[Resolved]Need some help please

Unknown
edited January 2007 in Spyware & Virus Removal
Hi all, im having a great problem with my computer. ive read a lot of solutions in forums but any of them have result. Can anyone please help me?

After some mins connected to internet (and this just append when im connected) some window pop-up saying:Services and Controller app (with something else write) and some mins after another window saying: NT AUTHORITY/SYSTEM (and say that needs to shut down) sometimes really shut down, sometimes dont and my pc gets so slow i cant do anything (but cpu stays at 5%). Ive done all the thinks ive read (almost all solution are to remove some worm/trojan) i cant find any virus, trojan or worm, or something.

i always have my panda update, and now i buy bit defender.

You guys are my final solution before install XP again

ahhh something i can stay at internet and nothing append (like now)...

Thanks for the attention

Comments

  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited January 2007
    Post a HijackThis log here. If it contains any suspicious items, we'll refer you to our experts in that area. If not, we'll go from there. :)
  • unforgiven_mt
    edited January 2007
    everytime i try run Hijack it stop and when i open task manager i can see program is not responde... going to try again. Can i do that in safe mode?

    well i see not that when hijack stop,in the processes tab some bdss.exe puts the cpu to up 90% and more. I think this file is from Bit Defend but... eheh
  • unforgiven_mt
    edited January 2007
    ok the log file is:

    Logfile of HijackThis v1.99.1
    Scan saved at 18:16:31, on 18-01-2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\SYSTEM32\winlogon.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe
    C:\Program Files\Spyware Doctor\sdhelp.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
    C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
    C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
    C:\Program Files\Softwin\BitDefender9\vsserv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\WgaTray.exe
    C:\Program Files\Anti-Blaxx\Anti-Blaxx.exe
    C:\WINDOWS\system32\umonit.exe
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\pt-pt\msnappau.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
    C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
    C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe
    C:\Program Files\Softwin\BitDefender9\bdoesrv.exe
    C:\PROGRA~1\Softwin\BITDEF~1\bdswitch.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
    C:\Program Files\Porto Editora Multimedia\Diciopedia 2005 DVD\TaskIconD2005.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\SpeedFan\speedfan.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\dwwin.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\taskmgr.exe
    C:\WINDOWS\system32\dumprep.exe
    C:\WINDOWS\system32\dwwin.exe
    C:\Documents and Settings\Unforgiven\Desktop\hijackthis_199\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oni.pt/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
    O2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
    O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
    O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: Encarta Web Companion Helper Object - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Common Files\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\pt-pt\msntb.dll
    O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
    O3 - Toolbar: Encarta Web Companion - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Common Files\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\pt-pt\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\Anti-Blaxx\Anti-Blaxx.exe
    O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\system32\umonit.exe
    O4 - HKLM\..\Run: [PelSetupRun] F:\setup.exe
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\pt-pt\msnappau.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [RegistrySmart] "C:\Program Files\RegistrySmart\RegistrySmart.exe" -boot
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
    O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
    O4 - HKLM\..\Run: [BDNewsAgent] "C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe"
    O4 - HKLM\..\Run: [BDSwitchAgent] "C:\PROGRA~1\Softwin\BITDEF~1\bdswitch.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [LDM] \Program\
    O4 - HKCU\..\Run: [Spyware Doctor] "C:\Documents and Settings\Unforgiven\Desktop\Spyware.Doctor.4.0.0.2621_CRKEXE-FFF\swdoctor.exe" /Q
    O4 - Startup: SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe
    O4 - Global Startup: Diciopédia 2005 DVD Tray.lnk = C:\Program Files\Porto Editora Multimedia\Diciopedia 2005 DVD\TaskIconD2005.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Open PDF in Word - res://C:\Program Files\ScanSoft\PDF Converter\IEShellExt.dll /100
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1164203250012
    O16 - DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} (HPObjectInstaller Class) - http://h30155.www3.hp.com/ediags/dd/install/guidedsolutions.cab
    O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
    O16 - DPF: {AEF76437-F960-4EBC-97EA-7BBB4230CF38} (OcarptMain Class) - https://oca.microsoft.com/en/secure/ocarpt.CAB
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{7FC96F54-926A-4FDC-AFEB-80D82B6D3C90}: NameServer = 195.245.176.19 194.38.131.19
    O18 - Protocol: bw+0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {1151DAD1-7CF9-4DED-9C05-10CEFA9B33C4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: rpcc - C:\WINDOWS\
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
    O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - C:\Program Files\Power Translator\LogoMedia TranslateDotNet Server.exe
    O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
    O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcDataSrv.exe
    O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcSandraSrv.exe
    O23 - Service: SolidPDFConverterReadSpool (ScReadSpool) - VoyagerSoft, LLC - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe
    O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
    O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
    O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited January 2007
    There are a number of entries there which I am not sure about. Let's have our SVT experts have a look and make sure that everything is as it should be. :)
  • unforgiven_mt
    edited January 2007
    ahh another think, now when nothing of that append, after a while the pc shutdown alone, and than after xp up again and send the error report to microsoft its say that its because a symantec update. I dont have any symantec installed... ??
  • unforgiven_mt
    edited January 2007
    HI all again, im still waiting fpr some response, dont know what to do. I need the PC to work and the problems still continue. And now what append more is after a while of beeing conected to internet the pc shutdown alone and when it started xp again its says that have recover from a serious error (when i send the error to microsoft it says that is because a symantec update, but i dont have anything from sumantec). And now when i try to update windows or the Anti-Virus the PC shutdown. Im really thinking of make a format and new XP install. What should i do?

    ...ahh and the others problems still append sometimes...
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited January 2007
    Can you take a screenshot of the error message and post it here?
  • TroganTrogan London, UK
    edited January 2007
    Hi Prof and unforgiven_mt. Apologies for the delay, unforgiven_mt.

    I'm afraid I have some bad news. Looking through the HijackThis log, I see that you were infected by Backdoor.Win32.Bifrose.aat.

    Here is a quick type description of this infection:
    Malware ("malicious software") consists of software with clearly malicious, hostile, or harmful functionality or behavior and that is used to compromise and endanger individual PCs as well as entire networks.

    And a quick catogory description:
    A Backdoor is a software program that gives an attacker unauthorized access to a machine and the means for remotely controlling the machine without the user's knowledge. A Backdoor compromises system integrity by making changes to the system that allow it to by used by the attacker for malicious purposes unknown to the user.

    This gives intruders complete control of your computer, logging key strokes, stealing information, etc. :(

    You are strongly advised to do the following immediately!:
    • Disconnect infected computer from the internet and from any networked computers until the computer can be cleaned.
    • Call all of your banks, credit card companies, financial institutions and inform them that you may be a victim of identity theft and to put a watch on your accounts or change all your account numbers.
    • From a clean computer, change *all* of your online passwords -- for ISP login, email, banks, financial accounts, PayPal, eBay, online companies, and any online forums or groups you belong to.
        Do NOT change passwords or do any transactions while using the infected computer because the attacker will get the new passwords and transaction information.
      Because of its backdoor functionality, your PC is very likely compromised and there is no way to be sure it can ever again be trusted. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be a reformat and reinstall of the OS. However, if you do not have the resources to reinstall your OS and would like me to attempt to clean your machine, I will be happy to do so.

      To help you make a more informed decision, please read the following articles: Should you have any questions, please feel free to ask

      Please let me know your decision and we'll get started with clean up if that's what you choose.
    • unforgiven_mt
      edited January 2007
      HI, thanks for the reply. Well if i format and reinstall things, you think the problem resolves?... i dont mind do that. I have some expirience on that.

      Thanks
    • TroganTrogan London, UK
      edited January 2007
      Yes, the problems should go away.

      Let us know if you have any questions or need help with formatting.

      Keep us updated. :)
    • unforgiven_mt
      edited January 2007
      Ok thanks again.

      I think its safer to format and install things again.
    • TroganTrogan London, UK
      edited January 2007
      Remember to install an Anti-Virus and Firewall immediately after the reformat.

      Let us know when you've got things sorted so we may close this thread.
    • unforgiven_mt
      edited January 2007
      Ok all re-install and for now all ok. Just have installed XP, Bit Defender and WOW.

      Think i dont install more for now. Going to arrange my other PC and let him do the "dirty" Work (emule, etc...)

      Thanks once again for the help.

      Unforgiven
    • TroganTrogan London, UK
      edited January 2007
      You're welcome! :)

      Here are some tips for a clean and secure computer.

      For XP users.
      It's a good idea to Flush your System Restore points after ridding yourself of malware. You can clean this by doing the following:
      • Click Start | Help and Support | Undo changes to your computer with System Restore.
      • Click Create A Restore Point then click Next. Give it a name it and then click Create, then Close.
      • Close the Help and Support Center box.
      • Click Start | Run and type Cleanmgr
      • Select (C: ) then click OK.
      • Click the More Options tab.
      • Click Clean Up in the System Restore Section.
      This will remove all previous restore points except the newly created one.

      Make your Internet Explorer more secure
      1. From within Internet Explorer click on the Tools menu and then click on Options.
      2. Click on the Security tab
      3. Click the Internet icon so it becomes highlighted.
      4. Click on Default Level and click OK
      5. Click on the Custom Level button.
        • Change the Download signed ActiveX controls to Prompt
        • Change the Download unsigned ActiveX controls to Disable
        • Change the Initialise and script ActiveX controls not marked as safe to Disable
        • Change the Installation of desktop items to Prompt
        • Change the Launching programs and files in an IFRAME to Prompt
        • Change the Navigate sub-frames across different domains to Prompt
        • Internet Explorer 7 users: Check all other items and make sure that they meet the (recommended) setting when applies.
        • When all these settings have been made, click on the OK button.
        • If it prompts you as to whether or not you want to save the
        settings, press the Yes button.
      6. Next press the Apply button and then the OK to exit the Internet Properties page.
      Take the time to check out the following links

      Introduction to Internet Explorer 7
      http://www.microsoft.com/windows/ie/default.mspx

      Internet Explorer 7 features
      http://www.microsoft.com/windows/ie/ie7/about/features/default.mspx

      Release Notes for Internet Explorer 7
      http://msdn2.microsoft.com/en-us/ie/aa740486.aspx
      These Release Notes give you information about installing Internet Explorer® 7 and contain information about known issues and possible workarounds for those issues.

      Internet Explorer 7 Ressources - In Depth Articles - Known Issues ...
      http://www.ie-vista.com/

      Internet Explorer7 - Phishing Filter Frequently Asked Questions
      http://www.microsoft.com/mscorp/safety/technologies/antiphishing/faq.mspx

      Resources for using Internet Explorer 6
      http://support.microsoft.com/?kbid=867470

      How to Configure Enhanced Security Features for Internet Explorer from Windows XP SP2
      http://www.microsoft.com/technet/security/smallbusiness/prodtech/windowsxp/iesecxp.mspx

      Safety Home
      http://www.microsoft.com/mscorp/safety/default.mspx

      IEBlog
      http://blogs.msdn.com/ie/default.aspx

      Microsoft Malicious Software Removal Tool
      http://www.microsoft.com/security/malwareremove/families.mspx

      Keep your Sun Java up to date

      The most current version of Sun Java is: Java Runtime Environment Version 6.0
      http://java.sun.com/javase/downloads/index.jsp
      • Scroll down to where it says "Java Runtime Environment (JRE) 6".
      • Click the "Download" button to the right.
      • Check the box that says: "Accept License Agreement".
      • The page will refresh.
      • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
      • Close any programs you may have running - especially your web browser.
      • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
      • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
      • Click the Remove or Change/Remove button.
      • Repeat as many times as necessary to remove each Java versions.
      • Reboot your computer once all Java components are removed.
      • Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.
      And in the future, remember to remove older versions of Java when you update to a newer version to avoid exploitation of older versions left on your system.

      Check out these topics for more information:
      http://spywarewarrior.com/viewtopic.php?t=17910
      http://spywarewarrior.com/viewtopic.php?t=17598

      Free programs that may help you in keeping the PC clean
      • SpywareBlaster
        SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
        You can download SpywareBlaster here
        A tutorial can be found here
      • SpywareGuard
        It provides a degree of real-time protection solution against spyware that is a great addition to SpywareBlaster's protection method. An anti-virus program scans files before you open them and prevents execution if a virus is detected - SpywareGuard does the same thing, but for spyware. And you can easily have an anti-virus program running alongside SpywareGuard. It also features Download Protection and Browser Hijacking Protection.
        You can download SpywareGuard here
        A tutorial can be found here
      • IE-SPYAD
        IE-SPYAD puts over 5000 sites in your restricted zone, so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all. It basically prevents any downloads, cookies, scripts from the sites listed, although you will still be able to connect to the sites.
        You can download IE-SPYAD here
        A tutorial can be found here
      • Hosts File
        A Hosts file replaces your current HOSTS file with one containing well known ad, spyware sites etc. Basically, this prevents your coputer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer.
        A tutorial can be found here
        • MVPS Hosts File
          You can download the MVPS Hosts File here
          Furthermore the website contains useful tips and links to other resources and utilities.
        • Bluetack's Hosts File and Hosts Manager
          Essentially based on the research made by Webhelper, Andrew Clover and Eric L. Howes, it contains most if not all the known spyware sites...sites responsible for hijacks, rogue apllications etc...
          Download Bluetack's Hosts file here
          Download Bluetack's HostsManager here
      Free Spyware Detection and Removal Programs
      • Ad-Aware
        It scans for known spyware on your computer. These scans should be run at least once every two weeks.
        You can download Ad-Aware here
        A tutorial can be found here
      • Spybot - Search & Destroy
        It scans for spyware and other malicious programs. Spybot has preventitive tools that stop programs from even installing on your computer.
        You can download Spybot - S&D here
        A tutorial can be found here
      Before adding any other Spyware Detection and Removal programs always check the Rogue Anti-Spyware List for programs known to be misleading, mistaken, or just outright "Foistware".
      You will find the list here

      WinPatrol

      WinPatrol uses a heuristic approach to detecting attacks and violations of your computing environment. Traditional security programs scan your hard drive searching for previously identified threats. WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge. You'll be removing dangerous new programs while others download new reference files.
      • Detect & Neutralize Spyware.
      • Detect & Neutralize ADware.
      • Detect & Neutralize Viral infections.
      • Detect & Neutralize Unwanted IE Add-Ons.
      • Detect & Restore File Type Changes.
      • Automatically Filter Unwanted Cookies.
      • Avoid Start Page Hijacking.
      • Detect changes to HOSTS & critical system files.
      • Kill Multiple Tasks that replicate each other, in a single step!
      • Stop programs that repeatedly add themselves to your Startup List!
      Starting with WinPatrol 9.5 PLUS users also get the addition of Real-time Infiltration Detection so they'll know immediately when changes are made to critical system areas. WinPatrol Free is not demo or trial software. You're welcome to use it as long as you like.
      You can download WinPatrol here
      WinPatrol FAQ

      SiteHound by Firetrust

      Firetrust introduces the SiteHound Toolbar - the safe way to browse the Internet. With SiteHound, when you browse the Internet, you're shown a warning page every time you go to a site which is a known scam, potentially loads viruses or spyware on to your computer, has questionable content or anything you would not consider reasonable. You are shown a warning page with information about that site. From there you can choose to enter the site or go back. SiteHound is a free add-on to Internet Explorer. (Users of Firefox - a version for you is coming soon.) SiteHound's comprehensive database gathers the knowledge from other users and respected experts from the online security community to tell you which sites are real and which are bogus.

      SiteHound will alert you when you enter a site which is known to contain:
      • Fraudulent claims or scams
      • Offensive material
      • Security vulnerabilities
      • Spyware or Adware
      • Spam related material
      • or other content deemed to be unsafe
      Specifically, SiteHound blocks these categories:

      • Adult • Spyware • Spam Advertising • Phishing • Possible scam or fraud • Misleading or False Advertising
      • Pharming • Rogue or Suspect Product • Adware • Malware or Virus

      System Requirements:
      Internet Explorer 5.5+ and Windows 95/98/NT 4/ME/2000/XP

      Product Info & Download: SiteHound Toolbar

      Use an AntiVirus Software

      It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See the link below for a listing of some online & their stand-alone antivirus programs.
      Computer Safety On line - Anti-Virus
      http://forum.malwareremoval.com/viewtopic.php?p=53#53

      Update your Anti Virus Software

      It is imperative that you update your Anti virus software at least once a week (Even more if you wish). If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.

      Use a Firewall

      I can not stress enough how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. For an article on Firewalls and a listing of some available ones see the link below.

      Computer Safety On line - Software Firewalls
      http://forum.malwareremoval.com/viewtopic.php?p=56#56
      A tutorial on Understanding and Using Firewalls can be found here

      Happy Surfing! :)
    This discussion has been closed.