Kitz Forum

Computer Software => Security => Topic started by: chrissie on June 19, 2011, 12:09:48 PM

Title: What AV to buy, what to do next? Update
Post by: chrissie on June 19, 2011, 12:09:48 PM
Hi again,

I’m not having much luck with sorting out my AVG2011 (bought version) see other thread relating to saga of it.  What I would now like to ask, is it easy-ish to uninstall this completely without knowledge of how to do it (scaredy cat here) and then buy another AV to install?   Would any of the Trojans and other nasties that Housecall and Malwarebytes picked up go with the uninstall and would the “rogue” renewal window for AVG go with it too?   I see I also have AVG08 and AVG10 files still in a folder on my PC and as I paid for a clean out and installation of new AVG2011 two years ago I thought the computer peeps might have removed those files.  Can I get rid of them?

 Malwarebytes picked up this - KEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{549B5CA7-4A86-11D7-A4DF-000874180BB3} (Trojan.Agent)  and quarantined it (can I delete it now?).  

I was also wondering if Kaspersky antivirus and firewall would be the best for someone like me…are updates and support easy to obtain?  Other than that I don’t know which bought one (don’t want a free one) to have as I know Norton’s takes up a lot of resources but what else is there for a technofobe like me who hasn’t a clue how to configure the AV’s to their best?

Hope someone can help and thanks in advance for doing so.

Chrissie     :)

Title: Re: What AV to buy, what to do next?
Post by: silversurfer44 on June 19, 2011, 12:29:53 PM
Hi Chrissie, I wondered how you had got on.
I can't advise you on which av to install as I don't need one. As for the infections you have already, they will remain there even if you manage to uninstall all the AVG files. The infections need to be removed by a proper application, or someone who knows about such things.
Sorry to be the bearer of such gloom.
Maybe someone can suggest a website that could clean out the nasties, as I think they did in your last thread. You certainly need your system clearing of all the trojans and viruses before installing a new antivirus application.
Title: Re: What AV to buy, what to do next?
Post by: UncleUB on June 19, 2011, 03:41:48 PM
Hi Chrissie  :flower:

I have McAfee internet security on my pc (paid for version).I have had it for 4 years and has not caused me any problems at all.

http://www.amazon.co.uk/gp/product/B003ULO2BE/ref=s9_simh_gw_p65_d0_i1?pf_rd_m=A3P5ROKL5A1OLE&pf_rd_s=center-2&pf_rd_r=1WDKC80X09567GT8RKXB&pf_rd_t=101&pf_rd_p=467128533&pf_rd_i=468294

As for removing AVG completely from your pc..most of these security packages have their own removal tool

http://www.avg.com/us-en/utilities
Title: Re: What AV to buy, what to do next?
Post by: silversurfer44 on June 19, 2011, 05:07:15 PM
One way to get rid of your problems is to install Linux and do away with Windows, Antivirus, trojans the lot.  ;D
Title: Re: What AV to buy, what to do next?
Post by: AdrianH on June 19, 2011, 05:16:24 PM
I would look at using Avast, it offers very good protection.   


Linux is good if you are confident but it is not exploit free as many suggest and more malware is being directed at Linux/OSX et al.
Title: Re: What AV to buy, what to do next?
Post by: UncleUB on June 19, 2011, 06:40:26 PM
One way to get rid of your problems is to install Linux and do away with Windows, Antivirus, trojans the lot.  ;D

You can stop that nonsense right now Pingu  :D

Seriously though I think all Chrissie wants is to pay a few pounds a year and get an easy to use,as trouble free as possible security suite,which has excellent technical support and doesn't hog resources..

Comments on a postcard please................ :)
Title: Re: What AV to buy, what to do next?
Post by: silversurfer44 on June 19, 2011, 07:20:09 PM
Seriously, I understand fully what is wanted, getting one is another thing.
Unfortunately Chrissie has got herself some nasties, how many we don't know. What the (cough, cough) support people at Grisoft don't understand is how knowledgeable Chrissie is. Without being rude, you could put that knowledge on the stamp on the post card.
It is in the interest of any company that provides an antivirus service that they find out what the virus/trojan is on Chrissie's computer, so they can take action against it.
Now unless Grisoft or any other support staff are prepared to give clear instructions to Chrissie then both ends are on a loser.
My advice to you Chrissie is to take your PC to a reputable repairers and pay for them to rid you of the nasties that you have. Otherwise I can see you getting more and more frustrated with this. There is no easy way round for you that I can see.
All the applications mentioned so far are good, well used by the individuals that recommend them. However, if you put any of the AV programmes in your computer as it is now will be wasting your time and money. Get it cleared of any nasties and then put in another AV programme.

I have my serious caring head on at the moment. :)

Colin No.2
Title: Re: What AV to buy, what to do next?
Post by: razpag on June 19, 2011, 07:37:36 PM
I don't think we're running a major banking consortium from this DG, or keeping tags on the latest terrorist movements. Surely to god a simple FREE AV like AVAST will suffice ????

Most people I know who use a PC/Laptop for basic use employ the same (similar) FREE AV's.
Title: Re: What AV to buy, what to do next?
Post by: BritBrat on June 19, 2011, 09:02:47 PM
If it was me:

I would backup all data I would not like to lose.

Then I would format and reinstall a fresh clean copy of Windows.

Install any drivers required to get it up and running (do not go on the internet)

Then reboot machine.

Install an antivirus/firewall.

Go on internet and download all microsoft updates.

Then start installing any other programes you use.

In the long run this is the quickest and best way to ensure you have a totally clean machine.

Then make a Ghost image or some other form of disc image and save it in a safe place, then next time you need to reformat it will only take a very short time (30mins) to be back with a clean machine, after saving any data as in the first part.
Title: Re: What AV to buy, what to do next?
Post by: chrissie on June 19, 2011, 09:50:41 PM
Hi you lovely guys.

Thank you all so much for your understanding and good advice/comments.  I think Colin2 has it in one...I don't know much at all about computers tho will try to do things if I can.  If only AVG techies would answer my mail it would seriously help me.  I have asked them several times if I can block the AVGINSTALLEDAPPX.EXE from the firewall... they haven't answered.  I asked if I can delete the AVG08 and AVG10 files that I've found in a folder on my PC (after the paid techies installed AVG 2011 for me)...again no answer.  I have also asked what the YSIGNU~1.exe is...no answer yet this would help me so much if they could explain it all AND tell me what the box is that is coming up which I cannot get rid of...I sent them a screen shot of it and no reply.

@BritBrat - sorry mate but for me to even consider reformatting is alien to me....wouldn't even attempt it without a trusty techy by my side....it's not for me I'm a computer coward, will do some things but others are a no no...wouldn't even know where to start, but thanks for your advice.  It's a case of "if only"....

All I want is to get rid of the nasties...even try to get rid of the rogue box but if AVG won't/can't tell me what it is...what ruddy chance do I stand  :(

I just need a good AV that will do the biz without giving me grief and lets me get on with the day to day things I want to do...but at this point in time it's not in sight....I think I will have to do what Colin suggests...(once again pay)....pay someone to do the stuff for me and get it sorted...scream,.  Unless you know differently lol.

Chrissie
Title: Re: What AV to buy, what to do next?
Post by: geep on June 20, 2011, 10:49:32 AM
Hi,

I'd never thought I'd say it - but on this occasion I would recommend Microsoft - and it's free. http://www.microsoft.com/nz/digitallife/security/microsoft-security-essentials.mspx It's what I've installed on my Windows 7, though I confess I still have AVG on Win XP.

If the machine is suspect then doing a clean reinstall is a good idea. Most modern machines allow you to reinstall to factory settings from a "hidden" backup partition. The documentation with the PC might be clear enough to explain what to do. I've had good experience reinstalling on a Dell - their instructions were fairly clear.

If you do decide to reinstall Windows, then you could perhaps first remove your existing virus checker and do a trial installation of your chosen future virus checker, just to checkout that you understand how to install it and get a feel for it.

Cheers,
Peter
Title: Re: What AV to buy, what to do next?
Post by: geep on June 20, 2011, 10:59:31 AM
Just another thought - don't know if it's already been mentioned. I support family members remotely via logmein.com https://secure.logmein.com/UK/
When there's a problem I get a phone call and then log on to their machine and can usually fix the problems. Don't know if others would agree, or even offer to help directly in this way?

Cheers,
Peter
Title: Re: What AV to buy, what to do next?
Post by: chrissie on June 21, 2011, 08:41:57 PM
Hiya   :)

Just an update on state of play atm and to thank everyone for their suggestions and help here it’s more than appreciated.

Yesterday AVG emailed me to say they wanted me to copy some log files from the computer and the AVG config log and sent me the links to download the tools.  I managed to do as per their instructions and all went well and message came up saying “successfully sent”.  This morning I emailed them to say I had done it and send and rec’d a mail back saying they hadn’t rec’d it!!!!   So, in same mail they then said to download their diagnostic tool which I did, also their automatic one click fix tool – again I did that.  Ran it as per their instructions and up came a screen, “You don’t have AVG installed on this computer, please install before you use this”  and a button to quit on.  SCREAM.   So I emailed them with a screenshot of the box to prove it happened and told them it wouldn’t let me do it and I’ve heard nothing where they have been getting back to me within an hour – I mailed them over 7 hours ago now.

So I give up.  They haven’t told me what the rogue box is despite having screenshots of it and they won’t give me any info on what the problem could be (or if there is one).  I am fuming because they look as tho they want to help but don’t follow through when needed.

As Colin2 said, best that I get someone to look into it (hope they don’t rip me off either) and try to sort it that way.

Thanks again for your help you have been great.

Chrissie

Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 21, 2011, 09:06:22 PM
There is another more expensive way with little to no risk.

Buy a new hardrive and swap out the one you have and have a go at a format new instalion if you fail take out the new drive and put the old one back in. You wont be able to do a Dell restore as that is stored in a hidden partion on the hard drive so you would need a copy of windows and a product key.

I was like you once but trust me it is really easy and once you have done it you will wonder why you were so scared, the main things you need if not using the Dell restore partition is to have all the drivers to hand on a DVD/CD or some other local hardware storage.

Where do you live?

If you intend to take it to a shop give the Dell restore a go first, after all what do you have to lose? so long as you have backed up any data you would not like to lose like photos or music.
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 21, 2011, 11:10:56 PM
Hi BB

Thanks for your advice.  I don't have a Dell computer it's HP.  I not only don't have the confidence to do the things you mention unfortunately but with ill health, hosp and doc appts I don't have the wherewithal/stamina nor anyone I could call on that might help me either   :(   ...now when I was younger.... :D  I would probably have a go with an old PC over months just to see what it is like to try something like that, but not with my liccle PC who is ok apart from having AVG messed it up, but I appreciate your help that's for sure.  Thank you.

Chrissie
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 22, 2011, 08:07:19 AM
Looking at your previous reply Chrissie it appears as though AVG has been cleared from your computer.
A couple of questions now
1.     Have you renewed your subscription with AVG?
        If the answer to this question is yes, then they must provide the support for you. You are paying for it. And if they have cleared the program then they must supply you with a clean paid up installation.

2.     Have you still got that pop-up box?

Depending on your answers I can try and advise as to maybe the best course of action. If you would like to tackle the problem yourself that is.
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 22, 2011, 08:45:21 AM
Further to ss44's comment above, I agree with him that a little recap may be helpful

1) You have two odd files on your computer (a) AVGINSTALLEDAPPX.EXE  and (b) YSIGNU~1.EXE
You are not alone, there are several posts on different forums (Techsupport and bleepingcomputer as examples) with regard to these.....but as yet there is no clear answer as to what they do or if they are legit or nasty.
Other security progs such as malwarebytes/superantispyware are not picking these up as threats...nor are the main "on-line" scanners.
The consensus of opinion amongst the security specialists on these sites is that the files are probably legit and part of the new p2p scanner in the latest versions of AVG...but not even the well known and respected experts in the field can get a confirmation one way or the other from Grisoft/AVG.........so doubts that they may be bad still exist.

2) You are still getting the pop-up that freezes your PC ?
In this respect, the report you have to the effect "You don’t have AVG installed on this computer" is interesting........it may be, as suggested by ss44, that your AVG has expired ( but in that case I would expect a report to the effect that it has expired, not that it does not exist)...........but it may well be simply that your installation of AVG has been corrupted, either by a nasty or some other means.
If that is the case, an uninstall/reinstall of AVG may cure the problem.
How did you originally install AVG.........was it preinstalled when you bought the PC or did you install from a disc or did you install from a file downloaded from AVG. If the latter, do you still have that downloaded file stored on you computer ?

3) Let's not think or worry about re-installing Windows just yet........that is an extreme measure, and the final measure to take only when all else has failed.

4) I am with razpaq when he questions the need for a paid-for av prog. The free ones are every bit as good at detecting and eliminating nasties. The benefits to the domestic user of the paid versions are more frequent definitions updates ( in the case of my Avast, that is every hour rather than every two hours ) and technical help....and despite the fact that you have paid AVG for this help you are not getting very much.

Don't fret and worry, chrissie, between us all we will beat this thing... :)


edit to add..........one crumb of comfort, chrissie, the two odd files in question are to be seen only on PCs with AVG installed.........which does suggest that they are connected with AVG and are not general infections.
  
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 22, 2011, 09:13:13 AM

3) Let's not think or worry about re-installing Windows just yet........that is an extreme measure, and the final measure to take only when all else has failed.


I agree, but all the time used to try and sort out some infection and then still not being 100% sure the system is OK it is better to just have a clean install and done with it, knowing 100% that the system is clean, well for a while.

What I would now like to ask, is it easy-ish to uninstall this completely without knowledge of how to do it (scaredy cat here) and then buy another AV to install?Hope someone can help and thanks in advance for doing so.

Chrissie     :)

Have you unistalled it ?

If you bank with Barclays you get a free Kapersky antivirus/firewall, worth opening an account even if you dont use it and just put £1 into it.

Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 22, 2011, 09:26:10 AM
Going back to basics:

Quote
Malwarebytes picked up this - KEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{549B5CA7-4A86-11D7-A4DF-000874180BB3} (Trojan.Agent)  and quarantined it (can I delete it now?).


Could it be a false possitive and you had nothing to worry about in the first place?
Title: Re: What AV to buy, what to do next? Update
Post by: UncleUB on June 22, 2011, 09:27:14 AM
The main thing to remember here is Chrissie is only a novice when it comes to computers.All this advice about re-installing,removing this,installing that(no matter how good the advice) can seem very daunting and confusing to many people.

I'm sure all the advice being given is good,but just remember all computer users aren't experts.  :)


Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 22, 2011, 09:35:17 AM
I agree, but I am no expert either but I get calls from friends and family to fix their computers and if I don't know what is wrong I can normally find out and fix it.

I was just like Chrissie 10 years ago scared to even turn it on, then I decided to build a computer (very scared) but it all went well and in the process I learnt a lot about computers, now recently I have got old computer parts from freecycle and built a few for free.  I had thought about doing that then recycling them back through Freecycle to people less well off than me and giving them an old but fully woring computer.

What I am trying to say is unless you try and do something you never will.  Better to fail and learn something than to never have tried at all because in failing you have still gained some knowledge.

At the moment my sister has problems, well its not a problem just poor wireless connection, I have installed a new network card and that did help but still not 100% so I am loooking at other ways to test/improve the connection, one is to try a different router so I have a DG834GT and a BT2700HGV ready to put all her settings in and take it over and try them, the BT2700HGV can be flashed/hacked to give illegal wireless power signal but I will just leave it at 100, the other idea is to use home plugs but I dont have any of those at the moment.
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 22, 2011, 10:08:26 AM
Further to ss44's comment above, I agree with him that a little recap may be helpful

1) You have two odd files on your computer (a) AVGINSTALLEDAPPX.EXE  and (b) YSIGNU~1.EXE
You are not alone, there are several posts on different forums (Techsupport and bleepingcomputer as examples) with regard to these.....but as yet there is no clear answer as to what they do or if they are legit or nasty.
Other security progs such as malwarebytes/superantispyware are not picking these up as threats...nor are the main "on-line" scanners.
The consensus of opinion amongst the security specialists on these sites is that the files are probably legit and part of the new p2p scanner in the latest versions of AVG...but not even the well known and respected experts in the field can get a confirmation one way or the other from Grisoft/AVG.........so doubts that they may be bad still exist.

2) You are still getting the pop-up that freezes your PC ?
In this respect, the report you have to the effect "You don’t have AVG installed on this computer" is interesting........it may be, as suggested by ss44, that your AVG has expired ( but in that case I would expect a report to the effect that it has expired, not that it does not exist)...........but it may well be simply that your installation of AVG has been corrupted, either by a nasty or some other means.
If that is the case, an uninstall/reinstall of AVG may cure the problem.
How did you originally install AVG.........was it preinstalled when you bought the PC or did you install from a disc or did you install from a file downloaded from AVG. If the latter, do you still have that downloaded file stored on you computer ?

3) Let's not think or worry about re-installing Windows just yet........that is an extreme measure, and the final measure to take only when all else has failed.

4) I am with razpaq when he questions the need for a paid-for av prog. The free ones are every bit as good at detecting and eliminating nasties. The benefits to the domestic user of the paid versions are more frequent definitions updates ( in the case of my Avast, that is every hour rather than every two hours ) and technical help....and despite the fact that you have paid AVG for this help you are not getting very much.

Don't fret and worry, chrissie, between us all we will beat this thing... :)

edit to add..........one crumb of comfort, chrissie, the two odd files in question are to be seen only on PCs with AVG installed.........which does suggest that they are connected with AVG and are not general infections.
  

Hi TD nice to see you back hope you are ok now?  Right I need to recap and thanks again to you and everyone else for your continuing support, you really are a wonderful group of people.

Yes I still have AVG installed and it runs out in 4 days.  I totally believe the nasties (Agent.AVG trojans and anything else) are totally to do with AVG without question. 

1)  The Trojans have been fixed and were picked up by Housecall.  The YSIGNU was and still is being picked up by Housecall but won't fix because it says it could destroy a file...so is this a false positive?   As for the INSTALLEDAVGAPPX.EXE I read that it's something to do with AVG Cloud whatever that is!

2)  The rogue "renew now" box is now coming up everyday so I have to restart PC and it's gone but I've asked AVG support many times what it is and sent them a screen shot of it but they do not answer that question nor other questions about the YSIGNU the INSTALLEDAPPX  they just ignore my questions on this.

I had AVG 2008 installed by the computer shop when I took the PC in for a tune up, I bought the AVG BUT did not receive any disks.  They then had the PC in again the following year and updated AVG to 2010 for 2 years.  It runs out 27th June but in December last I had to update it with download to 2011 as the 2010 wouldn't be supported after that.  I don't have any AVG I can put back on PC if I uninstall it.  (Annoyed now that they didn't give me original disks tho that won't help now).  I think you are right TD the AVG is corrupted because I allowed it to update with LiveKive etc and since then (month or so ago) that rogue box started to come up.

The only reason I've never done the free AV's is purely for technical support.  I know AVG haven't been a bundle of fun with their help atm but they have tried more than if I had to find info out for myself.  They replied to me this morning re the logs I couldn't send this time because when I tried to run their click and fix tool it came up with "You don't have AVG installed on this computer".  However they didn't mention that just asked me once again to download the original tools and do the event logs and AVG config logs/scan et al which I DID BEFORE and they tell me they didn't receive.

Conclusion....I am now thinking what have I got to lose if I uninstall AVG and install a free one (stop banging your heads on the desk... :D) to see how it goes.  However, I don't know how to do this anyway so will have to ask AND does AVAST have a firewall as I need one of those?

I have since done Malwarebytes full scan again with nothing found and Housecall has found only the SIGNU~1.EXE so it does look to me as though everything is clear, it's just the ruddy rogue box for renew that's the problem and I'm so afraid IF I were to renew that this is a scam that will the people out there my card details......I've wondered about this all along but cannot find out if this has happened before!

Again thank you for helping, I just hope I haven't made you swear at your screen when reading my posts....it makes me do that though when trying to deal with it all...scream.

Recapping further....my computer is an HP  with Win XP SP3

Chrissie

Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 22, 2011, 10:16:27 AM
I agree, but I am no expert either but I get calls from friends and family to fix their computers and if I don't know what is wrong I can normally find out and fix it.

I was just like Chrissie 10 years ago scared to even turn it on, then I decided to build a computer (very scared)** but it all went well and in the process I learnt a lot about computers, now recently I have got old computer parts from freecycle and built a few for free.  I had thought about doing that then recycling them back through Freecycle to people less well off than me and giving them an old but fully woring computer.

What I am trying to say is unless you try and do something you never will.  Better to fail and learn something than to never have tried at all because in failing you have still gained some knowledge.


**  I believe the technical term is "effing terrified" - or it is my case  :lol:  I see where you're coming from BB and wouldst that I could do what you have done, I would love that knowledge.  I would have a go on an old one but haven't got one unfortunately....I would be "e t" about getting electrocuted, shorting things out, not getting the case off/on etc....in fact, making a right pigs ear of it.  The question I have to ask you is.........WTH don't you live near me!!!! ;D ;D ;D
Title: Re: What AV to buy, what to do next? Update
Post by: UncleUB on June 22, 2011, 10:23:04 AM
Quote
Conclusion....I am now thinking what have I got to lose if I uninstall AVG and install a free one (stop banging your heads on the desk... laugh) to see how it goes.  However, I don't know how to do this anyway so will have to ask AND does AVAST have a firewall as I need one of those?

You can use windows firewall(its built into the o/s),it is quite adequate.

Uninstall AVG and then install Avast..I would then run Malwarebytes (quick scan)once a week as extra protection
Title: Re: What AV to buy, what to do next? Update
Post by: AdrianH on June 22, 2011, 10:30:46 AM
Avast free edition is proven on tests to be better than many of the full security suites around. There is support via email and on the user forum, I would get rid of AVG it is not a great product. Just go to "Programs and Features" to run the uninstaller.


Avast now also includes "Safe Zone" for online shoping and banking which keeps your details secure from prying eyes.
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 22, 2011, 10:42:52 AM
Quote
Conclusion....I am now thinking what have I got to lose if I uninstall AVG and install a free one (stop banging your heads on the desk... ) to see how it goes.  However, I don't know how to do this anyway so will have to ask AND does AVAST have a firewall as I need one of those?


I think that is a good plan, uninstall it reboot computer then do the scans for infection using what you already have left installed and see what comes up.

If now clean install a free version and run a full scan after updating definitions, do not use Norton.

Never ever install two antivirus programs only one.

Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 22, 2011, 10:43:28 AM
@ chrissie.

Avast Free Edition does not have a firewall........the paid for Avast Internet Suite does. How the cost Avast IS and AVG compare I am not sure.

The downside of the XP firewall is that it monitors only inbound traffic.......outbound is left to it's own devices so any nasties you may have can "dial home".  ( I think the Windows firewall in Vista/7 is a two way thing ? )Having said that, there are plenty of very good, free, two way firewall to be had.........my own current favourite is Agnitum Outpost ( so light you don't even know it's there.)

There is another solution of course..........you are familiar with AVG and it has served you well until these recent happenings. Unfortunately you have no reinstall disc/file but your current licence runs out very shortly. You could always bite the bullet, resolve to lose the little bit of your subscription which is still to run......and buy a new AVG off the shelf. You would have a clean program and a back up/reinstall program file to store somewhere safe on your PC.

If you wanted to do that, we can guide you through the simple steps of uninstalling the existing set-up and reinstalling from fresh.

Ooops, just noticed AdrianH has popped in.........I agree that Avast Free is a better prog. than AVG......however that still leaves the firewall question that I was attempting to address above.
Title: Re: What AV to buy, what to do next? Update
Post by: AdrianH on June 22, 2011, 10:47:31 AM
The need for a firewall depends on how you connect. If you use a modem then yes you must have a software firewall, if you are using a router I wouldn't worry so much.

There is a free application that extends the Windows firewall but you need to understand what is going on to use it properly. There are some quite good free firewallss to be had if needed.



I don't know where you are located Chrissie, I am in south Dorset and would willingly assist if your not too far away.
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 22, 2011, 10:48:20 AM
I would not worry about a firewall at the moment get the issue fixed first and just use the XP firewall.

I have known people not have a firewall for years and never had a problem so a short time with just antivirus to check system is not going to be a bad thing.
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 22, 2011, 10:58:10 AM
I'm banging on about a firewall only because chrissie asked what are the alternatives to her current set-up.........and made mention of the one way/ two way thing as we are as yet not 100% certain that chrissie's machine is not infected.
I know also that there are folks who like to see a wee bit firewall icon animation when on line......gives a little sense of security ( Probably misplaced  ;D )

I agree that the XP firewall behind a hardware firewall in the router should suffice for reasonable browsing and avoiding the obvious dangerous sites.
Title: Re: What AV to buy, what to do next? Update
Post by: UncleUB on June 22, 2011, 11:05:25 AM
As Chrissies Lap top is quite new I would imagine it will have W7 installed.
Title: Re: What AV to buy, what to do next? Update
Post by: AdrianH on June 22, 2011, 11:16:29 AM
As Chrissies Lap top is quite new I would imagine it will have W7 installed.


Quote
Recapping further....my computer is an HP  with Win XP SP3
Title: Re: What AV to buy, what to do next? Update
Post by: UncleUB on June 22, 2011, 11:24:31 AM
As Chrissies Lap top is quite new I would imagine it will have W7 installed.


Quote
Recapping further....my computer is an HP  with Win XP SP3

I stand corrected,but iirc correctly Chrissie got a lap top around Christmas time,thought it was the lap top she was on about...my mistake. :-[
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 22, 2011, 11:25:42 AM
I bet that if Chrissie uses a router to connect to the internet then she already uses NAT and is protected as good as any firewall, without paying vast sums of money. Don't worry about a firewall I would say.
What is need is to rid the computer of this pop-up which seems to be more of a nuisance than anything.

Going back to basics:

Chrissie >>
Quote
Malwarebytes picked up this - KEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{549B5CA7-4A86-11D7-A4DF-000874180BB3} (Trojan.Agent)  and quarantined it (can I delete it now?).


Yes delete it.

Delete any temp, tmp files that the Operating System will allow you to.
Start your web browser and delete empty the cache.
Delete all the cookies. You will also delete all website saved data with this, log in data. That is names and passwords.

Empty your Recycle Bin.

Get yourself an Anti-virus program of your choice. Uninstall everything to do with AVG & Grisoft. Reboot your computer without connecting to the internet. Install your new anti-virus program. Do a complete scan. If it comes up clean you should be good to connect to the internet.

If that pesky box returns we are going to have to look deeper for it.

Don't worry we are here with you & most of understand your fear of doing something technical.

That's my contribution for now.
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 22, 2011, 11:43:00 AM
Awww guys you are brilliant, giving me more confidence every day that's for sure. 

@ Adrian...I'm in Kent  :-X unfortunately but thank you for your help.
@ Uncy...my lappy at Xmas has Win7  the PC as said XP, just lucky I got the laptop so I can still get online  :)

@ TD thank you again.  One of the reasons I had wanted to stick with AVG bought one is that it advises when surfing on Google which sites are ok and which are not and I find that very useful.  Also never had a problem with it until this darned rogue box...and still wonder if when I uninstall AVG the box will go... but won't get that sorted until I get new AV.  Also reading what everyone has said re the Fwall... I'm the type who is a belt and braces person - well you know what I mean.  I prefer to have the firewall built in so I might just get the AVG bought version again ???  not sure till I read back again and see the pros and cons.

@ SS44  I delete all TEMP files, cookies, passwords etc etc several times when online I'm always doing it, it's like second nature to me now - is this the same as emptying the cache, if not how do I do that please?.  I empty the recycle bin as well so that's ok  :)  You're right about the rogue box....THAT'S the thing that's bothering me now I just hope it goes away when I uninstall AVG....we shall see!


Thanks again everyone, invaluable help as per usual   :)
Title: Re: What AV to buy, what to do next? Update
Post by: UncleUB on June 22, 2011, 11:53:41 AM
Quote
One of the reasons I had wanted to stick with AVG bought one is that it advises when surfing on Google which sites are ok and which are not and I find that very useful.

McAfee site advisor and WOT (Web of trust) both do the same thing..I have them both installed

http://www.siteadvisor.com/


http://www.mywot.com/en/download
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 22, 2011, 01:12:20 PM
What is the model number of the HP XP machine?

Did it come with any restore discs?

Or even better do you have a full version windows install disc.
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 22, 2011, 01:29:08 PM
HP machines usually have a tattoo partition ( hidden ) and they supply a floppy restore disk. The use of which restores the computer back manufacturers settings. Which means Windows SP3 will need to be re-installed. So OEM disks are needed.
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 22, 2011, 02:32:40 PM
What is the model number of the HP XP machine?

Did it come with any restore discs?

Or even better do you have a full version windows install disc.


Hi BB

It's an HP Pavilion don't know the model number.  No discs, no floppy restore disk.

Can you tell me do I download the AVAST free first then uninstall AVG then install the AVAST?  I think I read sometime ago that's how you do it as I know I won't be able to go online after I uninstall AVG.  Trouble is if things fail with downloading et al then I'm offline until I can get an AV on here aren't I?
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 22, 2011, 02:37:06 PM
Yes Chrissie, download first then disconnect. Uninstall AVG, reboot and then install AVAST.
You may need to go online to complete the installation.
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 22, 2011, 02:47:14 PM
To add to ss44 comments, you may need to go online to complete installation and once Avast is installed you will want to update it's definitions.........so before doing that but after uninstalling AVG remember to switch on your XP firewall (start button>control panel>security centre>Windows Firewall.)

ps........I don't think you are the least bit cranky  ;)
Title: Re: What AV to buy, what to do next? Update
Post by: UncleUB on June 22, 2011, 02:58:34 PM
Good luck Chrissie.. :fingers:

Its not the end of the world if you are unprotected online for a short length of time,so don't fret too much about that
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 22, 2011, 02:58:53 PM
ps........I don't think you are the least bit cranky  ;)

Thanks Colin and TD....

@TD...rumbled.... ;)
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 22, 2011, 02:59:42 PM
Thanks Uncy....I will trust to luck lol
Title: Re: What AV to buy, what to do next? Update
Post by: jeffbb on June 22, 2011, 06:56:24 PM
Hi

If you haven't got an AV working its no big deal  as long as you only visit a reputable site like your new AV provider first  .Oh and don't download any mail until your New AV is updated and fully functional.

good luck
Regards Jeff
 
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 24, 2011, 11:16:45 AM

Hi again  :)

Well the deed is done I've uninstalled (I think!) AVG and installed AVAST Free and so far so good though I'm on the lappy atm as I'm not too trusting of the PC yet.  I ran a scan on AVAST and found nothing thank goodness, I will do an online scan with Housecall later.  However, there's a couple of things puzzling me and I'm wondering if you good people can give me some gen on them please?

I still have the AVG uninstall tool and text file folder with results on my desk top.  I uninstalled the AVG first at the uninstall location on the computer then I ran the uninstall tool.  I then did a search for files and folders to check if all the AVG related things were gone but it came up with over 200 files found (some were screen shots of the problems in my pics file so they are ok).  Some of the files I noted down were AVGIDSAGENT one was boot one graph another malware another node and last one removed.  They were located apparently in C:windows Temp diagex files (with loads of numbers after them on file name) with D.cab at the end.  I deleted all the Temp files but another search came up with same files.   So I looked in the desk top "remove" Notepad file and the log there (not all understood by me of course), said amongst other things that certain "things" failed. 

My questions now are, should all the files have gone with uninstall or do I have to delete over 200 files manually or just leave them?  Observation....when the Trojans were picked up by Housecall scan last week before uninstall, they were TROJAN AGENT.AVI  are these the same as the AVGIDSAGENT files remaining with the over couple of hundred on my PC?

Once again I value your help so much and appreciate any advice you can give me, thanks everyone. 

Chrissie
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 24, 2011, 01:37:39 PM
All these files with lots of numbers and ending in .cab are harmless.

.cab = cabinet, meaning that they are archive files that Windows wants to keep.
They are best left alone. Ignore them and forget that they are there.
As they are in a Temp file they will disappear when you next do a diskclean or a cleaning run with CCleaner or similar.

In that location, AVGIDSAGENT is safe....again I would just forget it is there, it wont to any harm.

Glad the change went ok.........hope you are now rid of that AVG splash screen freezing your system.

TD uses Avast Free so if you have any queries about it.......just ask.  :)
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 24, 2011, 01:53:12 PM
Nice to hear you have got your Avast installed and you are running. You seem to be in capable hands with Tuftedduck.  :) I might add though maybe it is time to do a disk clean up, with whichever tool you use. After that you may be due a defrag.
Best of luck with it all. :fingers:
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 24, 2011, 03:13:13 PM
Have you updated AVAST and done a full virus scan?

If not start it and leave it running to the end.
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 25, 2011, 10:14:27 AM
Thanks everyone for your help.  TD the rogue box hasn't come up since  ;D thank goodness so one hopes that went with the uninstall (all crossed).  Thanks for the info re the files but there are still about 200 on there with AVG file names...but I don't know which to get rid of or how...  I really need to get this computer cleaned it gets very slow at times and windows hangs and I get program not responding messages (end now) etc so I'd love to get rid of things if I could.

@ Colin 2  I did the disk scan and defrag before I installed Avast I will probably do another one soon thanks for reminding me.

@ BB Yes I did the updates on avast or rather it automatically does it and I did a full scan, will do another today if I'm able.  First off though I want to a Housecall scan to see if it still picks up on the YSIGNU~1.EXE thing so will do it and see.  Takes over 2.5 hours though so will have to be done when I'm orff the computer.

I now want to get a free firewall so will have to look for one of those that will go with Avast....to think without all your help on here I wouldn't even have uninstalled AVG etc etc so thank you all so much for helping this dummy out  :D

Chrissie
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 25, 2011, 10:28:50 AM
Glad things are working out Chrissie. The files with AVG in the title are they all to do with AVG?
If they are and you are confident they are I can tell you a way to delete them all.
I can tell you a way to delete these files, but only the ones you are sure about. This will require a fair bit of finger pressing.  :)
Title: Re: What AV to buy, what to do next? Update
Post by: UncleUB on June 25, 2011, 10:50:29 AM
Quote
I now want to get a free firewall so will have to look for one of those that will go with Avast..

Just use the Windows XP firewall.It is more than capable,if you feel it isn't then heres one or two to consider

http://www.zonealarm.com/security/en-us/zonealarm-pc-security-free-firewall.htm

http://www.agnitum.com/products/outpost/download.php

http://www.comodo.com/home/internet-security/firewall.php
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 25, 2011, 11:28:32 AM
If they are and you are confident they are I can tell you a way to delete them all.

This is what I used to do when not very confident on what to delete (and I stiil do from time to time) Dont delete them just rename them like this.

Example:

YSIGNU~1_OLD.EXE

But use the same "_OLD" for each one and only do a few at a time, then if they were required for something you just rename them back.

By using the same "_OLD" each time they are easy to find using a search (*_OLD) and after some time you can search and delete them.

You could use "_chrissie" if you like, just something easy to search and remember.
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 25, 2011, 12:26:48 PM
Normally I would agree BritBrat, but we have a couple of hundred files here. Leaving them on the drive in whatever form means they will be cataloged and checked by a full av scan, as well as slowing the pc down. If they are AVG bits of files then they may as well go.
I'm talking about using the command line (command prompt in Windows speak) to do the job.
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 25, 2011, 01:02:14 PM
Normally I would agree BritBrat, but we have a couple of hundred files here. Leaving them on the drive in whatever form means they will be cataloged and checked by a full av scan, as well as slowing the pc down. If they are AVG bits of files then they may as well go.
I'm talking about using the command line (command prompt in Windows speak) to do the job.

Are you sure Chrissie would be up to that?

On a side note:

Quote
Removing an illegal directory

This always comes in handy whenever you download an illegal directory from an ftp site and think your stuck with it. Well the good news is your not and here's how to fix it.  
  
 To get to this command in XP goto > start > run > cmd > then navigate to where the illegal directory is at.  
  
 rd {path} /s /q  
  
 Above is the syntax of of how its done and below is a practical example because I hate that p00 above. Make it simple for me to understand thats what I always say.  
  
 Example one: Deletes testfolder and everything inside it  
  
 rd c:\testfolder /s /q  
  
  
Remember everything below that directory gets deleted so don't do this to an important directory that is going to affect your system.  
  
 Here's another example going deeper that you can follow to try it :  
  
 1. cmd  
 2. cd.. keep doing this until you reach the c:\  
 3. or do it the easy way and chdir c:\  
 4. make a folder called testfolder by typing mkdir testfolder  
 5. type cd c:\testfolder  
 6. type mkdir garbage  
 7. type dir so you can see your new folder  
 8. type chdir c:\  
 9. type rd testfolder /s /q  
 10. type dir to see the results, everything below testfolder is now gone.  
  
One last word or caution, you cannot undelete actions done here so be careful ok!  
 _________________
 
 
 If anyone really cares:
 
 /S = Delete specified files from all subdirectories.
 /Q = Quiet mode, do not ask if ok to delete on global wildcard

Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 25, 2011, 01:33:21 PM
I'm sure Chrissie would be up to the task. It's easier than using the GUI sometimes. She some canny lady when she puts her mind to it. :)
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 25, 2011, 10:21:11 PM
Hi guys

Wow a lot to think about here lol but again thank you for bearing with me.  I did another search for files and folders with AVG in the name and it came up with 386!!  A lot are temp files but I don't even know where the look for them as they don't come up when you use run %Temp% or none that I can see.

I did another housecall scan today and it only came up with the YSIGNU~1.EXE (don't know where it is though) and it won't fix it because it says it could delete a legitimate file!  I'm still wondering if it's a fpositive.

I agree that these 386 files are taking up space but I am concerned that I might delete things that shouldn't be deleted....I can't even get a copy of the list from the search as it won't copy to paste in a word doc so I could post it somewhere and even if I could it wouldn't show all the file path would they...sigh.

Some of the file endings have dump on the end...mean nowt to me tho.  I don't know why the avg8 and avg10 folders are still there, I thought almost everything would have gone when I uninstalled, should I try another uninstall with the downloaded thingy or wouldn't that make any difference.. I knowa nuthin!


Anyway not to worry too much,, at least I got rid of AVG and the rogue page...so I'm happy about that.  Thanks again you are so kind to me.

Chrissie
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 25, 2011, 10:34:07 PM
You may not be able to find/see them as they are hidden.

Try this:

From Windows Explorer menu: TOOLS > FOLDER OPTIONS > VIEW > Scroll down list > Hidden files and folders (select the show option) > scroll down futher > Hide extensions for known file types and de-select it > scroll down > Hide protected operating system files and de-select it.

Press the OK button.

Then have another look for them :)
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 26, 2011, 07:22:05 AM
Chrissie, as I mentioned before all these old AVG files are not causing you trouble. They are safely tucked away and are not  a threat.
Although there are two hundred of them, and you are worried about that, they are ywo hundred very, very small files......only a few kbs each..which are not taking up any great space and are not slowing down your PC.
Forget they are there and ignore them.

As to the file YSIGNU~1.EXE , it is legitimate. It is part of the other file that that you queried before ( AVGINSTALLEDAPPX.EXE ) . Here is the official word from AVG.., and I quote from the AVG forum at http://www.avgforums.com/viewtopic.php?f=4&t=1448

quote "Hello,

The AVGINSTALLEDAPPX.EXE file is an official file from AVG Technologies. Please allow AVGINSTALLEDAPPX.EXE to pass though the firewall, it is a part of our Cloud technology for Product Improvement Program. If you have any other questions please contact us by http://www.avg.com/support
Arthur M.
Business Support Specialist
AAS, Information Systems Security

AVG Technologies USA, Inc.
Education, Government Sales and Support
2105 Northwest Blvd.
Newton, NC 28658
828-459-5422 " .....................unquote.

So that is a legit file and should be ignored. It is still showing up as a registry item on your PC...but it will not do any harm. Forget it.


As to your slow and sluggish machine.
Was it like that before you made the avg-to-avast switch ?
If not, it is something to do with Avast........nothing to do with "infections" ( you do not have any infections....avast, malwarebytes and Trend housecall all give you as clean ).
I suspect it is the "Behaviour Shield" in Avast. When first installed, this part of Avast tracks and learns your every move and learns your behaviour patterns on the basis that if anything then happens that is not within your behaviour pattern...it will question it and flag it as unusual.
It would be worth turning off that part of Avast to see if that is what is slowing you down.
To do that, open Avast GUI, on the left hand side click on "real time shields" then click on "behaviour shield" and when that happens click on the stop button and then apply/ok out of that. (The systray icon will change at this point and tell you that you are unprotected...ignore that for the moment until we see if this shield is the problem. We will rectify that in a moment ) 

One other thing about the slow PC.............can you let us know how much RAM is istalled, can you also post a screeny of the "processes" tab in taskmanager (expand that window to show all processes ) .............that will show us what is running on your PC and may throw up something that is slowing you down.
Title: Re: What AV to buy, what to do next? Update
Post by: scottiesmum on June 26, 2011, 10:01:35 AM
Please excuse me interrupting here   ....    I have had for years  a very small programme called ATF Cleaner  ...every so often I run it on the  'Main'  section  (I clear out the dustbin separately)    (I have a separate Firefox cleaner)    ...  it is simplicity itself  .....I find that it clears out a lot of rubbish without doing any harm (some of those cleaners terrify me  ;D) and this in turn quickens things up .....   not sure if it is relevant here but just thought I'd mention it  ... :)

http://bit.ly/levUDi
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 26, 2011, 10:08:33 AM
Thanks, scottiesmum..... :)

Your post is relevant.. :thumbs: .......and ATF Cleaner is a very good prog.
Another good one is CCleaner ......http://www.filehippo.com/download_ccleaner/
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 26, 2011, 04:26:22 PM
.......As to your slow and sluggish machine.
Was it like that before you made the avg-to-avast switch ?
If not, it is something to do with Avast........nothing to do with "infections" ( you do not have any infections....avast, malwarebytes and Trend housecall all give you as clean ).
I suspect it is the "Behaviour Shield" in Avast. When first installed, this part of Avast tracks and learns your every move and learns your behaviour patterns on the basis that if anything then happens that is not within your behaviour pattern...it will question it and flag it as unusual.
It would be worth turning off that part of Avast to see if that is what is slowing you down.
To do that, open Avast GUI, on the left hand side click on "real time shields" then click on "behaviour shield" and when that happens click on the stop button and then apply/ok out of that. (The systray icon will change at this point and tell you that you are unprotected...ignore that for the moment until we see if this shield is the problem. We will rectify that in a moment ) 

One other thing about the slow PC.............can you let us know how much RAM is istalled, can you also post a screeny of the "processes" tab in taskmanager (expand that window to show all processes ) .............that will show us what is running on your PC and may throw up something that is slowing you down.

Hi TD, thanks for getting back.  First off just to say that some of those files (386 in number from the search) are over 1,000Kb each....that's quite a lot to me and taking space I think but of course I'm no expert (if only I were lol).

Re slow computer.  Yes it's been slow for a long time now, a lot of times "hanging" with windows not opening properly, programs not responding and hellish job to close down with the "end now" window it takes lots of goes to close them.  Sometimes when I've only got a couple of windows open a pop up will come up to say virtual memory is running low....and will open whatever... so I know something is taking up the memory.  I will try and do a screenshot of the processes running if I can get it large enough.  There's 960Mb RAM on here as I had it increased a couple of years ago.  I think it's running a little quicker now that AVG is gone...but not that much.

Just done the screen shots but not all on screen so I've taken 2 shots so the 2nd one overlaps the first so as to get top, middle and bottom.  Hope it helps IF I've managed to upload it here lol.

Chrissie

[attachment deleted by admin]
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 26, 2011, 04:46:12 PM
As you already know you have something that is taking a lot of memory. Do you have a lot of things running in the systray. Many times they can take up memory as they stay resident. Looking at your screenshots it doesn't look as though you have anything that stands out and your cpu cycles are very good. Maybe TD can advise you more as I am now running out of my knowledge of Windows. I have not worked wit it for a number of years now as a main operating system. I only use it occasionally.
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 26, 2011, 05:27:09 PM
As ss44 says, there is nothing nasty going on amongst the processes.
One or two of them could be happily stopped without affecting things badly, but the saving on memory usage would be minimal.

As you had the slow/sluggish problems prior to the avg-to-avast switch, Avast is not the problem so my comments above are nonsense... :blush:


Your concern about being short of space, your wish not to lose more space and your comment about getting "virtual memory running low" rings a bell with me.
When Windows runs out of available RAM as may happen if you have one or two ram-heavy applications running, it may turn to the paging file and use that as a sort of substitute RAM

Paging file = scratch disc =virtual memory .., an area on your hard drive drive set aside for this purpose

If your hard drive is full or getting full there may not be sufficient free space available on the drive to act as paging file...so the system struggles and waits for RAM to be freed up from another source.
I am sure that I read sometime in the long distant past that Windows cannot handle this sort of situation very well if you have less than 10% of your disc space free.

Is your drive very full ?
Can you go My Computer.....right click on the C drive and then click on properties. You will see a wee pie-chart showing free space and used space......can you let us know what these figures are ?
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on June 26, 2011, 06:35:21 PM
You know I said about renaming files, well if the folder they are in is not a system folder and all seem to be related I have been known to rename a folder.

Leave it for a week or so and if any issues rename it back to what it was, if not delete the whole thing.

But to be honnest I think you should leave it alone for a while and see how it all goes.

If you were to reformat/restore it you would be amazed how fast it is again but it would not last long.

My XP (this machine) is old and slow but I still like to use over my Windows 7 machine that has a Quad core and 12 gig ram but is really fast.
Title: Re: What AV to buy, what to do next? Update
Post by: jeffbb on June 26, 2011, 07:20:25 PM
Hi
Not sure are you running windows 95 ? .If so a little bit of info on virtual memory  in windows 95 http://support.microsoft.com/kb/128327

Regards Jeff
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 27, 2011, 06:50:45 AM
@ jeffbb........chrissie has XP, but I think the same rules apply.
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 27, 2011, 09:27:33 AM
Hiya
Didn't get back last night as wasn't on this pc until now.  Info required is...
Capacity 69.5 Gb     -    Used space  17.4 Gb      -  Free space   52.1 Gb

Yes XP SP3 here jeff

Also must just say re Avast... that when the PC boots up it's coming up with putting a file in the Sandbox but when I look in Sandbox I can't see the file.  The file it is dealing with each time is  C:\Program Files\iPod\bin\iPod service.exe  I read up about the Sandbox what it does but not how to find the files it puts in there....

Thanks to all for continuing help, don't know what I'd do without you nice people.

Chrissie
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 27, 2011, 10:08:49 AM
Morning Chrissie, have done a search on the Ipod service.exe and all reports say the same thing. If you don't use itunes then disable this program. This would suggest it is resource hungry and is started when Windows starts. You will be able to rename the file by putting a '~' at the end of the file.
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 27, 2011, 11:13:24 AM
Hi Colin 2

Thanks for looking that up.  You know I'm dipsy and not completely confident of renaming files (well not that type lol) nor disabling thingies, (I don't use iTunes) so would it be possible for you to give me an idiots guide to doing it please?  :)  Yeh I know...I'm a pain in the proverbial but I'm sure you will make allowances  ;D

Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on June 27, 2011, 11:31:26 AM
Allowances made. We all have to start somewhere.  :)
To rename the file do a search with the little puppy dog and search for ipod service.exe. There should only be one, if there is more then the instructions apply to them all. Right click on the file name and select 'rename' from the popup menu. In the box with the filename in just move to the end of the name and add '~' without the quote marks and the press enter. That's it. If there is more than one then do the same to the rest. Reboot and all should be OK. :fingers:
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 27, 2011, 01:48:20 PM
@ chrissie.

Well, you have oodles of disc space available, so that is not the problem.
TD will have to put on his thinking cap and get back to you.

Can you look at something please.
Right click on My Computer ( on the desktop) then click on properties>advanced>performance>settings>advanced>virtual memory>change and post a screeny of that page ?

As to the ipod thingy.........there is an choice here of three options depending on your wishes

1) If you don't want the program...uninstall or at least disable it as suggested by ss44. However, the program is not particularly resource hungry.......according to your taskmanager screeny it is using, when idle, only about 4.5 Mbs or RAM

2) If you want the program but do not want it to start automatically at boot up, knock it out in msconfig and it will fail to autostart as from the next boot-up ( will come back to that later. )

3) If you want the program and want it to autorun at boot-up but do not want it to be "sandboxed" open Avast GUI, on the left of that click on  "additional protection" when that opens click on "Autosandbox"  then on "settings" and when the menu opens, click on "exclusions" ....on that click on "add" and in the dialogue that opens type in Ipod services.exe and apply/ ok out of that..................Ipod will no longer be sandboxed.

msconfig.
The way to stop any program running at boot up is to use the msconfig utility............this is how to do that, and it would be helpful if you could also post a screeny of.this page.
go desktop>start button> run ..........type in "msconfig" without the quote marks and click on ok. When that opens click on the "startup" tab.
Run down the list of programs in there, and if there is an entry for iPod or iPod helper, uncheck it/them then apply/ok out of that.    After making any changes in msconfig you will, on next boot-up, get a pop-up warning telling you that something or someone has been fiddling about in system settings...click ok on that and it will go away. 
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 28, 2011, 10:59:09 AM
Sorry bout intermittent appearances...hosp n docs appts this week so on and off here.

@ Colin2  thanks so much for that, it found 2 files I will save info and deal with at a later date.

@ TD - will attach the screenys here.  AVAST sandboxed the program file iPod services exe as I booted up so not sure it will be on the start up screenshot but you will know when you look.  Had to include 2 startup pics as couldn't get it all on.

I did think there's lots of space on here but wondered why all the "hanging" and splitting of windows and programs not responding etc...could not see the reason for it even when I had the RAM upgraded.

Thank you again for all your help.



[attachment deleted by admin]
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 28, 2011, 11:12:09 AM
The answer may well lie in your first screeny, chrissie.....the virtual memory one.

Look at the figures...............recommended size of the paging file is 1438 Mbs..............but the actual size is only 288Mbs...and that is not enough.

Go a wee bit up the page to "custom size" and in there put the figure 1438 in both the minimum and the maximum boxes then click ok all the way out of that.

Does that give you better speed and performance...should do.
Title: Re: What AV to buy, what to do next? Update
Post by: HPsauce on June 28, 2011, 11:23:35 AM
I'd just change it to System Managed, then click on Set.
Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 28, 2011, 01:58:09 PM
Hi again chrissie.

Looking through your screenies of the msconfig startup tab.

I would take the check mark out of the item iTunesHelper

I can fine no reference to Python22Autobar on the net......do you have a program associated with that name or a similar name (I don't like the look of the wee h= after the name.
Maybe if you were to take the check mark out of that and see what happens.

I am very suspicious that there is still an infection running on the machine...that item E_S68 is very odd
Take the check mark out of that and see what happens...and on next boot up check to see if it is back.

Take the checks out click apply/ok out of that and reboot
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on June 29, 2011, 10:36:17 AM
Hi

TD I increased the virtual memory as suggested but not had chance to see if anything is better tho I should hope it would be.

Re the startup menu.  The Python thing is something to do with HP I found out so I imagine that is ok...  However I have just unchecked the itunes helper (and WKCALREM which I don't use) and when I restarted the computer a box came up...You have used system config utility to make changes to the way windows start. Currently in diagnostic or selective startup mode causing this message to be displayed and the utility to run everytime.  Choose normal setup mode in Gen tab to start windows normally or undo the changes you made using the system config utility.   I must say I didn't touch any other tab so I don't know how it changed the config to diagnostics.   I re checked the itunes and rebooted and AVAST then sandboxed that (which it hasn't done before) and the ipod service thingy.....

I have a feeling I should leave well alone as I really don't know how to come out of a situation if the PC starts mucking about and crashes big time (oh me of little faith)..

Re "an infection still running on the PC", yes I still think that and I still feel it's to do with AVG leftovers.  I know the "rogue" box doesn't come up anymore but I wonder if something from it is hiding in those 386 files with AVG in the name that are still here.

One point of interest.....hadn't thought to mention before, all the time AVG was on here windows didn't automatically do updates, as soon as I took AVG off the updates are coming in....how does that happen.... :-\

Bet you're all fed up with me...I might even go to the AVG forum and ask them what they think about all the files left...and then they might just tell me to ...s*d off lol...we shall see.

Thanks again.
Chrissie

Title: Re: What AV to buy, what to do next? Update
Post by: tuftedduck on June 29, 2011, 01:38:47 PM
Hello again chrissie.. :)

That pop-up box about "system configuration utility"............I did mention two or three posts back that you would get that.  It is normal and to be expected. As I said before, when it comes up, just click ok and will go. You will get it only  on first boot since amending entries in msconfig
Pop back in there, uncheck the two entries for iPod and iTunes helper to stop them being sandboxed and click apply/ok out of that. On reboot you will get that pop-up again, just click ok and then forget it........it is a normal event.

Windows updates.......the change from AVG to Avast has altered a setting in your Control Panel Security Centre.
Go desktop>start button>control panel>security centre>automatic updates and in there disable the auto updates. click apply/ok out of that.

You won't do anything wrong or cause harm to your system by following steps you find on here...we won't allow you to do anything wrong.. :)

>>Bet you're all fed up with me<< ......nonsense ! don't you dare go to another forum... :whip:  ;D

Leave the AVG remnats and this possible infection thingy with us........TD will investigate and the right answer will be  found.. :fingers:
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on July 01, 2011, 10:48:00 AM
Hi TD thanks again, I'm still around - on and off (bogged down with life outside of tinternet  :D) so no worries about sorting atm.   :)

Chrissie
Title: Re: What AV to buy, what to do next? Update
Post by: silversurfer44 on July 01, 2011, 11:24:50 AM
There is another life ? :o
Title: Re: What AV to buy, what to do next? Update
Post by: BritBrat on July 01, 2011, 08:59:11 PM
Are you having a party?
Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on July 02, 2011, 03:55:41 PM
There is another life ? :o

Well there seems to be one Colin and sometimes it beckons (more's the pity hehe)...sad life I lead  ;D

Are you having a party?

I'm not <shame>  but if you're going to offer BB....name the place and time....mine's a bottle of red wine after a couple of rums please  ;D ;D
Title: Re: What AV to buy, what to do next? Update
Post by: AdrianH on July 02, 2011, 06:14:34 PM
Hi again chrissie.

Looking through your screenies of the msconfig startup tab.

I would take the check mark out of the item iTunesHelper

I can fine no reference to Python22Autobar on the net......do you have a program associated with that name or a similar name (I don't like the look of the wee h= after the name.
Maybe if you were to take the check mark out of that and see what happens.

I am very suspicious that there is still an infection running on the machine...that item E_S68 is very odd
Take the check mark out of that and see what happens...and on next boot up check to see if it is back.

Take the checks out click apply/ok out of that and reboot



Info on PYTHON.

Python is a coding language and may have been added by an application like HP printer, you do not need or want it.


By Googling python22  autobar with a space you get results.

>> a french forum >> http://forum.pcastuces.com/blocage_en_prenant__internet-f25s44689.htm

note the HiJack This log which contains the info

Code: [Select]
Python 2.2 combined Win32 extensions-->C:\Python22\Lib\SITE-P~1\UNWISE~1.EXE C:\Python22\Lib\SITE-P~1\w32inst.log
Python 2.2.1-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG

Read the FAQ "Why have I got Python" >> http://docs.python.org/faq/installed.html


Hope that helps , the start up list Chrissie has there needs trimming right down, I have about 4 items in my list,everything else is on demand only.


Quote

Other entries at start up .........

WKCALREM


MS Works Calendar Reminder ........... if not in use get rid of it.


http://www.file.net/process/wkcalrem.exe.html


E_S68


http://www.malwareremoval.com/forum/viewtopic.php?f=12&t=38752


qttask  quicktime .......... definitely not needed at start up.


jusched ........ Java ... not needed at start up.



WKuFind .......... Microsoft Picture It .... not needed at start up


The 4 hp entries under jusched are not needed at start up.



Title: Re: What AV to buy, what to do next? Update
Post by: chrissie on July 02, 2011, 09:45:15 PM
Hi Adrian

Many thanks for your advice, I've only ever had HP computers and laptop and though I don't know about other PC's HP seems to load bags of stuff on and I get fed up with their updates too.  I will have a look at the python thingy.  So it's ok for me to disable those things you've mentioned on the startup menu, I've always wanted to do that sort of thing but never been sure which ones I can tamper with  ;D  Thank you again,

Chrissie
Title: Re: What AV to buy, what to do next? Update
Post by: AdrianH on July 03, 2011, 07:32:18 AM

Java update and how to turn off auto settings .....


http://www.java.com/en/download/help/java_update.xml#howto



E_S68    shows in your image as being in C:\Windows\System so we need to be careful with that one, when it is in a "temp" folder it appears to be malware, we need more detail on its location. Try stopping it and see what happens.


The "Python" entry can be shut down and then look for Python in Programs and Features, it should be listed so you can uninstall.

HP entires  .........


http://www.bleepingcomputer.com/startups/hpsysdrv.exe-2046.html    (This one you may want to keep as it deals with system recovery, it is not essential but can be useful.)


hpsysdrv.exe




http://www.bleepingcomputer.com/startups/hpcmpmgr.exe-1977.html


hpcmpmgr.exe



http://www.bleepingcomputer.com/startups/hphupd05.exe-2026.html


hphupd05.exe



http://www.bleepingcomputer.com/startups/hphmon05.exe-2023.html


hphmon05.exe


Any entry/file name in the start up list can be checked in Google, there are usually a list of results, Bleeping Computers is probably the easiest to understand and the most reliable.