You should only have one AV program resident (running continuously in the background), to prevent conflicts. Choose either AVG or Avast, and disable (or uninstall) the other.
I personally would stay away from XofT; it was once blacklisted as a 'rogue' antispyware program. Subsequently it cleaned up its act, and was delisted, but is still not a program recommended by the experts.
Once you have only one AV running, scan again and see if it detects anything.
I have another question please.....before I uninstall either one of these versions of a AV, which one do you like more than the other.
The Avast AV scan is the prog. that is showing the problems....
sandan83:
I have only used AVG myself, and can't comment on Avast, except to say both are well recommended AV's. Pick whichever you find easiest to use. When you run 2 AV's at the same time, it is not uncommon for one to pick up files from the other and mis-identify it as an infection. I'll be interested to know if your Avast scan still finds that problem.
:smileyvery-happy: Thank you so very much for helping me. I have taken your advice and disabled one of the AV prog. (AVG) I am now running the AVAST AV scan and will let you know the results. I have another question please.....before I uninstall either one of these versions of a AV, which one do you like more than the other.
I have had the AVG AV on my computer for the last year and a half and it ran every day. The AVG always showed "No Viruses" smileysad: The Avast AV scan is the prog. that is showing the problems....
Thank you again for your help. I will get back with the information of the Avast scan as soon as I can.
Thank you again for your expert advice. I will let you know this evening the results of the virus scan from AVAST. I have to leave to go to my daughters home, however will be back on this evening with the infro you asked for.
After running the scan using the Avast prog. it once again showed infection from the ....."Win32: Kuangu, and also another one called, "Win32:CTX" . After reading some information about the CTX virus, I am really worried as to how to remove these things from my computer. Please help me rid my computer of these things. Right now they are contained in a folder that AVAST has in its program....I've written the specifics of what the scan reported if that would help you to identify what we are dealing with better.
Thank you for your help.
Sandan83
(ps..I forgot to mention that I had run, on occasions, the on-line free scan by Trend Micro and also the Symantec Security on-line free scan.....neither of these have ever shown any problems. Is there any positive scan that can be done to determine if my computer is indeed infected?)
First of all, let me say that if you are
not experiencing symptons of a serious infection (severe sluggishness of your PC, unexpected pop-ups, trouble connecting to the internet, trouble running your antispyware programs, hijacking of your internet home-page, etc) then you should take a deep breath and relax. False positive detections are fairly common, particularly when users have been running more than one AV as you have.
If the online scans by Trend-Micro and Symantec come up empty, that is further evidence that your PC is ok.
Nonetheless, I think the time has come that you need further assurance. I would suggest you download the free scanner HijackThis, run a scan, and post the logfile it generates to the HijackThis board, where experts can advise you on anything on your PC that should be fixed.
:smileyvery-happy:Thank you so very much for the reassurance and further direction. I have the HJT program on my computer already and have only used it once to post to an expert, as yourself before. I will follow your instructions upon returning from church services this morning.
Again, thank you so very much for your time and effort in helping me. If permitted I will repost here to let you know what happens. I am taking your wishes of "good luck" with me...:smileyvery-happy:
God Bless your efforts in helping others,
Sandan83
(ps...I wanted to tell you that my computer has none of the symtoms you mentioned that would indicate infection...(sigh of relief)
You said earlier that you had disabled AVG, and I just recalled that this is not easily done. If all you did was right-click the AVG icon in your systray, and selected "Quit AVG control center", then a lot of AVG processes are still running in the background, even though the icon has disappeared. You can confirm this by examining your HJT logfile, and search for the following entries in the 'Running processes' section:
If this is the case, the potential for a conflict with Avast still exists. You might have to uninstall AVG from your Control Panel>Add/Remove. I would still go ahead and post that logfile though.
I'm not accredited to analyse HJT logfiles, so I'll leave that to the experts. However I would note the following-
1) You are using an old version of HJT, and they will instruct you to get the latest (v.1.99.1) and repost its logfile 2) As I suspected, you are indeed still running both AVG and Avast, which might account for your problem 3) There is an entry "MpfTray.exe", which is related to McAfee's personal firewall. Yet I see you use ZoneAlarm's firewall. This may well be a leftover remnant from Mcafee, due to an incomplete uninstall. Just as with AV programs, you should only use one firewall. 4) I would suggest you disable Spybot's "Teatimer" (from within Spybot's program, not using HJT!) - it also can cause conflicts. 5) I don't see anything *obvious* in your logfile to suggest infection, but that is a very unofficial opinion. Be guided by advice from the HJT board experts. Note these guys are very busy, and may take awhile to get to your post.
My only concrete suggestion is that you uninstall AVG, rescan with Avast, and see if you still get those detections.
Thank you again for your quick response to my question. You are absolutely correct as to how I "disabled" the AVG...I looked at the HJT, however, being what I am...(old...LOL) I have no ideal what I am looking at. I have posted the HJT report of my computer in the forum you recommended. Please look at it and let me know if you see a continuing problem. Thank you again and again for your valuable assistance.
(You'll find my HJT report in the HJT Forum you recommended with the Subject line: Possible Virus - Please Help)
Wow...I didn't know that the HJT showed so much and the residue from past programs on my computer. The McAfee was a program that I thought was completely uninstalled and I was really surprised to learn that part of it is on my computer even yet. I don't know how to completely "unintstall" the left over of McAfee, so will wait for further instruction.
I am asking for assistance as to how to disable the "teatimer" within the Spybot prog. I don't know what this is, much less where to find it....LOL
I am now leaving to uninstall the AVG 7 and run the AVAST as per suggestion. I will let you know the outcome. Also, I will watch for your assistance concerning the above request for instruction if permitted.
Hope to keep you up-dated here in this forum as to the findings and resolution of my computer's possible problems.
Thanks again for your help. It is greatly appreciated.
The suggestion to disable 'TeaTimer" arose because your log showed you were already running MS antispyware, and thus is unnecessary, and a potential source of conflict.
To disable TeaTimer, open Spybot, and click on "Mode" in the top left toolbar. Make sure "Advanced mode" is selected, and answer "yes" to any warning alert that might pop up. In the left column, click on 'Tools', then on "Resident". In the right window, now
uncheck the box next to "Resident TeaTimer...". Close Spybot.
I'm not sure how important the McAfee entry is, or whether you need to remove it. I'd wait for the HJT experts' analysis, before doing anything.
To disable TeaTimer, open Spybot, and click on "Mode" in the top left toolbar. Make sure "Advanced mode" is selected, and answer "yes" to any warning alert that might pop up. In the left column, click on 'Tools', then on "Resident". In the right window, now uncheck the box next to "Resident TeaTimer...". Close Spybot.
Good Morning,
I completed this task this morning according to your instructions. I must tell you that you are a terrific teacher/tech/expert! Your description of what to do is very easy to understand and follow. Thanks again and wishing you a great day!
Sandan83
(will keep you up-dated here concerning the HJT post if allowed.....:smileyvery-happy:)
(later reporting with this post....ran the Avast as suggested....no viruses, however the viruses it did report prior is in the Virus Chest, being held there by Avast.
I also ran the Symantec AVScan and it showed no viruses...I hope this too is a good sign)
Don't worry about any files held in the 'Virus chest'- they are effectively quarantined and cannot harm your system. You can safely delete them from there, once you determine that all is running well, and you haven't removed a necessary file by mistake from your system. (Think of it as a well-guarded recycle bin).
Sounds like you are clean- but wait for the HJT analysis to be sure (they will get to it, sooner or later.)
I wanted to update you on the status of the report given to HJT Forum...I am now clean thanks to both you and the person who helped me at the HJT Forum
Thank you so very much for your valuable assistance.....I'm so very glad that I know that people such as yourself are here in these forums, ready to help if called upon. God Bless all of you who gives so very much of your time and knowledge to us who needs you. I hope the next time I need help that you will once again come to my rescue...
joe53
2 Intern
•
5.8K Posts
0
March 25th, 2006 16:00
sandan83:
You should only have one AV program resident (running continuously in the background), to prevent conflicts. Choose either AVG or Avast, and disable (or uninstall) the other.
I personally would stay away from XofT; it was once blacklisted as a 'rogue' antispyware program. Subsequently it cleaned up its act, and was delisted, but is still not a program recommended by the experts.
Once you have only one AV running, scan again and see if it detects anything.
joe53
2 Intern
•
5.8K Posts
0
March 25th, 2006 17:00
sandan83
40 Posts
0
March 25th, 2006 17:00
:smileyvery-happy: Thank you so very much for helping me. I have taken your advice and disabled one of the AV prog. (AVG) I am now running the AVAST AV scan and will let you know the results. I have another question please.....before I uninstall either one of these versions of a AV, which one do you like more than the other.
I have had the AVG AV on my computer for the last year and a half and it ran every day. The AVG always showed "No Viruses" smileysad: The Avast AV scan is the prog. that is showing the problems....
Thank you again for your help. I will get back with the information of the Avast scan as soon as I can.
Sandan83
sandan83
40 Posts
0
March 25th, 2006 17:00
sandan83
40 Posts
0
March 26th, 2006 03:00
After running the scan using the Avast prog. it once again showed infection from the ....."Win32: Kuangu, and also another one called, "Win32:CTX" . After reading some information about the CTX virus, I am really worried as to how to remove these things from my computer. Please help me rid my computer of these things. Right now they are contained in a folder that AVAST has in its program....I've written the specifics of what the scan reported if that would help you to identify what we are dealing with better.
Thank you for your help.
Sandan83
Message Edited by sandan83 on 03-26-2006 12:15 AM
joe53
2 Intern
•
5.8K Posts
0
March 26th, 2006 05:00
sandan83
40 Posts
0
March 26th, 2006 11:00
:smileyvery-happy:Thank you so very much for the reassurance and further direction. I have the HJT program on my computer already and have only used it once to post to an expert, as yourself before. I will follow your instructions upon returning from church services this morning.
Again, thank you so very much for your time and effort in helping me. If permitted I will repost here to let you know what happens. I am taking your wishes of "good luck" with me...:smileyvery-happy:
God Bless your efforts in helping others,
Sandan83
joe53
2 Intern
•
5.8K Posts
0
March 26th, 2006 15:00
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
joe53
2 Intern
•
5.8K Posts
0
March 26th, 2006 17:00
Sandan83:
I'm not accredited to analyse HJT logfiles, so I'll leave that to the experts. However I would note the following-
1) You are using an old version of HJT, and they will instruct you to get the latest (v.1.99.1) and repost its logfile
2) As I suspected, you are indeed still running both AVG and Avast, which might account for your problem
3) There is an entry "MpfTray.exe", which is related to McAfee's personal firewall. Yet I see you use ZoneAlarm's firewall. This may well be a leftover remnant from Mcafee, due to an incomplete uninstall. Just as with AV programs, you should only use one firewall.
4) I would suggest you disable Spybot's "Teatimer" (from within Spybot's program, not using HJT!) - it also can cause conflicts.
5) I don't see anything *obvious* in your logfile to suggest infection, but that is a very unofficial opinion. Be guided by advice from the HJT board experts. Note these guys are very busy, and may take awhile to get to your post.
My only concrete suggestion is that you uninstall AVG, rescan with Avast, and see if you still get those detections.
Good luck
Joe
sandan83
40 Posts
0
March 26th, 2006 17:00
Thank you again for your quick response to my question. You are absolutely correct as to how I "disabled" the AVG...I looked at the HJT, however, being what I am...(old...LOL) I have no ideal what I am looking at. I have posted the HJT report of my computer in the forum you recommended. Please look at it and let me know if you see a continuing problem. Thank you again and again for your valuable assistance.
(You'll find my HJT report in the HJT Forum you recommended with the Subject line: Possible Virus - Please Help)
Sandan83
sandan83
40 Posts
0
March 27th, 2006 02:00
Wow...I didn't know that the HJT showed so much and the residue from past programs on my computer. The McAfee was a program that I thought was completely uninstalled and I was really surprised to learn that part of it is on my computer even yet. I don't know how to completely "unintstall" the left over of McAfee, so will wait for further instruction.
I am asking for assistance as to how to disable the "teatimer" within the Spybot prog. I don't know what this is, much less where to find it....LOL
I am now leaving to uninstall the AVG 7 and run the AVAST as per suggestion. I will let you know the outcome. Also, I will watch for your assistance concerning the above request for instruction if permitted.
Hope to keep you up-dated here in this forum as to the findings and resolution of my computer's possible problems.
Thanks again for your help. It is greatly appreciated.
Sandan83
joe53
2 Intern
•
5.8K Posts
0
March 27th, 2006 05:00
sandan83
40 Posts
0
March 27th, 2006 11:00
Message Edited by sandan83 on 03-27-2006 10:59 AM
joe53
2 Intern
•
5.8K Posts
0
March 28th, 2006 00:00
Good job!
Don't worry about any files held in the 'Virus chest'- they are effectively quarantined and cannot harm your system. You can safely delete them from there, once you determine that all is running well, and you haven't removed a necessary file by mistake from your system. (Think of it as a well-guarded recycle bin).
Sounds like you are clean- but wait for the HJT analysis to be sure (they will get to it, sooner or later.)
sandan83
40 Posts
0
April 1st, 2006 18:00
Joe53
I wanted to update you on the status of the report given to HJT Forum...I am now clean thanks to both you and the person who helped me at the HJT Forum
Thank you so very much for your valuable assistance.....I'm so very glad that I know that people such as yourself are here in these forums, ready to help if called upon. God Bless all of you who gives so very much of your time and knowledge to us who needs you. I hope the next time I need help that you will once again come to my rescue...
Sandan83