Author Topic: Trojan-gen and others in Adobe reader 9  (Read 29855 times)

0 Members and 1 Guest are viewing this topic.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Trojan-gen and others in Adobe reader 9
« Reply #15 on: September 05, 2008, 10:01:43 PM »
I have install also   from PC Tools for malware.
Is it good? Or is better something else?
It's good and compatible with avast.
The best things in life are free.

mika-nikola

  • Guest
Re: Trojan-gen and others in Adobe reader 9
« Reply #16 on: September 05, 2008, 10:22:20 PM »
This is from my Log (avast) ;

Error ( mark with red X in Log, small picture)

4.9.2008 23:17:05   Korisnik2   2196   aswChestInterface - Program error description: CChestListView::OnFileEmailToAlwilSoftware() basNetAlert() failed: 42011. 
3.9.2008 21:26:47   Korisnik2   800   aswChestInterface - Program error description: CChestListView::OnCreate() !m_strErrorWnd.IsEmpty(). 
3.9.2008 21:26:16   Korisnik2   800   Error in aswChestC: chestOpenList Error 1753. 
3.9.2008 21:26:16   Korisnik2   800   aswChestInterface - Program error description: CChestListView::LoadFiles() chestOpenList() failed: 2147422219. 
3.9.2008 21:14:03   Korisnik2   2408   Internal error has occurred in module aswar scan function failed!, function 00000002. 
3.9.2008 21:13:38   Korisnik2   2492   aswChestInterface - Program error description: CChestListView::OnCreate() !m_strErrorWnd.IsEmpty(). 
3.9.2008 21:13:20   Korisnik2   2492   Error in aswChestC: chestOpenList Error 1753. 
3.9.2008 21:13:20   Korisnik2   2492   aswChestInterface - Program error description: CChestListView::LoadFiles() chestOpenList() failed: 2147422219. 


Warning ( mark with triangle outside red-inside with )


5.9.2008 12:55:49   Korisnik2   3080   Function setifaceUpdatePackages() has failed. Return code is 0x000004C7, dwRes is 000004C7. 
5.9.2008 12:01:16   Korisnik2   3564   Sign of "Win32:Horst-AAE [trj]" has been found in "J:\Adobe Photoshop CS3\PhotoShop CS3 Extended Keygen + Activation.exe" file. 
4.9.2008 21:18:03   SYSTEM   1692   Sign of "Win32:Dropper-BDV [trj]" has been found in "http://fpdownload.macromedia.com/get/flashplayer/current/uninstall_flash_player.exe" file. 
4.9.2008 15:03:12   SYSTEM   1756   Sign of "Win32:Dropper-BDV [trj]" has been found in "http://download.macromedia.com/pub/flashplayer/current/uninstall_flash_player.exe" file. 
4.9.2008 12:57:58   SYSTEM   1756   Sign of "Win32:Trojan-gen {Other}" has been found in "H:\Documents and Settings\Korisnik2\Local Settings\Application Data\Adobe\Reader 9.0\Setup Files\AIR\Adobe AIR Installer.exe" file. 


Attention ( mark with blue  "i" )

5.9.2008 12:21:47   SYSTEM   1644   VRDB (Virus Recovery Database) generation was successfully completed. 
4.9.2008 15:17:18   SYSTEM   1756   The virus database (VPS 080904-0) was automatically updated. 
4.9.2008 13:07:18   SYSTEM   1756   VRDB (Virus Recovery Database) generation was successfully completed. 
4.9.2008 9:54:19   SYSTEM   1756   VRDB (Virus Recovery Database) generation was successfully completed. 


Any comment? Please.



And I also scan with TreathFire PC Tools, it is on now all the time,  System full scan- Scan completed-No threats detected- File scan: 70779 - Registry keys scanned : 102.731
« Last Edit: September 05, 2008, 10:33:51 PM by mika-nikola »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33986
  • malware fighter
Re: Trojan-gen and others in Adobe reader 9
« Reply #17 on: September 05, 2008, 10:33:28 PM »
Hi mika-nikola,

Attach a new hjt logfile.txt to your next posting, the version of hijackthis that you use now is outdated and will miss things, download latest from here:
http://www.pcauthority.com.au/Downloads/Downloads.aspx?id=106903

pozdrawiam (pozdravi)

polonus

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

mika-nikola

  • Guest
Re: Trojan-gen and others in Adobe reader 9
« Reply #18 on: September 05, 2008, 10:38:04 PM »
Here it is 1 minute ago ;

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:36:18, on 5.9.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\csrss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
H:\Program Files\Alwil Software\Avast4\ashServ.exe
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\Explorer.EXE
H:\WINDOWS\system32\RUNDLL32.EXE
H:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
H:\Program Files\Google\Gmail Notifier\gnotify.exe
H:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
H:\Program Files\ThreatFire\TFTray.exe
H:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
H:\WINDOWS\system32\ctfmon.exe
H:\Program Files\DAEMON Tools\daemon.exe
H:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
H:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE
H:\Program Files\Messenger\msmsgs.exe
H:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
H:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
H:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
H:\WINDOWS\system32\nvsvc32.exe
H:\Program Files\PC Tools Firewall Plus\FWService.exe
H:\WINDOWS\system32\svchost.exe
H:\Program Files\ThreatFire\TFService.exe
H:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
H:\Program Files\Alwil Software\Avast4\ashWebSv.exe
H:\WINDOWS\System32\alg.exe
H:\WINDOWS\System32\svchost.exe
H:\Program Files\Mozilla Firefox\firefox.exe
H:\Program Files\Trend Micro\HijackThis\HijackThis.exe
H:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mozilla.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.hgspot.hr
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - H:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - H:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - H:\Program Files\Google\GoogleToolbarNotifier\4.1.805.1852\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - H:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - H:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - H:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE H:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE H:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] H:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] H:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] H:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "H:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "H:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ThreatFire] H:\Program Files\ThreatFire\TFTray.exe
O4 - HKLM\..\Run: [00PCTFW] "H:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKCU\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "H:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "H:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] H:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "H:\WINDOWS\TEMP\E_SA8.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [MSMSGS] "H:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: I&zvoz u Microsoft Excel - res://H:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Istraživanje - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=www.hgspot.hr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - H:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - H:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - H:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - H:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - H:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - H:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - H:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - H:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - H:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - H:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: ThreatFire - PC Tools - H:\Program Files\ThreatFire\TFService.exe

--
End of file - 7013 bytes



Pozdravi polonus!!!!! :D

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33986
  • malware fighter
Re: Trojan-gen and others in Adobe reader 9
« Reply #19 on: September 05, 2008, 11:09:30 PM »
Hi mika-nikola,

Not much that I can see in your hjt logfile, that seems all-in-all OK.
I could even establish that you have an Epson Stylus Photo DX4400 Series of inkjet printer.

Seems you have no firewall active.

Tasks scan:
System task
   

Session Manager Subsystem
csrss.exe   

System task
   

Microsoft Client/Server Runtime Server Subsystem
winlogon.exe   

System task
   

Microsoft Windows Logon Process
services.exe   

System task
   

Windows Service Controller
lsass.exe   

System task
   

Local Security Authority Service
svchost.exe   

System task
   

Microsoft Service Host Process
svchost.exe   

System task
   

Microsoft Service Host Process
svchost.exe   

System task
   

Microsoft Service Host Process
svchost.exe   

System tak
   

Microsoft Service Host Process
svchost.exe   

Systeem task
   

Microsoft Service Host Process
aswUpdSv.exe   

Virusscan
   

Avast Anti-Virus Component
ashServ.exe   

Virusscan
   

Avast
spoolsv.exe   

System task
   

Microsoft Printer Spooler Service
Explorer.EXE   

System task
   

Microsoft Windows Explorer
RUNDLL32.EXE   

System task
   

Microsoft Rundll32
ashDisp.exe   

Virusscan
   

Avast AntiVirus
gnotify.exe   

Backgroundtask
   

gmail notifer (Google mail). Informs you when you have a new email in your gmail account.
jusched.exe   

Backgroundtask
   

Sun Java Update Scheduler
TFTray.exe   

Backgroundtask
   

PC Tools ThreatFire Tray App
FirewallGUI.exe   

Unknown task
   

ctfmon.exe   

System task
   

Alternative User Input Services
daemon.exe   

Backgroundtask
   

Background application that is used to map an image file, such as .iso and so forth, to a virtual CD or DVD drive.
NMBgMonitor.exe   

Backgroundtask
   

Nero Home
NMBgMonitor.exe   

Backgroundtask
   

Nero Scout
E_FATICAE.EXE   

Backgroundtask
   

EPSON Status Monitor 3
msmsgs.exe   

Application
   

MSN Messenger
NMIndexStoreSvr.exe   

Backgroundtask
   

Nero Home
GoogleUpdaterService.exe   

Backgroundtask
   

Service Component
MDM.EXE   

Backgroundtask
   

Machine Debug Manager
nvsvc32.exe   

Application
   

NVIDIA Driver Helper Service
FWService.exe   

Unknown task
   

svchost.exe   

System task
   

Microsoft Service Host Process
TFService.exe   

Backgroundtask
   

PC Tools ThreatFire Service
ashMaiSv.exe   

Virusscan
   

Avast Anti-Virus Component
ashWebSv.exe   

Virusscan
   

avast! Web Scanner
alg.exe   

System task
   

Application Layer Gateway Service
svchost.exe   

System task
   

Microsoft Service Host Process
firefox.exe   

Application
   

Mozilla Firefox
HijackThis.exe   

Application
   

Merijn Hijackthis
wmiprvse.exe   

System task
   

Microsoft Windows Management Instrumentation

Kaspersky Internet Security 2009 1PC 1 year


polonus
« Last Edit: September 05, 2008, 11:21:11 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

mika-nikola

  • Guest
Re: Trojan-gen and others in Adobe reader 9
« Reply #20 on: September 05, 2008, 11:20:47 PM »
Yes I have Epson Stylus DX 4400  ;D.

So that seams that everything is OK.

I'm still have one question do I have to install Hosts file and witch one exactly because I don't understand that to much.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33986
  • malware fighter
Re: Trojan-gen and others in Adobe reader 9
« Reply #21 on: September 05, 2008, 11:28:06 PM »
Hi mika-nikola,

About the use, the download and the install of a host file:
With Installer or automatic installation
There is also HOSTS file installer:
1. http://hosts-file.net/?s=Download - just download the hpHosts-Setup-Win32.exe
2. http://mvps.org/winhelp2002/hosts.zip - run the mvps.bat included in the zipped file to install the HOSTS file
3. http://everythingisnt.com/hosts.html also have installer but it's been months since this updated so use the above instead of this.

Without installer
1. If you will use the Hosts file from:
http://hosts-file.net/?s=Download
http://mvps.org/winhelp2002/hosts.htm

Unzip hosts.zip in temporary folder. Copy the HOSTS file in C:\Windows\System32\Drivers\etc folder
Overwrite the existing HOSTS file

2. If you will use the Hosts file from:
http://everythingisnt.com/hosts
http://www.malwaredomainlist.com/hostslist/hosts.txt
or from http://pgl.yoyo.org
Select "All" to copy the content then use notepad to save it in C:\Windows\System32\Drivers\etc as HOSTS (no file extension). If is stored as .txt file, rename it by deleting the file extension .txt


polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

mika-nikola

  • Guest
Re: Trojan-gen and others in Adobe reader 9
« Reply #22 on: September 05, 2008, 11:44:40 PM »
I have check my firewall on windows was off so I put it on and with that I have PC Tools Firewall Plus.

I have download--

There is also HOSTS file installer:
1. http://hosts-file.net/?s=Download - just download the hpHosts-Setup-Win32.exe


-- this HOSTS file and I install him.

So what should I do now with that?

mika-nikola

  • Guest
Re: Trojan-gen and others in Adobe reader 9
« Reply #23 on: September 05, 2008, 11:54:56 PM »
Do I need to do with my computer  System Restore Point?

Would that erase anything from my computer like new programs install or this viruses from the avast chest?

And do I need to install Ad-Aware , Spybot S&D,  ATF Cleaner?

Because now I have on my computer  Avast Home, PC Tools TreathFire and Firewall Plus, CC Cleaner and HOSTS file.
« Last Edit: September 06, 2008, 12:04:25 AM by mika-nikola »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33986
  • malware fighter
Re: Trojan-gen and others in Adobe reader 9
« Reply #24 on: September 06, 2008, 12:22:39 AM »
Hi mika-nikola,

System restore is disabled when you are afraid that the system will restore the malware, after the computer is clean you can re-install system restore again.
Going back to a previous system restore point is only advisable if there is no other way of going to a point where your system was clean or workable. N.B. - you will loose things that you have installed since this point was made, if you have a new systuation where you later want to go back to you can set a new system restore point.
System Restore should only be used after trying less comprehensive methods of troubleshooting. System Restore changes many files and registry entries, and in some cases might replace more files than you want restored. So when I first run into a computer problem, I reboot my computer. I'm still amazed at how often a problem is solved by using this simple technique. Or, if your computer won't start in normal mode, reboot your computer, press F8 during the boot process, use the arrow keys to highlight Last Known Good Configuration, and then press ENTER. But that is a last resort,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

mika-nikola

  • Guest
Re: Trojan-gen and others in Adobe reader 9
« Reply #25 on: September 06, 2008, 12:40:10 AM »
I have download and install HOSTS file.

Now what should I do with him or he is doing all work by him self?

And I need answer on this ;

And do I need to install Ad-Aware , Spybot S&D,  ATF Cleaner?

Because now I have on my computer  Avast Home, PC Tools TreathFire and Firewall Plus, CC Cleaner and HOSTS file.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33986
  • malware fighter
Re: Trojan-gen and others in Adobe reader 9
« Reply #26 on: September 06, 2008, 01:25:29 AM »
Hi mika-nikola,

The hostfile will take care after itself, it will block your computer to make contact to what is mentioned in there. So when I have there 127.0.0.1 http://forum.avast.com/ I can no longer come to this forum, because the computer has replaced it with 127.0.0.1 and that is this computer. Mind you that some malware is able to change what is in a hostfile e.g. then you can no longer contact security sites like avast.  A program like SpywareBlaster will protect your hostfile from being changed. Inside there go to Tools and there to Hosts safe, this tool will encrypt and protect your host file, you just have downloaded.
SpywareBlaster can be downloaded here: http://www.javacoolsoftware.com/sbdownload.html
ATF cleaner is just cleaning up some other files like CCleaner, so it is good to download from here:
http://majorgeeks.com/downloadget.php?id=4949&file=15&evp=72ef5a5e927b2276e6a5bc34c89d005a

polonus
« Last Edit: September 06, 2008, 01:27:09 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

wyrmrider

  • Guest
Re: Trojan-gen and others in Adobe reader 9
« Reply #27 on: September 06, 2008, 05:46:01 AM »
Host file mandatory  did you get it installed
Ad-aware- very optional
I like Spybot, update every Wednesday right after you update Hosts, re immunize
if you use IE install the SD-Helper option
Spyware Blaster- big yes
run secunia software inspector and get everything upto date
when you are clean
defrag
set restore point

mika-nikola

  • Guest
Re: Trojan-gen and others in Adobe reader 9
« Reply #28 on: September 06, 2008, 10:28:37 AM »
I have download and install  Spyware Blaster also ATF Cleaner and Ad-aware.

And I also have HOSTS file, PC Tools Firewall Plus and PC Tools ThreatFire, CC Cleaner and Avast Home.

Do I still need to download Spybot?

How can I update HOSTS file?

I don't know how to this

 

when you are clean
defrag
set restore point


mika-nikola

  • Guest
Re: Trojan-gen and others in Adobe reader 9
« Reply #29 on: September 06, 2008, 11:41:39 AM »
I have run Secunia again two minutes ago and report is this ;

Every thing is up to date.  But only for Macromedia Flash Player 6x   6.079.0 tells me that is not up to date. I have made update yesterday but still alert me for that.
 

First time when I run Secunia alerts me that my Windows, Adobe Flash Player and Macromedia Flash Player are without update. So I run update for each one.
Update for Adobe FP replace old Adobe FP immediately but  Macromedia FP it didn't. I have look in add/remove program and I don't have that program on my list only new Adobe Flash Player Plugin.


And I still need answer for previous post.

Please!