Jump to content

2bconfused

Members
  • Posts

    18
  • Joined

  • Last visited

Everything posted by 2bconfused

  1. Will do!!! Hope it works out as "perfect" as it sounds (I'm doing it next weekend cause can't risk a computer conflict before then
  2. Thank you Prairie Dog for your reply. (By the way I'm not a new member but thanks anyway for the warm welcome ) I don't believe I have any malware or virus on my system. I ran a full system scan yesterday with both Norton antivirus and Malwarebytes since I knew I was going to be removing NAV from my system later this week and switching to another AV program - and wanted to be sure my system was absolutely clean. It was! However, since posting my query (above) a little earlier I tried downloading Avasts software program to my desktop using IE instead of Firefox (which I alway use instead). It went flawlessly - so I think the issue has something to do with my Firefox settings - tho I don't know what it might be since I'm not receiving any warning notification on my task bar - which is usually the case when Firefox blocks something because of ones settings. Since I don't like to use IE - I'd really like to rectify this download issue. Any suggestions anyone?
  3. Suddenly - today - anything I try to download and Save to my desktop simply disappears - instead of actually downloading. This happened at Symantics web site when I tried to download the NAV Removal Tool, at Avasts site when I tried to download their free home use version (in fact, both on their own web site as well as at the Download.com link) and with a link to yet another site in order to download/save a program called Autoruns to my destop. In each case - at these completely different web sites, in an attempt to download different programs - when I clicked on Save File the window would simply disappear immediately and nothing at all would download to my desktop. I even tried opening Options/Security/Exceptions in Firefox - and adding downloads.com to the Exceptions list (after that specific download failed to occur) but it was to no avail. This has never occurred before and I don't have a clue what could possibly be preventing any download from any site. I use Windows XP2-Home Ed. Can anyone offer any suggestions as to what is (or isn't) going on?
  4. Hey Exile.... Thanks! Sounds like it's far easier than I'd been led to believe. I have to do this later this week. And so - in the meantime - if anyone has any further advice before I go on to download and install Avast - please do share it.....I've read so many horror stories about conflicts when one has remnants of an old AV program conflicting with a 2nd one.
  5. Hello Maniac Thanks for your reply: 1. In which part of forum should I have posted my question? 2. Apparently the Norton Removal Tool does not totally remove all traces (lots will still remain, apparently, including Live update etc. - which can subsequently cause major conflicts and wreak havoc on your system if you then proceed to install a different AntiVirus program. I believe that tho one should use the Norton Removal Tool - it must be supplemented by other steps. The question is: what are they? 3. Re: Revo Uninstaller - I think I didn't express my question well. I didn't mean to imply that I wanted to use Revo for doing the uninstall. I meant to ask: Once having done it - would Revo be good to use to check that all traces are gone prior to installing a new AV program? Thanks again Maniac for your response - it helps me to clarify my initial question which I think I expressed badly in the first place - I can't blame you at all for misunderstanding
  6. Hope this query is appropriate in this forum and that I'm posting in the right place (?) Can anyone advise me as to how to completely remove Norton Anti-Virus 2005 from my laptop? I use Windows XP Home Ed. My Norton annual subscriiption is about to expire. I want to install Avast (free version) instead. I've used Norton for years on this computer (it's the only antivirus software I've ever used on this laptop) and want to be absolutely certain that all traces of it are totally (and safely) removed before I proceed with installing any different AV software. I'm not that tech savy - so a clear explanation would be greatly appreciated! Incidentally - I should mention that I already have Revo Uninstaller on my system - (in case that might provide an additional way of ascertaining whether everything has been removed once I complete the process...?????) Thanks in advance for any input.....
  7. Thanks exile360. At last...all is well. And just in case anyone else runs into the same problem I did...I was only able to finally find and select "ignore" by right clicking on the entry and selecting "Add to Ignore List" from the drop down menu. It's always so embarrassingly obvious once one finally 'gets' it B) I appreciate everyones helpful input.......
  8. 1. ......but for me - when I scanned - every option (including "Ignore") was inactive!!! When I tried to hit ignore nothing would occur . "Remove" - at the bottom of the window was the only option for me. (The only "active" choice) As I said in my prior posts - I proactively choose to disable my virus protection before scanning but I don't seem to be able to select "Ignore" at the top of the window, instead of "Remove" at the bottom, with regard to the "
  9. Hi Bruce (ADMIN:Nosirrah)....I'm the person who began this string (posts #1&2)...thanks for your replies which still leave me a bit confused. I just re-scanned after updating MBAM from v.1849 to v.1851. Unfortunately, I still receive the same log entry as before: Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Hijack.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. To answer your querys and add a bit more info: No, I don't have any "reg guard software" (which you suggest as a possible culprit in your reply). I only have Norton AntiVirus 2005 and the free version of AdAware 2008 (which, of course, doesn't run in real time). My settings are no different from when I've run prior scans. They are as follows: I leave Windows (XP2 Home Ed.) Firewall enabled. It's always been configured (re: Nortons instructions) with Norton Live Update added to its Exceptions List - so that Nortons and Windows firewalls don't conflict (I know they're both pretty paltry ...and I can still receive my Automatic Updates). Prior to running a scan I've always disabled my NAV (out of an abundance of caution) and did so this time as well. 1.Does the above provide any insight into why I've suddenly begun receiving the "Registry Data Infected" log notation (despite not making any system changes)? 2.When you suggest changing registry key...I don't know how to do that (or even what that actually means). Does your 2nd reply in this string, copied below, describe what's occurring in my case? (If so, if I run another scan, and then hit ignore when I (again) receive that log entry warning, what protection will I have if some malware (in the future) turns off my protection and MBAM is configured to ignore this? Like I said before, these are registry keys that can be disabled by either malware (to prevent notification that protection is disabled) or by the user or their legit software to prevent conflicts or duplicate warnings . If you are seeing these with no other signs of infection then it is far more likely that your 3rd party security software has disabled these warnings to prevent duplicate security warnings and in these cases telling MBAM to ignore them once will forever solve the issue . The keys themselves tell you exactly what they do : FirewallDisableNotify -> If set to 1 then do not show windows firewall disabled warnings . UpdatesDisableNotify -> If set to 1 then do not show the warning indicating that automatic updates are disabled .
  10. The log I posted is inaccurate...I had copied it before removing the "Infected" Registry item. That line now reads: Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Hijack.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. By the way...I ran a 2nd scan and this same "Infected" item shows up AGAIN. And there's nothing in my quarantine file.
  11. Apologies if I'm not posting this in the correct forum section. I just ran a quick MBAM scan which turned up : 1 Infected Registry Data Item. I tried to quarantine it but "Remove" was the only active option and so - that's what I did. Can someone tell me what this is and whether I should do anything further? Here's the log file: Malwarebytes' Anti-Malware 1.34 Database version: 1849 Windows 5.1.2600 Service Pack 2 3/14/2009 3:57:28 PM mbam-log-2009-03-14 (15-57-12).txt Scan type: Quick Scan Objects scanned: 68523 Time elapsed: 4 minute(s), 17 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Hijack.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
  12. Thanks for your reply...will leave NAV running next time I scan and will hope for the best
  13. I'm using the free version of MBAM (awesome product!) as well as Norton AntiVirus 2005. Must I always remember to disable NortonAV before running a Malwarebytes scan (which is what I've been careful about doing so far) in order to avoid any conflicts?
  14. Thanks so much to members "Fatdcuk" and "Tigger93" for your quick replys. I did just as you suggested and all is well This forum is as helpful and impressive as the software it supports. Five stars ***** all around ...(in spite of EIGHT! false positives the very first day I used Malwarebytes.) I still think it's excellent.
  15. Thanks for your reply and for your kind welcome. I updated to DB 1822, ran full scan (again!) and all is clean. Is it best to restore the 8 deletions as you've suggested - or to just leave them in quarantine. I want to do whatever will have the least possible negative impact. And finally...I seem to have a very hard time figuring out how to post here in the forum (that's why there's an attachment to my prior post). Hope I won't run into same problem now when I try to post this reply......
  16. The following has occurred: (I'm using Windows XP home ed. sp2) I installed Malwarebytes for 1st time this morning (v.1.34 database 1820). Ran Quick Scan which showed 1 infected object. (Trojan.Vundo file): Here's the log..... Malwarebytes' Anti-Malware 1.34 Database version: 1820 Windows 5.1.2600 Service Pack 2 3/5/2009 8:59:36 AM mbam-log-2009-03-05 (08-59-35).txt Scan type: Quick Scan Objects scanned: 66800 Time elapsed: 4 minute(s), 7 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\system32\wextract.exe (Trojan.Vundo) -> Quarantined and deleted successfully. Then, after "quarantining and successfully deleting" the 1 infected item I ran a FULL scan. This time 6 infected objects (all labeled Trojan.Vundo) were found (including the exact same file which had supposedly been quarantined/deleted!!! Here's the log file for the 2nd scan: Malwarebytes' Anti-Malware 1.34 Database version: 1820 Windows 5.1.2600 Service Pack 2 3/5/2009 10:20:11 AM mbam-log-2009-03-05 (10-20-11).txt Scan type: Full Scan (C:\|) Objects scanned: 108233 Time elapsed: 30 minute(s), 25 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 6 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\System Volume Information\_restore{DF18457C-4983-418E-BFF2-95A25065CF06}\RP336\A0037420.exe (Trojan.Vundo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{DF18457C-4983-418E-BFF2-95A25065CF06}\RP347\A0039617.exe (Trojan.Vundo) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{DF18457C-4983-418E-BFF2-95A25065CF06}\RP347\A0039618.exe (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\wextract.exe (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\dllcache\wextract.exe (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\ServicePackFiles\i386\wextract.exe (Trojan.Vundo) -> Quarantined and deleted successfully. I then closed Malwarebytes and ran my Norton Antivirus (which is completely up-to-date) It found nothing - nor had it found anything when I'd last run it yesterday. After running Norton I disabled it and ran a Full Scan using Malwarebytes yet again. And again it showed 1 infected object (Trojan.Vundo). See the log for that scan: Malwarebytes' Anti-Malware 1.34 Database version: 1820 Windows 5.1.2600 Service Pack 2 3/5/2009 11:43:03 AM mbam-log-2009-03-05 (11-43-03).txt Scan type: Full Scan (C:\|) Objects scanned: 108294 Time elapsed: 30 minute(s), 17 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\System Volume Information\_restore{DF18457C-4983-418E-BFF2-95A25065CF06}\RP347\A0039619.exe (Trojan.Vundo) -> Quarantined and deleted successfully. What is going on? Are these false positives and if so - will having deleted them adversely imp;act my system in any way? Please advise. By the way I never ran any of the abovementioned scans in Safe Mode...does it matter?...nor did I disable System Restore. (I've never dealt with this kind of issue and am not very "clued in" I'd be very grateful for any insight into what's going on...... Infected_Objects_Found.doc Infected_Objects_Found.doc
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.