What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] got rid of fake security updates...now running really slow

15 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16 last edited
Hi dwoods912,

lot of things were changed before…windows looked like older version…different colors, etc.

Is that still a problem or have they reverted back to normal?

You ran MBAM, I'd like to see the log.

Open MBAM
  • Click on the Logs tab
  • Locate the most recent log and click on it
  • Click open
Please post the contents of the notepad that opens.


Unless XXXXX is a legitamate user name, it going to be difficult to remove file/folders if we need to.

You have an odd named folder,igpayd. Unless you recognize this folder we will see if we can get a peek inside.


Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
  • Right click SystemLook.exe and select "Run as Administrator"to run it.
  • Copy the content of the following codebox into the main textfield
  • Do not copy the word CODE , please note the script starts with the :
    :dir
%USERPROFILE%\AppData\Local\igpayd
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt


Please post back with
  • MBAM log
  • SystemLook log
We'll take it from there.

Thanks
Post #17
The settings were changed after a windows update, not sure if it was a legit update but I changed them back. MBAM took forever to run…didn't finish the scan. On reboot I got msg that windows blocked MBAM from running on start-up not getting that msg anymore igpayd was hopefully removed by MBAM here's the system look scan SystemLook v1.0 by jpshortstuff (29.08.09) Log created at 15:03 on 16/01/2010 by ****** (Administrator - Elevation successful) ========== dir ========== C:\Users\*****\AppData\Local\igpayd - Parameters: "(none)" —Files— None found. —Folders— None found. -=End Of File=- Malwarebytes' Anti-Malware 1.42 Database version: 3372 Windows 6.0.6001 Service Pack 1 Internet Explorer 7.0.6001.18000 1/6/2010 10:46:50 PM mbam-log-2010-01-06 (22-46-50).txt Scan type: Full Scan (C:\|) Objects scanned: 238209 Time elapsed: 109 hour(s), 12 minute(s), 21 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 1 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 2 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\fxwaedpw (Spyware.Passwords) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Users\******\AppData\Local\igpayd\snlysysguard.exe (Spyware.Passwords) -> Quarantined and deleted successfully. C:\Users\*****\AppData\Local\Temp\9260.exe (Spyware.Passwords) -> Quarantined and deleted successfully. The scan was not completed but after 109 hours I couldn't wait any longer
Post #19
Hi dwood912

| 231.42 Gb Total Space | 108.11 Gb Free Space |

That would indicate that there was just over 100GB to scan. MBAM should not have taken that long.

When you ran MBAM, was it by right click and "Run as Administrator"?

That folder was created on Dec 25. MBAm removed what was in the folder. We will take care of the folder later.

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs
  • Right click on ComboFix.exe, click Run as Administrator & follow the prompts.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Please post back with the combofix log.

Thanks
Post #20
ComboFix 10-01-16.02 - ******* 01/16/2010 16:47:08.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.1917.1059 [GMT -5:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: McAfee VirusScan *On-access scanning disabled* (Outdated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
SP: McAfee VirusScan *disabled* (Outdated) {C78B3C70-4777-4742-BB91-9D615CC575E6}
SP: Spyware Doctor *disabled* (Updated) {1C3EDD79-273E-46ac-99F8-EFA9E7CBC301}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-1893239248-1700074592-3436296051-500
c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\$recycle.bin\S-1-5-21-2875678832-3673790331-1912359274-500
c:\$recycle.bin\S-1-5-21-526720123-3731369257-2385391353-500
c:\programdata\ntuser.dat{0a1e0be4-0416-11dc-9bb7-0016d4f84854}.TMContainer00000000000000000001.regtrans-ms
c:\programdata\ntuser.dat{0a1e0bf4-0416-11dc-9bb7-0016d4f84854}.TMContainer00000000000000000001.regtrans-ms
c:\users\DANIEL~1\AppData\Local\Temp\ppcrlui_4488_2
c:\users\*******\AppData\Local\Temp\ppcrlui_4488_2
c:\windows\system32\Thumbs.db

.
((((((((((((((((((((((((( Files Created from 2009-12-16 to 2010-01-16 )))))))))))))))))))))))))))))))
.

2010-01-16 22:01 . 2010-01-16 22:02 ——– d—–w- c:\users\*******\AppData\Local\temp
2010-01-16 22:01 . 2010-01-16 22:01 ——– d—–w- c:\users\Default\AppData\Local\temp
2010-01-14 17:42 . 2009-10-19 14:42 156672 —-a-w- c:\windows\system32\t2embed.dll
2010-01-14 17:42 . 2009-10-19 14:37 72704 —-a-w- c:\windows\system32\fontsub.dll
2010-01-14 17:42 . 2009-10-19 14:39 24064 —-a-w- c:\windows\system32\lpk.dll
2010-01-14 17:42 . 2009-10-19 14:37 10240 —-a-w- c:\windows\system32\dciman32.dll
2010-01-14 17:42 . 2009-10-19 11:45 289792 —-a-w- c:\windows\system32\atmfd.dll
2010-01-14 17:42 . 2009-10-19 14:36 34304 —-a-w- c:\windows\system32\atmlib.dll
2010-01-01 10:33 . 2010-01-01 10:33 ——– d—–w- c:\programdata\WindowsSearch
2009-12-30 14:00 . 2009-12-30 14:00 ——– d—–w- C:\PerfLogs
2009-12-30 12:26 . 2010-01-07 22:01 ——– d—–w- C:\5e458679a476cfb4e49c269a628439
2009-12-30 06:21 . 2009-12-30 06:21 ——– d—–w- c:\users\*******\AppData\Local\Threat Expert
2009-12-26 03:28 . 2010-01-15 17:56 ——– d—–w- c:\users\*******\AppData\Local\igpayd

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-16 21:08 . 2007-09-25 23:35 ——– d—–w- c:\users\*******\AppData\Roaming\LimeWire
2010-01-15 17:58 . 2006-11-02 11:18 ——– d—–w- c:\program files\Windows Mail
2010-01-14 19:27 . 2008-12-25 17:34 ——– d—–w- c:\programdata\Skype
2010-01-07 22:01 . 2007-06-27 20:51 ——– d—–w- c:\program files\Apoint2K
2010-01-07 21:57 . 2006-11-02 12:37 ——– d—–w- c:\program files\Windows Sidebar
2010-01-07 21:57 . 2006-11-02 12:37 ——– d—–w- c:\program files\Windows Photo Gallery
2009-12-20 09:59 . 2007-05-17 02:02 ——– d—–w- c:\program files\Google
2009-12-16 08:27 . 2009-12-16 08:27 ——– d—–w- c:\users\*******\AppData\Roaming\Malwarebytes
2009-12-16 08:27 . 2009-12-16 08:26 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2009-12-16 08:26 . 2009-12-16 08:26 ——– d—–w- c:\programdata\Malwarebytes
2009-12-14 22:06 . 2007-05-17 00:13 ——– d–h–w- c:\program files\InstallShield Installation Information
2009-12-14 22:06 . 2007-05-17 01:55 ——– d—–w- c:\programdata\Napster
2009-12-09 17:26 . 2007-10-02 08:45 37720 —-a-w- c:\users\*******\AppData\Roaming\wklnhst.dat
2009-12-08 00:17 . 2009-10-10 16:12 ——– d—–w- c:\users\*******\AppData\Roaming\uTorrent
2009-12-03 21:14 . 2009-12-16 08:27 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 21:13 . 2009-12-16 08:26 19160 —-a-w- c:\windows\system32\drivers\mbam.sys
2009-11-28 07:44 . 2009-11-28 07:44 484976 —-a-w- c:\programdata\Google\Google Toolbar\Update\gtb9D58.tmp.exe
2009-11-09 13:34 . 2009-12-10 08:08 24064 —-a-w- c:\windows\system32\nshhttp.dll
2009-11-09 13:30 . 2009-12-10 08:08 31232 —-a-w- c:\windows\system32\httpapi.dll
2009-11-09 11:17 . 2009-12-10 08:08 396800 —-a-w- c:\windows\system32\drivers\http.sys
2009-10-29 07:59 . 2009-11-25 08:04 2048 —-a-w- c:\windows\system32\tzres.dll
2009-10-27 15:05 . 2009-12-09 17:17 832512 —-a-w- c:\windows\system32\wininet.dll
2009-10-27 15:01 . 2009-12-09 17:17 56320 —-a-w- c:\windows\system32\iesetup.dll
2009-10-27 15:01 . 2009-12-09 17:17 78336 —-a-w- c:\windows\system32\ieencode.dll
2009-10-27 15:01 . 2009-12-09 17:17 52736 —-a-w- c:\windows\AppPatch\iebrshim.dll
2009-10-27 14:59 . 2009-12-09 17:17 72704 —-a-w- c:\windows\system32\admparse.dll
2009-10-27 12:27 . 2009-12-09 17:17 26624 —-a-w- c:\windows\system32\ieUnatt.exe
2009-10-27 10:56 . 2009-12-09 17:17 48128 —-a-w- c:\windows\system32\mshtmler.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe" [2007-01-22 417792]
"AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2007-03-01 2321600]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-14 39408]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HWSetup"="\HWSetup.exe hwSetUP" [X]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-04-10 413696]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2006-09-11 180224]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2007-09-25 1006264]
"RtHDVCpl"="RtHDVCpl.exe" [2007-04-25 4444160]
"NDSTray.exe"="NDSTray.exe" [BU]
"SVPWUTIL"="c:\program files\TOSHIBA\Utilities\SVPWUTIL.exe" [2006-03-23 438272]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2007-03-29 411192]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2006-12-07 55416]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2007-03-22 448632]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2007-04-27 538744]
"KeNotify"="c:\program files\TOSHIBA\Utilities\KeNotify.exe" [2006-11-07 34352]
"MskAgentexe"="c:\program files\McAfee\MSK\MskAgent.exe" [2007-01-17 152144]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-05-21 1862144]
"SiteAdvisor"="c:\program files\SiteAdvisor\6261\SiteAdv.exe" [2006-10-18 35928]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2007-12-11 286720]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2007-12-11 267048]
"mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2007-08-04 582992]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-12 39792]

c:\users\*******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/11/2009 4:47 PM 135664]
.
Contents of the 'Scheduled Tasks' folder

2010-01-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-11 21:46]

2010-01-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-11 21:46]

2009-12-15 c:\windows\Tasks\McDefragTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2008-06-06 18:32]

2009-11-01 c:\windows\Tasks\McQcTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2008-06-06 18:32]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - c:\program files\AskBarDis\bar\bin\askBar.dll



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-16 17:02
Windows 6.0.6000 NTFS

scanning hidden processes …

scanning hidden autostart entries …

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
TOSCDSPD = c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe?/i????????g??????~?@?~?x?~???~???

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flac\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pls\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.spx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="YMP.Media"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
Completion time: 2010-01-16 17:09:03
ComboFix-quarantined-files.txt 2010-01-16 22:08

Pre-Run: 114,212,093,952 bytes free
Post-Run: 114,933,321,728 bytes free

- - End Of File - - C5CA2DDB10D8C87CDFEFD8D95B1D792D
Post #21
Hi dwoods912,

Not much showing in this log. Computer any better?

AV: McAfee VirusScan *On-access scanning disabled* (Outdated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
SP: McAfee VirusScan *disabled* (Outdated) {C78B3C70-4777-4742-BB91-9D615CC575E6}
SP: Spyware Doctor *disabled* (Updated) {1C3EDD79-273E-46ac-99F8-EFA9E7CBC301}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46


This shows Spyware Doctor as installed. It also shows your anti virus program as out of date.
Post #24
Hi dwoods912,

Okay we'll clean up our tools

From your desktop, please delete
  • any notepads/logs that we created
  • merg.exe (renamed GMER)
  • GMER.zip
  • SystemLook.exe

From within windows explorer you can delete this folder

C:\Users\*****\AppData\Local\igpayd


Make sure Spyware Doctor is indeed uninstalled as it sill shows as installed.


Next

Click the Start button (lower left of your screen), click Run. Copy and paste the following line into the run box and click OK

Combofix /uninstall


Open OTL then click the Clean Up button. You may get prompted by your firewall that OTL wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will do some clean up tasks and delete some of the tools you have downloaded plus itself.

I suggest you keep MBAM. Keep MBAM updated and use it regularly.


Updates and upgrades

Your logs indicate you have Java™ SE Runtime Environment 6 installed which is out of date.

Open Add/Remove programs and check to see which version of Java is currently installed. If it's less than Java™ 6 Update 18, please uninstall it.

To get the newest version follow these instructions:

  • Go to http://java.sun.com/javase/downloads/index.jsp
  • Scroll down to "Java Runtime Environment (JRE) 6 Update 18
  • Click the download button on the right.
If Information Bar pop-ups up, right-click on it and say it's OK to display the blocked content.
  • Select the platform (Windows, in your case), mutli language.
  • Accept the license agreement, click continue.
You do not have to install the Java Web Start ActiveX Control
  • Scroll down and click on Windows Offline Installation,
  • Save the file jre-6u18-windows-i586-p.exe to your desktop;
Do not select Run . Do not install it yet.

When the download is complete, close your browser.

  • Right click on the saved file ( jre-6u18-windows-i586-p.exe) and click "run as Administrator" to install the update.
  • Delete the downloaded installation file after completing the above procedure and reboot if not prompted to do so.


Some Recommendations and prevention tips

Basic security consists of 1 antivirus program, 1 resident antispyware program, 1 on demand antispyware program and a firewall. You have those.


You should also use Spyware Blaster to help immunize your computer.

- SpywareBlaster will add a large list of programs and sites into your Internet Explorer
settings that will protect you from running and downloading known malicious programs.

OR

A guide to understanding and using the hosts file.

Learn how your Hosts file can protect you and how you can protect it.
Besides the Hosts file information, there are links to a very good updated hosts file, a host file manager. and some programs that can protect your hosts file.
HOSTS

Please read the info on disabling the DNS Client before installing a custom hosts file.

See extra note for Visa users



-Secure your Internet Explorer

From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
  • Change the Download signed ActiveX controls to Prompt
  • Change the Download unsigned ActiveX controls to Disable
  • Change the Initialize and script ActiveX controls not marked as safe to Disable
  • Change the Installation of desktop items to Prompt
  • Change the Launching programs and files in an IFRAME to Prompt
  • Change the Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.


- Keeping your Windows up-to-date is crucial to your computer's security. Please go to the Windows Update Site (using Internet Explorer) and download and install all critical updates on a regular basis


- Ensure that Automatic Update is turned on so you get all the latest patches.
Click start, control panel, click Security Center.


- Keep your antivirus program updated, as well as any other security programs you have.


- You may also want to read this article By Tony Klein
http://www.freedomlist.com/forum/viewtopic.php?t=22879

We will keep this thread open for a couple of days. Please post back if you have any problems or questions. Please post back when you have finished so this thread can be marked "Resolved".

Take care
Post #25
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI