Running Housecall

[TPM]

Hello again

I am trying to run Trend Micro Housecall on a computer running WinXp with SP2.For some reason it is not working, it just doesn't do anything. What should I be checking?? The computer has Nortons 2006 security installed which shows no viruses and in addition has Spy Sweeper installed which is also clean. I did a scan on Kaspersky (?) which showed a lot of infected files but no way of repairing them (without paying for the update)
I did a scan on Hijack This which had me remove a few items which I can't remember. Also Spybot picked up many bad files which I deleted. I would like to get Housecall running before I give this thing back to my cousin just to make sure.
When I first looked at it I seen it had Napster, New Dot, Smileys, etc. installed

Any help would be great
Thanks and have a Safe and Healthy Holiday :)

[Statica]

What browser are you using? If it's Firefox/Mozilla you need the latest version of Java installed.

[TPM]

Thanks for the reply Statica
I tried running on both firefox and IE6. I did update the java on explorer. Only other concern I have with the computer is it didn't update to IE7 and I'm not sure why :confused:
I'll double check the java and get back to you

[TPM]

Ok this is where I'm at
Seems I cannot get windows to download updates. The genuine advantage validation tool could not be downloaded. I think this is interfering with the active X settings as well.
I have a legite copy of Xp home ~ SP1 with the CD if that helps. SP 2 is installed as well. (this must be why IE 7 is not installed)

Any ideas?????

Thanks

Edit: I'm manually adding IE7 which updates the validation tool. I will then try Housecall again

[TPM]

Update:

I had microsoft updates "timed" to be downloaded at 10:00am. It did download most of the 6 or so updates with the exception of the validation tool and netframe update

Anyone??

still cannot get housecall to run and I'm thinking of deleting Nortons '06 security or Spy sweeper thinking it may be the problem. It is not my computer however so I'm not sure if it can be reinstalled

Thanks again

[Statica]

When an ActiveX control like PCC or Windowsupdate tries to run it installs a BHO (browser helper object). Realtime antispyware utilities like Spy sweeper are notorious for disabling these controls entirely. Try disabling your antispyware utilities and try running the housecall or even windows update and see if it helps.

[TPM]

Unfortunately No Good. states may be due to not being an administrative account. It is however and I even went on another administrative user name with no luck :(

[glc]

If you were a customer and brought it to me, at this point I'd be uninstalling Norton and Spysweeper whether you liked it or not, it's at that point. I'd be cleaning it up with CCleaner, then I'd be installing AVG Free antivirus and AVG Antispyware in the free mode and doing full scans with those.

When Norton works, it works. When it has problems - and if it can't find any problems where Kaspersky does, I consider that a problem, it's time to nuke it.

[TPM]

Thanks glc

I was thinking using Avast because that is what I've been using (what do you think?) and isn't AVG antispyware only a trial for 30 days??

I think I'm at this point however :(

Thanks for the reply

[Statica]

Avast is quite a decent antivirus as well, it comes down to preference .. AVG is quite an efficient product.
Re: the spyware .. the Pro version is a 30 day trial .. at the end of which it drops down to the free version (with the pro features disabled).

Unless you're used to surfing questionable sites or downloading strange attachments, personally, I'd recommend running an antispyware on demand, rather than all the time (but just run an antivirus with realtime scanning). Sometimes they cripple features on sites that dont immediately manifest themselves as related to your antispyware. It helps to use an alternative browser like Firefox or Opera.

[TPM]

Thanks Statica

I did my best to "disable" Nortons and Spy Sweeper through Services, then I installed Avast. It found 7 infected files which I moved to the "chest". There is somewhat of a conflict with Nortons and Avast even though I thought I disabled Nortons fully. When Avast finishes its deep scanning I will then go remove Nortons.
Avast found win 32 adware gen. infected files

Thanks

[glc]

You may want to see if you can do the online Ewido spyware scan too. This is what AVG Antispyware is.

www.ewido.net

[TPM]

I certainly will glc

Thanks

[TPM]

I finally uninstalled Nortons. I am now able to run Housecall which caught a few malware files and one infection. Unfortunately I cannot get 2 window updates to install. Windows genuine validation tool and one other I can't remember right now (framework or something)

Would a Xp repair do any good? I would really like to avoid a complete reinstall

Thanks again

[TPM]

Everything is on the mend. I was able to get a direct download of the 2 files needed for Windows Updates

Thanks

[TPM]

Hello again
I have 2 issues in a HJT log which I cannot resolve. Running Spybot rids me of NewDot and myweb but it keeps coming back. Please see the thumbnail

Thanks :)

http://i158.photobucket.com/albums/t92/tpm419/th_hjtlog.jpg (http://i158.photobucket.com/albums/t92/tpm419/hjtlog.jpg)

[Statica]

Are the highlighted entries the ones that you suspect of being malware? If so:
ctfmon.exe is not a malware process, it's an MS Office process for the language bar/alt.text input
nwprovau.dll is not a malware LSP, it's usually a DLL for the client services for Netware.

For NewDot - check the following: http://www.2-spyware.com/remove-newdotnet.html or http://www.symantec.com/security_response/writeup.jsp?docid=2004-020511-0558-99&tabid=3

I'll move this over the the Security forums, post your HJT if you cannot remove any other threats.

[TPM]

Thanks statica

Everything else seems fine although Avast just popped up with an error saying it couldn't update.

Thanks