conficting AVs & others

Avatar

Please consider registering
Guest

Search

— Forum Scope —






— Match —





— Forum Options —





Minimum search word length is 3 characters - maximum search word length is 84 characters

Register Lost password?
sp_Feed sp_topic_old
conficting AVs & others
Avatar
maurylen
Member
Forum Posts: 40
Member Since:
March 6, 2010
sp_UserOfflineSmall Offline
1
January 9, 2012 - 2:31 am
sp_Permalink sp_Print

OzBloke! I return

XP - SP3

back to that search engine problem,home page not opening, both FF & IE, still having an issue with so got in touch with the internet provider - ours is Telecom NZ as "XTRA" - advice from them is conflicting security programmes, maybe AV or others such as Spybot, Malwarebytes, Superantispyware - their recommendation, uninstall the lot and install "telecom Security Suite," (MacAfee in disguise methinks) I really don't know if that is going to be a complete solution as I"ve known of issues with suites, so have copied a portion for you to perhaps check and make a recommendation, I already have Win Firewall activated, hopefully this is not too much of a pain Jim, Maurylen

 

Overview


We strongly recommend that before installing Telecom Security Suite (TSS) you remove or un-install any existing third party security software. You can do this by following the instructions below. 

Uninstalling third party security software

Telecom Security Suite will not function properly with the third party applications listed below. It is therefore necessary to uninstall these applications to enable TSS to function properly. 

Turning on Windows Firewall

We advise customers to turn on Windows Firewall after they have removed their security software before they start the installation of TSS.

 

Uninstalling third party security software


Windows XP:
  1. Click Start.
  2. Click Settings.
  3. Click Control Panel.
  4. Double-click Add/Remove Programs.
  5. Click to highlight the existing antivirus programme in the list of software.
  6. Click Add/Remove.
  7. Follow the prompts to remove the antivirus programme. Note: If you're prompted to remove shared files, click Yes to all.
  8. Restart your computer.

Windows Vista:

  1. Click Start, Search, type PROGRAMS AND FEATURES and click Go.
  2. Double-click Programs and Features.
  3. Select the program to uninstall.
  4. Click Uninstall and follow the steps provided.
  5. Restart your computer. 

 

Turning on Windows Firewall


Windows XP SP2
  1. Click "Start", then open the "Control Panel"
  2. Open "Windows Firewall"
  3. To turn Windows Firewall on select "On (recommended) and click "OK".
  4. Close the "Control Panel" to return to the Desktop.

Windows Vista

  1. Click "Start", and open the "Control Panel"
  2. Click on "Security"
  3. Under the "Windows Firewall" heading click on "Turn Windows Firewall on or off"
  4. To turn Windows Firewall on select "On (recommended) and click "OK".
  5. Close the Control Panel to return to the Desktop.

 

List of Incompatible Software


  • Acronis Inc Acronis True Image
  • Acubix Pico Backup
  • AdwareFilter PCSafe
  • AhnLabs Anti-Virus
  • Alwil Avast! 4
  • Authentium Command Antivirus
  • BitDefender All Products
  • BitDefender Antispyware
  • Bullguard Internet Security
  • CA eTrust AV
  • CA CA Anti-Virus
  • CA eTrust EZArmor
  • CA PestPatrol
  • CA AntiSpam
  • Cloudmark SpamNet
  • Cyberlink Power Backup
  • Editions Profile Parental Filter
  • Esat NOD32
  • Ewido Ewido Anti-Spyware 4
  • Frisk F-Prot AV
  • F-Secure Anti-Virus
  • Genie-Soft Corporation Genie backup Manager
  • Grisoft AVG Anti-Spyware 7.5
  • Grisoft AVG Antivirus
  • Hauri ViRobot Desktop
  • Inca Internet nProtect Personal
  • ISS BlackIce Defender
  • Javacool Spyware Blaster
  • Jiangmin Antivirus
  • Kaspersky Antivirus Personal
  • Kaspersky AntiHackers
  • KimLab HV-Scan
  • Kingsoft Antivirus
  • Lavasoft Ad-Aware SE Personal/Professional
  • LookSmart NetNanny
    • MailFrontier (Now SonicWall) MailFrontier
    • Maximum Output Software FileBack PC
    • McAfee VirusScan 8.0i
    • McAfee TOPS
    • Microsoft Windows Live OneCare
    • Microsoft Windows Defender (Beta 2)
    • Microsoft One Care
    • New Technology Wave VirusChaser
    • Norman Virus Control
    • Norman Norman Personal Firewall
    • Norman Norman Internet Control
    • Panda Titanium Antivirus+Antispyware
    • Panda Platinum Internet Security Suite
    • Panda Titanium Antivirus+Antispyware
    • Rising Antivirus
    • Secure Computing SmartFilter V 4.1
    • Spybot Seach & Destroy
    • Steganos Antispyware
    • Sunbelt iHateSpam
    • Sunbelt \ Kerio Sunbelt Personal Firewall
    • SurfControl SurfControl Web Filter
    • Symantec Norton AntiVirus
    • Symantec Personal Firewall
    • Symantec Norton Internet Security
    • Symantec Norton 360 - Backup and Restore
    • Symantec Norton Save and Restore
    • Symantec Norton 360 - Optimizer
    • Trend Micro PC-cillin Internet Security
    • Vpower PCZiggy Try Windows removal tools
    • Webroot Spysweeper 4.5
    • Webroot Windows Washer
    • Zone Labs ZoneAlarm Firewall
    • ZoneAlarm Anti-virus 5.5
    • ZoneAlarm Zonealarm
Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
2
January 9, 2012 - 3:33 am
sp_Permalink sp_Print

Hey Maurylen - What kept ya?? LOL

Okay, well I would definitely ignore the advice you have received from your ISP, for the moment anyway. Sounds very much like they are pushing their own barrow to me.

Can you please provide a complete list of all your installed security programs? Also, can you please clarify about the "home page not opening" - do you mean you cannot connect to the net at all or has your home page been changed to something else?

This sounds to me more like a malware infection than conflicting software, although the latter is a possibility. Will know more once we have that list.

Cheers...Jim

Avatar
maurylen
Member
Forum Posts: 40
Member Since:
March 6, 2010
sp_UserOfflineSmall Offline
3
January 9, 2012 - 3:53 am
sp_Permalink sp_Print

Ashampoo Winoptimiser

CCleaner

MalwareBytes

Regcure

AdAware

Spybot S&D

Spyware Balaster

Super Anti Spuware

 

mostly I use 2, 3, 6, 7 & 8 probably once/week & Avast

problem refers to both IE & FF, they begin to open but stall (freeze) before the home page opens with only blue text and some smaller graphics towards the end of the page - I can type an address into the location bar, e.g. mozilla.com and it opens but the home page still doesn't appear, so there is a net connection, but?? -- Maurylen

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
4
January 9, 2012 - 4:08 am
sp_Permalink sp_Print

So you are using AdAware as your main anti-virus? Is that the free version or paid for?

What about Malwarebytes and SuperAntiSpyware, are they the free versions or paid for? Sorry, I should have stipulated that from the beginning.

What is your home page set to? Have you tried changing the home page? What does the blue text say in the stalled page? Are you getting any sort of error message?

Have you run full/thorough scans with MBAM and SAS? If not, do so - if you have already, I assume they found zero infections?

Cheers...Jim

Avatar
maurylen
Member
Forum Posts: 40
Member Since:
March 6, 2010
sp_UserOfflineSmall Offline
5
January 9, 2012 - 4:52 am
sp_Permalink sp_Print

no, rarely used, it's the free v - i ue Avast, free

MWB & SaS both the free vs

http://yahooxtra.co.nz - though it appears in the bar as - yahoo.com and yes have tried changing it, no diff - the blue text is "headings" - brief example as follows

 

Popular Yahoo! Properties
H 22° L 17° Showers
H 23° L 14° Rain
Choose Your Location ------------------------ Alexandra Ashburton Auckland Blenheim Christchurch Dannevirke Dargaville Dunedin Gisborne Gore Greymouth Hamilton Hastings Hokitika Invercargill Kaikoura Kaitaia Levin Masterton Motueka Mount Cook Napier Nelson New Plymouth Oamaru Paihia Palmerston North Paraparaumu Queenstown Reefton Rotorua Russell Taumarunui Taupo Tauranga Te Kuiti Thames Timaru Tokoroa Wanaka Wanganui Wellington Westport Whakatane Whangarei
Monday January 9, 2012
Popular Yahoo! Services

 

no error message

have run full/thorough scans with MBAM and SAS and yes. no problems

cheers, Maurylen

 

have a larf

My girlfriend says she thinks that I might be a stalker.
Well... she's not exactly my girlfriend yet.

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
6
January 9, 2012 - 6:35 am
sp_Permalink sp_Print

Yes, I've seen that before. Generally means there is a problem with the actual site, how long has this been going on for?

Can you access that Yahoo page okay if you type the URL into the address bar? Are you having issues with any other pages or when you click on links in your bookmarks/favorites sidebar?

Now, about your security setup. Avast and AdAware are both anti-virus programs and as such could likely cause conflicts. I strongly suggest you uninstall AdAware asap and keep Avast.

Both Spybot and Spyware Blaster offer improved protection through Internet Explorer and not much else, if you do not use IE much and generally prefer Firefox, I would seriously consider uninstalling Spybot and Spyware Blaster too. If, however, you tend to use IE more, then by all means keep them.

For now, uninstall AdAware and then try the home page again - let us know the outcome.

Cheers...Jim

Avatar
maurylen
Member
Forum Posts: 40
Member Since:
March 6, 2010
sp_UserOfflineSmall Offline
7
January 9, 2012 - 3:39 pm
sp_Permalink sp_Print

new day Jim, unfortunately no surprises

months

yes - no

done

also done, I use FF most

been a while since opening, have been trying FF & IE periodically, restarts & close few times, but looks as though the problem remains

where to now?

till later, maurylen

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
8
January 9, 2012 - 5:04 pm
sp_Permalink sp_Print

Where to now? - No idea!!! Wink

What's making this difficult is that it's affecting only one specific page, all the rest of your browsing is fine. Plus, that the issue is common to both browsers.

Do you have anything installed which is common to both browsers, a toolbar perhaps or some kind of site ratings tool (such as WOT or McAfee Site Advisor). Look for some element which is common to both IE and FF.

I guess you would have thoroughly cleaned both browsers, including the cache? Do you use CCleaner?

Get back to me and if none of the above helps, I'll ask you to download HijackThis and create and submit a logfile.

Cheers...Jim

Avatar
maurylen
Member
Forum Posts: 40
Member Since:
March 6, 2010
sp_UserOfflineSmall Offline
9
January 9, 2012 - 5:06 pm
sp_Permalink sp_Print

add-on

took me about 10 tries to log on Jim ???

had some thoughts about firewalls - some time ago (3 months?) i replaced my modem with a new Belkin and had their help system set it up online - she told me to run it direct through the computer which meant disconnecting the wireless router, which didn't concern me as only the kids use it for their laptops when they're visiting - i thought afterwards that maybe that had disabled a firewall so i enabled the MS one through the control panel - wonder if that could have some bearing on the current problem? like conflicting with the modem or router - have now disabled the MS one

logging on to your site is a newey

off to the golf course, till later

cheers, Maurylen

Avatar
maurylen
Member
Forum Posts: 40
Member Since:
March 6, 2010
sp_UserOfflineSmall Offline
10
January 9, 2012 - 11:53 pm
sp_Permalink sp_Print

hijackthis logfile

hope this is what you referred to - doesn't make a lot of sense to me Jim but hope it does to you

 

Logfile of HijackThis v1.99.1
Scan saved at 5:50:18 PM, on 1/10/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Running processes:
C:\WINDOW\System32\smss.exe
C:\WINDOW\system32\winlogon.exe
C:\WINDOW\system32\services.exe
C:\WINDOW\system32\lsass.exe
C:\WINDOW\system32\svchost.exe
C:\Program Files\Rohos\agent.exe
C:\WINDOW\System32\svchost.exe
C:\WINDOW\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOW\Explorer.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOW\system32\RUNDLL32.EXE
C:\WINDOW\RTHDCPL.EXE
C:\WINDOW\system32\ctfmon.exe
C:\Program Files\What's my computer doing\WhatsMyComputerDoing.exe
C:\WINDOW\system32\spoolsv.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOW\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOW\System32\svchost.exe
C:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe
C:\WINDOW\system32\nvsvc32.exe
C:\WINDOW\System32\svchost.exe
C:\WINDOW\system32\ssoftsrv.exe
C:\WINDOW\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOW\system32\wscntfy.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahooxtra.co.nz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: The blinkx Toolbar - {0069B690-7A2B-41C5-98CA-9F535B4C8532} - C:\Program Files\blinkx Remote Toolbar\the_blinkx_bho.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: (no name) - {abb88e4e-75f4-4fdc-8f42-d101484c4b3f} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)
O2 - BHO: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O2 - BHO: (no name) - {d51d388b-f5dc-471a-a1ce-5e2d671091c0} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOW\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOW\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOW\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOW\system32\Adobe\Shockwave 11\SwHelper_1150595.exe -Update -1150595 -"Mozilla/5.0_(Windows_NT_5.1;_rv:7.0.1)_Gecko/20100101_Firefox/7.0.1" -"http://gameserver.mattel.com/assets/en/games/breakless/game.html?gameid=9x945261kqd9&velocitygameid=&gname=Brakeless&gcamp=None&gchannel=Games&randid=774531&config=aHR0cDovL3d3dy5ob3R3aGVlbHMuY29tL3htbC9nYW1lLzl4OTQ1MjYxa3FkOS9jb25maWcueG1s"
O4 - Global Startup: What's my computer doing.lnk = C:\Program Files\What's my computer doing\WhatsMyComputerDoing.exe
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E9BA8F8-561D-463F-939F-513527088695}: NameServer = 4.2.2.2,4.2.2.3
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: TPSvc - TPSvc.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOW\system32\WPDShServiceObj.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOW\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOW\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: NitroPDFReaderDriverCreatorReadSpool2 (NitroReaderDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOW\system32\nvsvc32.exe
O23 - Service: Rohos Disk service (Rohos Disk) - Unknown owner - C:\Program Files\Rohos\agent.exe" /service (file missing)
O23 - Service: ProgramCheckerPro (sassvc) - Unknown owner - C:\Program Files\Zenturi\ProgramChecker\sassvc.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOW\SYSTEM32\ssoftsrv.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: User Profile Hive Cleanup (UPHClean) - Windows (R) Codename Longhorn DDK provider - C:\Program Files\UPHClean\uphclean.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
11
January 10, 2012 - 1:21 am
sp_Permalink sp_Print sp_EditHistory

Okay, you did it already!!

Quite a mess there I'm afraid. You will need to run Hijack This again and this time select "Do a system scan only". Now, from the list I want you to place a checkmark next to the following items:

R1 – HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local

O2 – BHO: (no name) – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – (no file)

O2 – BHO: (no name) – {abb88e4e-75f4-4fdc-8f42-d101484c4b3f} – (no file)

O2 – BHO: (no name) – {ba14329e-9550-4989-b3f2-9732e92d17cc} – (no file)

O2 – BHO: (no name) – {D4027C7F-154A-4066-A1AD-4243D8127440} – (no file)

O2 – BHO: (no name) – {d51d388b-f5dc-471a-a1ce-5e2d671091c0} – (no file)

O4 – HKLM..Run: [UserFaultCheck] %systemroot%system32dumprep 0 -u

Now click on the "Fix Checked" button.

There are several others about which I am uncertain. We'll see how you go after the ones I have listed have been fixed.

Have you always used the Avast Web Rep component? Is there an easy way to disable Web Rep or turn it off temporarily and then see if your home page will load properly?

Also, you seem to have several toolbars installed, I don't like nor trust toolbars. What on earth is The Blinkx Toolbar? You also have a Yahoo Toolbar Helper and Avast's WebRep Toolbar. All these can be possible suspects.

Anyway, try fixing the items I have listed first and we'll take it from there.

Cheers...Jim

Avatar
maurylen
Member
Forum Posts: 40
Member Since:
March 6, 2010
sp_UserOfflineSmall Offline
12
January 10, 2012 - 2:03 am
sp_Permalink sp_Print

fix checked, done

Avast Web Rep component? - pass on that one - looked through Avast and couldn't find it, where would it be?

re those toolbars, are they installed by the user? or is there some nefarious method? - don't remember ever voluntarily installing any - suggestions to delete?

will close and see what eventuates

cheers Maurylen

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
13
January 10, 2012 - 2:24 am
sp_Permalink sp_Print

Before we go any further, how did it go - you didn't say? Also, did you reboot the computer after fixing checked - if not, do that too and let me know if the home page is now loading okay or not.

Cheers...Jim

Avatar
maurylen
Member
Forum Posts: 40
Member Since:
March 6, 2010
sp_UserOfflineSmall Offline
14
January 10, 2012 - 3:37 am
sp_Permalink sp_Print

don't want to get too excited yet, but have opened and closed FF 10 times, IE also, restarted a coupla times, you think it's over? seems to be but should i wait longer? what do you think was the defining change? anything else i should do? or maybe just say THANKS and i marvel at your patience, some of us are not too technically gifted -  nearly forgot, any comments re firewalls? having disabled MS is there one in the modem? or the router? should i reactivate MS firewall?- one very grateful client Jim, cheers, Maurylen

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
15
January 10, 2012 - 7:45 am
sp_Permalink sp_Print

Hey Maurylen - You little beauty!!! I'd say that one of the items we fixed via Hijack This was the most likely culprit, exactly which one would only be a guess. Glad to hear all is well though, should stay that way now.

You should definitely turn Windows Firewall back on, even if the router includes a firewall. One is a hardware firewall and the other a software firewall so they should not conflict and together they will do a good job. No need for any 3rd party firewall, I don't really think they help all that much anyway.

Avast is an excellent product and together with Windows Firewall should provide adequate security, especially if you tend toward caution and follow a safe surfing policy. Although security software certainly helps, a huge part of security and associated risks is in the hands of the user.

Cheers now mate...Jim

Forum Timezone: America/Indiana/Indianapolis

Most Users Ever Online: 188

Currently Online:
6 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Member Stats:

Guest Posters: 10

Members: 1273

Moderators: 3

Admins: 4

Forum Stats:

Groups: 8

Forums: 19

Topics: 1538

Posts: 11824

Administrators: Jim Hillier, Richard Pedersen, David Hartsock, Marc Thomas

Moderators: Judy Novotny, Jason Shuffield, Mail Poet