We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
The Forum now has a brand new text editor, adding a bunch of handy features to use when creating posts. Read more in our how-to guide

More viruses - argh!

interlcore
interlcore Posts: 198 Forumite
in Techie Stuff
I was visting a website that I always go to and Avast said it caught a trojan in time. So to be sure I run avast which finds a trojan (I moved it to the chest):
HTML:RedirME-inf [Trj]
This is now in the chest. Next I ran spybot which found 9 entries all found coupon bar :-? It said I had to run as adminstrator even though I used the admin account to fix checked problems. I'm not sure what to do here. The results are too long to post here. I am currently scanning with Malwarebytes.
I was wondering instead of coming to you guys everytime, is it ok to run all my virus protection software and let it clean or move to chest, I'll be ok? You guys are fantastic but I don't want to be a big baby and come running to you everytime I get a virus.
«1

Comments

  • RussJK
    RussJK Posts: 2,359 Forumite
    Generally the more confident you get, the less you'll need to ask for help.

    Might be time to look at some preventative measures beyond just an antivirus though...
  • somersethillbilly
    somersethillbilly Posts: 524 Forumite
    It may be worth considering a sandbox?
    http://www.sandboxie.com/
  • interlcore
    interlcore Posts: 198 Forumite
    I will take a look at Sandbox now. Malware bytes has finished. Nothing found :) Here's the results:
    Malwarebytes' Anti-Malware 1.51.0.1200
    www.malwarebytes.org
    Database version: 7012
    Windows 6.1.7601 Service Pack 1
    Internet Explorer 9.0.8112.16421
    03/07/2011 21:30:08
    mbam-log-2011-07-03 (21-30-08).txt
    Scan type: Full scan (C:\|D:\|)
    Objects scanned: 382521
    Time elapsed: 1 hour(s), 51 minute(s), 59 second(s)
    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0
    Memory Processes Infected:
    (No malicious items detected)
    Memory Modules Infected:
    (No malicious items detected)
    Registry Keys Infected:
    (No malicious items detected)
    Registry Values Infected:
    (No malicious items detected)
    Registry Data Items Infected:
    (No malicious items detected)
    Folders Infected:
    (No malicious items detected)
    Files Infected:
    (No malicious items detected)
  • interlcore
    interlcore Posts: 198 Forumite
    Hitman Pro came back with no threats found. But it did find a tracking cookie from Paypal. Should I be concerned? This is the HiJack This log:
    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 21:53:33, on 03/07/2011
    Platform: Windows 7 SP1 (WinNT 6.00.3505)
    MSIE: Internet Explorer v9.00 (9.00.8112.16421)
    Boot mode: Normal
    Running processes:
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
    C:\Program Files\Freecorder\FLVSrvc.exe
    C:\Program Files\Common Files\AOL\1269802939\ee\aolsoftware.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files\Alwil Software\Avast5\AvastUI.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Sun\StarOffice 9\program\soffice.exe
    C:\Program Files\Sun\StarOffice 9\program\soffice.bin
    C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
    C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    c:\program files\aol\aol broadband toolbar 5.0\AolTbServer.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
    C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
    C:\Windows\system32\Macromed\Flash\FlashUtil10t_ActiveX.exe
    C:\Program Files\Sandboxie\SbieCtrl.exe
    C:\Program Files\Sandboxie\SandboxieRpcSs.exe
    C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Sandboxie\SbieSvc.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\AOL\AOL Broadband Toolbar 5.0\AolTbServer.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
    C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
    C:\Program Files\ClearCloud\ClearCloud DNS\SBCC_Utility_Tray.exe
    C:\Users\Jones\Downloads\HijackThis.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\DllHost.exe
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.medion.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://medion.msn.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.aol.co.uk/web?isinit=true&query=%s
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost #[IPv6]
    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Broadband Toolbar 5.0\aoltb.dll
    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O3 - Toolbar: AOL Broadband Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Broadband Toolbar 5.0\aoltb.dll
    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
    O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
    O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files\Freecorder\FLVSrvc.exe" /run
    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1269802939\ee\AOLSoftware.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [FileHippo.com] "C:\Program Files\FileHippo.com\UpdateChecker.exe" /background
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe"
    O4 - Startup: StarOffice 9.lnk = C:\Program Files\Sun\StarOffice 9\program\quickstart.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol broadband toolbar 5.0\resources\en-GB\local\search.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
    O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: Sandboxie Service (SbieSvc) - SANDBOXIE L.T.D - C:\Program Files\Sandboxie\SbieSvc.exe
    --
    End of file - 9052 bytes
  • esuhl
    esuhl Posts: 9,409 Forumite
    Part of the Furniture 1,000 Posts Name Dropper
    interlcore wrote: »
    ...I don't want to be a big baby and come running to you everytime I get a virus.

    Every time you get a virus?! The only virus I've ever had was over 10 years ago on a PC that was so slow I didn't bother to install any anti-malware software. If you're getting viruses regularly, you might want to review the protection you're using.

    In case it helps, I use Spybot, AntiMalware, AntiVir, SpywareBlaster and Secunia PSI on my Windows machines.
  • interlcore
    interlcore Posts: 198 Forumite
    esuhl wrote: »
    Every time you get a virus?! The only virus I've ever had was over 10 years ago on a PC that was so slow I didn't bother to install any anti-malware software. If you're getting viruses regularly, you might want to review the protection you're using.

    In case it helps, I use Spybot, AntiMalware, AntiVir, SpywareBlaster and Secunia PSI on my Windows machines.

    I use the ones that were recommended to me by the great people of this forum :) I use Avast, Spybot, Hitman Pro, Malware Bytes, Clear Cloud, CCleaner and Hijack This for the great people of this forum to take a look at the latest log. And last night, started using Sandboxie. I think that's all of them. I shall take a look at the ones you have mentioned that I do not have.

    My sister says she never gets a virus. I asked what protection is she using. None :eek:

    Can anyone tell me if I'm ok to go?
  • gonzo127
    gonzo127 Posts: 4,482 Forumite
    Part of the Furniture Combo Breaker
    silly question are you the only user of this system?
    Drop a brand challenge
    on a £100 shop you might on average get 70 items save
    10p per product = £7 a week ~ £28 a month
    20p per product = £14 a week ~ £56 a month
    30p per product = £21 a week ~ £84 a month (or in other words one weeks shoping at the new price)
  • interlcore
    interlcore Posts: 198 Forumite
    gonzo127 wrote: »
    silly question are you the only user of this system?

    No, there are 3 users.
  • gonzo127
    gonzo127 Posts: 4,482 Forumite
    Part of the Furniture Combo Breaker
    Ok well to be honest, and please don’t take this as having a go as I could be totally wrong, however in my mind if you are constantly getting virus's you need to talk about peoples browsing habits more than anything.

    This is because although any website can get hijacked to give you virus's or direct you to a compromised site, this is (in general) a rare occurrence with legitimate sites, however if one or more people using the system are going to some slightly more dodgy sites, some examples being some p2p sites, or other pirated software download sites, or p0rn of course, then you are much more likely to get repeated infections as your system is being exposed to them more often. And since no security software is 100% effective the more exposure to them the more likely you are to become infected, hence the repeated infections
    Drop a brand challenge
    on a £100 shop you might on average get 70 items save
    10p per product = £7 a week ~ £28 a month
    20p per product = £14 a week ~ £56 a month
    30p per product = £21 a week ~ £84 a month (or in other words one weeks shoping at the new price)
  • jackieblack
    jackieblack Posts: 10,625 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    We never had a virus until DD started using Facebook :(
    Everything will be alright in the end so, if it’s not yet alright, it means it’s not yet the end
    Quidquid Latine dictum sit altum videtur
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 353.5K Banking & Borrowing
  • 254.1K Reduce Debt & Boost Income
  • 455K Spending & Discounts
  • 246.6K Work, Benefits & Business
  • 602.9K Mortgages, Homes & Bills
  • 178.1K Life & Family
  • 260.6K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture