Loans | Loans | Unblock Myspace | Credit Cards | Play Games
Bad files on my computer. [Archive] - PCMech Forums

PDA

View Full Version : Bad files on my computer.


brad656
03-22-2006, 08:18 PM
I need to know if I should worry.
My computer is protected by Norton Antivirus, Ewido, Adaware SE, Spybot, and A-Squared. I use various online scans to clean my computer fully. Mostly, I use TrendMicro housecall.
A-Squared has a feature called "HiJackFree" which analysizes programs on your computer to see if they're infected by anything. It makes a big list on every program scanned and, beside it, puts a colour rating. The programs that are 'good'--meaning they provide a service and do not have any attached maladies--are given a little green smiley face beside them. The 'bad' programs--spyware, etc--are red devil faces. In between there's yellow-- either unneccessary programs or good programs that have a lot of bad programs attached to them.
I've completed a few sweeps on my computer with HijackThis (not A-Squared HiJackFree) and ewido. I've managed to take most of the 'red' files that HiJackFree lists off of the computer (with the assistance of a professional, seeing as though I'm not a computer super-genius).
However, there are still a lot of yellow programs when I do the check again--so I, apparently, have a lot of malware attached to otherwise good programs (my NeroFilterCheck, for instance). When I press the 'view details' button beside each listed program, it shows me what exactly is wrong with my yellow programs. It lists some pretty heavy stuff--multitudes of trojans, some worms, etc. But when I use AdAware SE, Spyware, Norton Antivirus, and when I do online scans with Kaspersky, Symantec or Trend Micro, I usually don't get anything bad listed at all. (Though, today, I scanned with TrendMicro--the first time I scanned it told me I had upwards of nine problems, the second time said zero, the 3rd time one, etc--on the first scan it also listed two problems that needed to be resolved manually, but the Housecall window closed when I tried to take them off).
I have a big list of all the 'problem' programs HiJackFree lists, and a list of the bad stuff the TrendMicro scan said I had. I try to 'search' for the problems, and get no results.
What I need to know is:
1. Is my computer's security as back as HiJackFree says it is?
2. If so, is there anyway I could get this stuff off without harming my 'good' programs?

Please, someone, help me! I've been pulling my hair out by the root for a week and a half trying to clean my computer up.
Thanks for considering my query.

DynamicTech
03-23-2006, 12:24 AM
every program is going to give you a different result. some detection programs read perfectly safe files as malware applications. In my opinion, (and it is only my OPINION), that you may be looking too hard for malware. If you look long enough at something, you will find something. If your system does not perform poorly, give off wierd errors/behaviors, or your internet activity light (if you are using broadband) is not blinking when it shouldn't be, you should be fine.
If you want to make sure your computer is not acting as an unauthorized server, you can install a firewall and block all outbound traffic and see if any applications are accessing the internet that shouldn't be. if you are using xp pro, you could set up some auditing on object access. There are plenty of other ways to dig into your system besides scanning software.

brad656
03-23-2006, 04:04 PM
Thank you very much. You've been more than helpful. I'd figured since AdAware is not very well known and it was the only program showing bad files, the problems it lists are not as bad as it said. Especially since it listed a Netvision dialer on my computer and I've never had a dialer problem. So thanks for the reassurance.
You suggested installing a firewall and setting up an 'auditing on object access' in your reply and mentioned that there are 'plenty of ways I could secure my computer without scanning software'.
Could you possibly give me some information on these techniques?
And do you know where I could find information on firewalls and auditing object acess?
thanks for all your help

glc
03-23-2006, 04:37 PM
Ad-Aware (Lavasoft) is very well known and anything it finds can be removed safely.

Kareeser
03-23-2006, 05:26 PM
Keep in mind, however, that I've seen anti-spyware programs tag legitimate files for keeping MRU Lists (http://en.wikipedia.org/wiki/Most_Recently_Used), which are perfectly acceptable in my books.

I trust Ad-Aware, although I don't scan as often as I should... like now, for instance. :P

brad656
03-23-2006, 06:43 PM
Yeah. I have adaware and I run it pretty frequently. It doesn't come up with as many problems as listed with A-Squared, which tells me that many of my 'good' or useful programs are overraught with infections. Any other tips for keeping crap off my computer?

glc
03-23-2006, 10:25 PM
I think that A-Squared may be just a bit too sensitive.

DynamicTech
03-24-2006, 09:58 AM
brad656, don't misunderstand my position on scanners. you still need to scan your computer evry so often. As far as ausditing object access, open up control panel >> admin tools >> local security policies. On the left hand pane, select local policies >> audit policies. Scroll down to find object access and turn on auditing.
I don't know of any source on firewalls, but a good place to start is learning about ports and tasks/services. here are a few sites:
<a href='http://www.portforward.com/default.htm'>PortForward</a><br>
<a href='http://www.doshelp.com/trojanports.htm'>Trojan Port List</a><br>
<a href='http://www.answersthatwork.com/Tasklist_pages/tasklist.htm'>Task List</a><br>
<a href='www.iana.org/assignments/port-numbers '>port assignments</a><br>
The best place to learn about a firewall is usually the help file or the manufacturers website.
As far as other techniques, if you don't know anything about administration, learn enough about this subject where you can understand the different user levels, grant rights and permissions, and get familiar with the "runas" command. Keep an admin account for administering the computer only. Set yourself up a limited account and deny yourself the install and make system wide changes privies for every day use. Only grant this account the privies you need to perform everyday functions, and either log in as admin or use runas for admin duties like installing programs. Install popup blockers, and scan every file you download, even from trusted sources. Spybot has a feature that can automatically configure your browser against known threats.
The most important tool sits atop your shoulders. Be careful where you surf, and don't download anything illegal or unethical. Develop a list of trusted sites.
If you do not have a router, install one and set up some firewall rules and protocol filters. Even if you do not have a network, you really need a router to better secure your system.
If you have any more questions, feel free to PM me. I'll help you where I can.

kev7555
03-24-2006, 01:31 PM
[QUOTE=brad656]I need to know if I should worry.
My computer is protected by Norton Antivirus, Ewido, Adaware SE, Spybot, and A-Squared. I use various online scans to clean my computer fully. Mostly, I use TrendMicro housecall. QUOTE]


Protected by Norton anti-virus but other programs detect trojans. This is why I took all of my customers off of Norton. This is a re-occuring problem with NAV (not to mention it's hogging of system resources).

You would be better off using AVG free or Nod 32.

-Kev