False positives are both a good and a bad thing. Good in that it tells you your scanner is at least trying to protect you. Bad in that its like the boy who cried wolf. Eventually you get numb to the warnings and something will slip past. Your best friend in all this is Google. When you get an alert, Google it. Find out where the suspect file is supposed to be at and compare it with the one on your computer. If its not were its supposed to be, odds are its being naughty and needs a spanking. If it's in the right place but you think its kinda fishy, go to Virustotal and have it analyzed. Its a quick free scan that runs thru 30 different malware checkers.
Get in the hang of Googling the running processes on your computer. Learn what each one does. The more you know about your computer, the quicker you can detect when something isn't right and take action before it really becomes a problem. There is a caveat to that though. Don't become paranoid like I first did when I started Googling random system files. Make sure you read more than just the first couple of google entries, otherwise you might find yourself deleting core system files and really causing havok.
That TROJ_Generic.dit is most likely whats called a 'false positive'. Looking around it seems to only show up via Trend Micro. HOWEVER that being said, I would like you to delete the file named "aceefbeabadeeefc.exe" which is located in C:\Windows, just to be safe. I see no purpose in that file being there. Its likely though that when you try to delete it, its going to tell you its in use or access denied. In that case, reboot your computer again in safe mode and try deleting it again.
As for a good anti-virus, you get what you pay for. IF you are willing to pay the $59.95 then I would suggest Kapersky. If, like me you opt for the free one I would stick with Avast. But there are a couple of others you can also try if you like. Avira is a good anti-virus, but no so good when it comes to spyware. AVG is decent also, but for the best use of it, you need to pay, the free versian doesn't have all the bells and whistles.
If you do actually get banned from the computer, later that night secretly sneak in and change the screensaver to something from goatse or tubgirl, then password protect it. After the screaming stops later the next day, offer to try and "fix it" if they allow you to keep using it. Blame a virus and claim you spent so much time on the computer preventing these kinds of things from happening. If they don't quite believe you, warn them that there are virus's out there that will automatically turn the computer on and display pictures worse that those. Usually happens around the time they have company over.....
Yea they follow the notability guidelines pretty strictly there, as criticsquid pointed out. They even crack down hard on alot of the internet memes regardless if they have a million+ Youtube views or not.
For years I would snap my fingers 3 times in a row repeatedly at any loading screens, like I had some magical power that by the 3rd snap the loading would be done.
The Chronicles of Thomas Covenant, The Unbeliever. By Stephen R. Donaldson.
Superficially it is a great fantasy series about a man from our world who gets pulled into another world. In this Land his white gold wedding ring becomes a source of unimaginable power. However you find that Donaldson has really made you think about alot of things.
-Even though Thomas Covenant believes the Land is a dream, would you still choose to do good over evil?
-Does having this power make it permissible to use it at a whim?
-Would you choose to destroy something to keep it out of the hands of another?
-Would you be willing to give this power over to another if that person thought he could use it better?
They are many other subjects he brings up. One of the ones that impressed me was this. Thousands of years in the past a race of warriors sent an army to the Land to conquer it. When they got there, instead of the people fighting them, they treated them as friends. These warriors were so impressed with the work these people and Lords accomplished they swore a vow to protect them. 500 of these warriors stayed becoming the Bloodguard. Because of what the Land is, the powers that lived in it changed these Bloodguard. They no longer needed to sleep, eat and they did not age. For 2,000 years they protected these lords. Then during a war they captured an item from the enemy that they felt they could use to kill the head bad guy themselves. So some of them went to attempt it. They were captured and made to turn against the lords and were subsequently killed by their fellow Bloodguard. This ended the 2,000 years of service because they realized that no matter how faithful, or how pure their intent or how strong their vow, it wasn't enough to stop them being corrupted. That swearing this vow in the first place lead them to believe they were more than that are. That because of the vow they could not survive as a people when it wasn't enough to keep them uncorruptable.
Anyways, long winded but still my favorite set of books ever. And thats saying a bit since I have over 6,500.
That looks clean, yes. But realize the quick scan checked 119,000 files and the full scan checked 482,000 .
I want you to create a new system restore point since that first scan found it hiding in one of the backups. To do it open your Control Panel and click System. Select the System Restore tab and Turn OFF system restore. That will get rid of the previous system saves so you don't bring the virus back if later you need to use System Restore. Click Yes at the popup. Then remove the check mark from Turn Off system restore so its back on. It should show that its monitoring your drives again.
Now if you want to be a little more confident that its gone, try running Trend Micro's HouseCall. Its an online virus scanner that works pretty good and doesn't require much to download or install. Just download the launcher here , install it and run it. Its always good to basically get "a second opinion" so to speak.
At the risk of sounding too geeky, let me back up a second and give you some info. That Rootkit.tdss infection that MalwareBytes saw and says it removed, is one of the hardest to remove ones out there. What makes it so hard to get rid of is that it stores itself outside of your file system in a tiny bit of unallocated sectors at the end of your drive. Thus you sometimes see evidence its there, like the file MalwareBytes found and removed, but most likely you havn't gotten rid of it completely. The main thing this rootkit does is turn your machine into the part of the "bot nets" you hear about, which would cause alot of the symtoms you first posted.
You most likely didn't get this from a random webpage you visited. It's almost always caught by peer-2-peer downloads of infected stuff or using cracks or keygens you have downloaded. I myself am/was a big fan of my torrents and cracks and have paid the price, losing a 500GB hard drive I'm still trying to fix.
As for the updates I was talking about, they were not just for Internet Explorer, they are mainly for Windows XP, which you are running. Try to check for updates at least once a week. If you REALLY want to see something scary, log into your router and view the incoming connection log and watch how many times a minute someone tries to get thru it. Mine is usually 5 to 10 a minute.
I'm glad I was able to help. But do me a favor and and rerun your MalwareBytes in safe mode again and see if that Rootkit.TDSS shows up again. I have a feeling it will and its going to be a bit harder to get rid of. Its a pretty nasty virus that not only can and will steal passwords and login info, but it can also re route the DNS info in your router to automatically go to websites with even more nasty bugs.
Well I tried testing Avast if it captures this website virus who commonly people mistype.
youtbue.cm Note: I scrambled the letters so YOU don't get it.
And it did!
Ok you really, really need to update your security patches on Windows Update. Websites that cause a virus popup are usually because they are exploiting a vulnerability in your browser that lets that website automatically run scripts. Most of those are fairly quickly fixed but it sounds like you have a few patches missing.
Here is how to update, if you are unsure.
-If you are using Internet Explorer click Tools at the top of the page and then Windows Update.
-Say yes if it asks you if it can install an active X control or some form of update tool.(sorry can't think of the exact name for it)
-Once it does that select Express updates. Depending on how long its been since you have updated, this could take anywhere from 5 mins to an hour, with multiple reboots.
I'm glad I was able to help. But do me a favor and and rerun your MalwareBytes in safe mode again and see if that Rootkit.TDSS shows up again. I have a feeling it will and its going to be a bit harder to get rid of. Its a pretty nasty virus that not only can and will steal passwords and login info, but it can also re route the DNS info in your router to automatically go to websites with even more nasty bugs.
c:\users and subfolder c:\users\public are both empty. When hitting the save button in indev it didnt give me any options on location, just a quick flash of a rendering window and then back to the game.
And what format is it saved as? I did a search of all .png,.jpg, and .bmp and there were no minecraft pics.
Yea if you still play Combat Arms, leave the npkcmsvc.exe alone, or you won't be able to connect to it. You also never said whether the things I had you do made any improvement to your machine. Guys like me like to hear the "good job" on occasion, lol.
0
Get in the hang of Googling the running processes on your computer. Learn what each one does. The more you know about your computer, the quicker you can detect when something isn't right and take action before it really becomes a problem. There is a caveat to that though. Don't become paranoid like I first did when I started Googling random system files. Make sure you read more than just the first couple of google entries, otherwise you might find yourself deleting core system files and really causing havok.
0
hahahahahahah
0
As for a good anti-virus, you get what you pay for. IF you are willing to pay the $59.95 then I would suggest Kapersky. If, like me you opt for the free one I would stick with Avast. But there are a couple of others you can also try if you like. Avira is a good anti-virus, but no so good when it comes to spyware. AVG is decent also, but for the best use of it, you need to pay, the free versian doesn't have all the bells and whistles.
0
Jan 1st, 2010
0
0
0
Currently I chew on my ponytail while games load.
0
Superficially it is a great fantasy series about a man from our world who gets pulled into another world. In this Land his white gold wedding ring becomes a source of unimaginable power. However you find that Donaldson has really made you think about alot of things.
-Even though Thomas Covenant believes the Land is a dream, would you still choose to do good over evil?
-Does having this power make it permissible to use it at a whim?
-Would you choose to destroy something to keep it out of the hands of another?
-Would you be willing to give this power over to another if that person thought he could use it better?
They are many other subjects he brings up. One of the ones that impressed me was this. Thousands of years in the past a race of warriors sent an army to the Land to conquer it. When they got there, instead of the people fighting them, they treated them as friends. These warriors were so impressed with the work these people and Lords accomplished they swore a vow to protect them. 500 of these warriors stayed becoming the Bloodguard. Because of what the Land is, the powers that lived in it changed these Bloodguard. They no longer needed to sleep, eat and they did not age. For 2,000 years they protected these lords. Then during a war they captured an item from the enemy that they felt they could use to kill the head bad guy themselves. So some of them went to attempt it. They were captured and made to turn against the lords and were subsequently killed by their fellow Bloodguard. This ended the 2,000 years of service because they realized that no matter how faithful, or how pure their intent or how strong their vow, it wasn't enough to stop them being corrupted. That swearing this vow in the first place lead them to believe they were more than that are. That because of the vow they could not survive as a people when it wasn't enough to keep them uncorruptable.
Anyways, long winded but still my favorite set of books ever. And thats saying a bit since I have over 6,500.
0
I want you to create a new system restore point since that first scan found it hiding in one of the backups. To do it open your Control Panel and click System. Select the System Restore tab and Turn OFF system restore. That will get rid of the previous system saves so you don't bring the virus back if later you need to use System Restore. Click Yes at the popup. Then remove the check mark from Turn Off system restore so its back on. It should show that its monitoring your drives again.
Now if you want to be a little more confident that its gone, try running Trend Micro's HouseCall. Its an online virus scanner that works pretty good and doesn't require much to download or install. Just download the launcher here , install it and run it. Its always good to basically get "a second opinion" so to speak.
0
You most likely didn't get this from a random webpage you visited. It's almost always caught by peer-2-peer downloads of infected stuff or using cracks or keygens you have downloaded. I myself am/was a big fan of my torrents and cracks and have paid the price, losing a 500GB hard drive I'm still trying to fix.
As for the updates I was talking about, they were not just for Internet Explorer, they are mainly for Windows XP, which you are running. Try to check for updates at least once a week. If you REALLY want to see something scary, log into your router and view the incoming connection log and watch how many times a minute someone tries to get thru it. Mine is usually 5 to 10 a minute.
0
Ok you really, really need to update your security patches on Windows Update. Websites that cause a virus popup are usually because they are exploiting a vulnerability in your browser that lets that website automatically run scripts. Most of those are fairly quickly fixed but it sounds like you have a few patches missing.
Here is how to update, if you are unsure.
-If you are using Internet Explorer click Tools at the top of the page and then Windows Update.
-Say yes if it asks you if it can install an active X control or some form of update tool.(sorry can't think of the exact name for it)
-Once it does that select Express updates. Depending on how long its been since you have updated, this could take anywhere from 5 mins to an hour, with multiple reboots.
0
0
And what format is it saved as? I did a search of all .png,.jpg, and .bmp and there were no minecraft pics.
0
0