner

ewido detected a trojan a few minutes ago called "win32 dailer". i'm getting ready to run housecall to see if anything else shows. should i post a log after everything is done?

hey tarun, i know you posted something about 2search in the past but i'm unable to find it. when i run arovax it detects 2search but it never gets rid of it completly. can you give me that link that you posted awhile back so i can remove it. by the way, none of my other scans will detect it. could i be getting a false positive on this?

i have a good idea what they are but how do they really work and how do they actualy get inside? two i allways seem to get are tribalfusion.com and affiliatefuel.com. none of my protection stops them from getting in but when i run a scan they will get detected. whats up with that

Just a thought that occured to me. Would there would be any point in advising people, after they have done HJT logs which involve repairing damage to their system, to delete all prevous restore points and make a new one? I just wondered....

My PC since I uninstalled my old internet security suite (f-secure bundled with my internet connection), screwed up me updating my PC in most ways. This means any new program I put on my PC, or programs that I had not updated before, will not update, they all come through with the similar error that they could connect me to their server. Yet programs that I update regurely before, update fine now. I posted up a hijackthis log on CCleaner forums when the problem started happening, I was clean. I have no visible proxy, do you have any ideas? Many Thanks, Ultimate Predator

This happens sometimes with both IE and Firefox I'll be tooling right along, things working really well, then all of a sudden BREAK DOWN. I'll go to toggle back and forth with the browsers and I can go, unload the washer and dryer and then come back and it's still waiting to complete the process. I run ALL the things at least ONCE a day that you have listed, what's up with this? Do ya'll have any suggestions? I have a Pentium 4 CPU 2.80GHz, 2.79GHz, and only 256 MG of Ram, that's all I could afford at the time. I also have another separte HD that is partitioned into 4 drives. Thanks

Found this in my c drive. When I got the computer it had something on from computer associates. (A short trial and then pay, which I didn't take up) Is this to do with that? I first seen it in an "open with" choice. I did a search on my computer and it said it was in c/prog.files/ca/shared components avg, also msas and spywareblaster.

Lite: (Meant for Windows 9x/ME) CWShredder SpywareBlaster Ad-Aware Spybot CCleaner HijackThis Standard: CWShredder SpywareBlaster MSAS Ad-Aware Spybot CCleaner HijackThis Full: CWShredder SpywareBlaster MSAS Ad-Aware Spybot CCleaner ewido Security Suite HijackThis Including all *.def and *.ini files for things like Ad-Aware, Spybot, CCleaner, etc. Pro: CWShredder SpywareBlaster MSAS Ad-Aware Spybot CCleaner ewido Security Suite HijackThis Firefox Firetune Thunderbird All *.def and *.ini files for things like Ad-Aware, Spybot, CCleaner, etc. The Anti-Malware package will become the Anti-Malware Standard package.

I'm hoping someone can help as quick as possible! My husband has to install some new software for his blood glucose meter but the cd will not run automatically. (nor will any others ) We have tried doing seup.exe but the help desk of the meter says it must be done by autorun. I have looked on Microsoft and have looked in the registry - a scary place. In HKEY_LOCAL_MACHINES\System\CurrentControlSet\Services|CDRom its has REG_DWORD 0x00000001 (1) Some help would be much appreciated

This is the 2nd time this has happened otherwise I wouldn't have mentioned it. I went to a website, Snopes.com to check out some email that's being passed around and I use this site often, but this time it says. ..... To help protect your security, Internet Exploreer stopped this site from installing an ActiveX control on your computer, Click here for options.... I'm not downloading anything so why this message? Course it continues to let me on the web site but this isn't normal. Thanks

Ok, this is what I got on the SEARCH of my C drive I was looking for Scenic News.exe because I ran the AIM fix and it said it quarentined it. Interesting....I just started a "search" on my C drive and out pops "windows Antispyware Notice" Says Programs added to the startup registry are loaded automatically when Windows starts. This change will generally occur when software is installed. You can allow this chang if it is recongnized and expected. Name: Client Application Description: DTM Publisher: NONE PATH: C:\windows\scenic news.exe would I like to allow, block or what? I didn't install it just now I was searching for it. …

might be worth a look. lol Computer: Operating System Microsoft Windows XP Professional OS Service Pack Service Pack 2 DirectX 4.09.00.0904 (DirectX 9.0c) Computer Name HOME-4A69BA3628 User Name ??????????? Motherboard: CPU Type Intel Celeron, 2700 MHz (27 x 100) Motherboard Name Gigabyte GA-8SIML (3 PCI, 1 AGP, 1 CNR, 2 DIMM, Audio, Video, LAN) Motherboar…