[Janisum]

Today I changed from wireless to broadband. My broadband provider offers (free) CA Suite Plus 2008 with antispam. I currently have McAfee but the version I have has no spam protection and I'd have to upgrade in order to have it. Now I'm a real confused novice.. Great! Huh???. Here's my issue. Before when I had the wireless, I found my computer slowing! down, popups but they'd dissappear, programs stopped responding, etc.. Isn't this a sign of a security issue? My RAM is fine and plenty of space left. Now that the broadband's installed, I haven't been having this problem, at least not so far. Could these issues have been w/ the wireless only? And how does antispyware differ from spam protection?

Aside from that, can you help me understand security w/ the fact I have Microsoft firewall and the Mcafee virus protection. Do you feel I'd be better to take out McAfee and install the CA since it has the anti spyware? And can I have 2 firewalls or will they conflict? It might help you to know that I need to modify my System Info. but I am running XP w/ I.E. 7.0, SP3. It may take me awhile to make these changes in order to better help anyone who wants to answer this. I'll get on it now. Thanks in advance.....

[Flashorn]

Hey Janisum !!



Welcome to PCWorld Community !



You have quite a few questions but, we will try and satisfy you thurst for knowledge .

First , What kind of pop-ups were you getting (what they said) . It might be malware

or it might be the fact that you have two firewalls active (McAfee and Windows Firewall).

On these forums we do not advocate Suites from a single firm but, a Layered Approach.

In your case , until you get familiar and comfortable with this way of thinking, you might

want to install CA Suite Plus 2008. I have to tell you that, Both CA and McAfee are

resource hogs meaning that they tend to take allot of power to run.



IF you are to Uninstall the McAfee suite , you Will need their Removal Tool.You can find it

here McAfee Removal Tool . Click on the blue link.

Once on the site of MajorGeeks , click on the "Author's Site" under Downloads. All instructions are on same page.



Spam is a form of agressive advertising . You would be receiving allot of e-mails that you know

nothing about and asking you to visit sites that could possibly be infected. Spam is one mean

by which people get infected by clicking on links received in E-Mails. NEVER open an e-mail

that you cannot recognise or validate the origine. AntiSpam will recognise , up to a certain point,

addresses of spam being sent to your inbox and Block these e-mails from being displayed

in your main e-mail box .



AntiSpyware is a protection against SPYWARE that you would encounter in your daily surfing of the web.

This protection will stop, up to a certain point and depending on the effectiveness of the antispyware app.,

spyware from installing on your PC and wreaking havoc.

This is why we have AntiSpyware protection ALONG SIDE of AntiViruse applications. The codes in which

both are written will differ and will also target different areas of your PC.



In the mean time, PLZ turn OFF the Windows Firewall as you should already have the McAfee running.

Two Firewalls Will Conflict. You can Verify this by going in the McAfee's main screen and making sure that

the firewall is Active.



When you are done with your System info. , post back with the full details of your PC . (Minus serial numbers).

We can then talk about what is still confusing you .



FLASHORN. !http://forums.pcworld.com/legacyimages/
1!

[SpiritWind]

Hi :

Best to AVOID any security, even if "Free", "offered" by an Internet Service Provider, as it is

done to keep you from switching Providers . Another reason to do so is because they are

"offering" a "Suite", where most of us on these Forums prefer the "layered" Approach to

security, getting a very good program, possibly FREE, in EACH malware-fighting "category".

Flashorn has provided a degree of understanding about this; you also might want to check

what I have written at forums.pcworld.com/docs/DOC-1141|d-1141 .

So I recommend you do NOT use the "CA Suite Plus 2008" and to check for possible

security "Issues", that you use the FREE version of Malwarebytes' Anti-Malware from

[http://www.malwarebytes.org/mbam.php] AND/OR the FREE Version of

"SUPERAntiSpyware" from [http://www.superantispyware.com/] .

Eventually you should seriously consider "replacing" McAfee with a good antiVIRUS

program, such as the FREE Avast Antivirus Home Edition ( [http://www.avast.com/] );

very good Introductory Info is at [http://www.avast.com/eng/avast4home.html] .

The next area of concern should be getting a good software firewall ; the Best

Introductory Info on this is at [http://www.matousec.com/info/articles/introduction-firewall-leak-testing.php] .

[Janisum]

I just wanted to add that I have a good version of McAfee, or at least I believe it is. I paid for the download. What a dummy huh???? Would you still suggest I take it out and use the Avast? I have used that before and did like it. I have 38 processes running. And 4 of this= ( 5svchost.exe) 1 local and 2 network system. Would I want to take any of those out? My performance when I brought up task manager shows 105534 handles, 500 threads, 38 processes. Does this really tell me anything of importance? This is all so confusing. Just when I think I have a handle on my system, I find something new. Thanks to both of you who kindly gave me great help..

[SpiritWind]

Hi :



People make decisions on choosing an antiVIRUS program based on the Info available

to them ; few are aware of the Results done by INDEPENDENT RESEARCHERS, such as

www.av-comparatives.org/ . When going to this Site and clicking on "Comparatives" in

the left-side menu, then selecting the lastest "Retrospective/ProActive Test" ( Nov 2008 )

would reveal that McAfee had a relatively poor 29%, whereas the FREE Avast had 39% ;

seems Avast has a better performance than McAfee !? Another "Factor" that is seldom

considered when selecting an antiVIRUS program is the QUALITY of Support, IF a

"problem" arises ; McAfee has a reputation of less than good Support, where Avast has

EXCELLENT Online Support Forums ( [http://forum.avast.com/] ) . McAfee has a reputation

of using an excessive amount of "Resources" of a computer, putting "stress" on that

computer, where other antivirus programs other than Norton or Trend Micro use less of

a computer's "Resources" .

38 "Processes" "running" is NOT an excessive amount, though IF you uninstalled McAfee

and used a different antiVIRUS program, the amount MAY go down . SHOULD NEVER

"mess" around with "svchost.exe" UNLESS you are under the Guidance of a "Malware

Removal Specialist"; currently, there is no such "Specialist" on the PCWorld Forums .



Did you run the Scans of the Malwarebytes Anti-Malware or "SUPERAntiSpyware"

program(s) that I recommended ?

[Janisum]

Spiritwind- I did download and install the Malwarebytes and did a scan which showed 1 infection = Vendor: AdwareMyWeb search, Catagory: registry key, Items: HKEYCURRENT_USERSOFTWAREMICRO. Can you give me alittle piece of advice? I didn't have it removed. Thanks

[Flashorn]

Hey Janisum !



It's not given to everyone to like or understand the intricacies of the electronic world.

That 's why there are forums like these, to help whom ever wants to be helped.



Now, if you could re-run the quick scan from MalwareBytes AntiMalware and when it

asks what to do with the infected files, please say yes to "quarantine and delete" . the

MyWebSearch adware should not take your PC as it's home. Once you have said yes

to "quarantine and delete" , a Log File should open up in Notepad. PLZ COPY & PASTE

the contents of the notepad text in your next post. Here is how to get the Log file:



From the main screen of MalwareBytes , you will see a LOGS tab on the top potion of

the Application. Click on that tab. You will now see a few logs in a box . Double Click

on the log that corresponds with the date that you first scanned your PC. A notepad

text will open . Copy & Paste the content of the notepad file in your next post :





This is what your log text will look like :

!http://forums.pcworld.com/legacyimages/
1!



Now, paste in your next post. IF you have any concerns on how to go about

any of these steps . Stop and post back to ask and we will explain.



FLASHORN. !http://forums.pcworld.com/legacyimages/
1!

[Janisum]

My system froze up when I first started the scan and had to reboot. I came back up really slow. Ran the scan and this is the log. I don't have the very first one I did last night. It wasn't in the log. I did guarantine and delete the infection. I saved the log to file also incase it got lost. Just being overly protective and allowing the computer to manipulate me, I guess. What would be the next step? Cleaning up after this? I do want to get rid of McAfee for it's resource hogging. I have had Avast before so will go back to that. I'll use the link provided to me in my post to delete McAfee. Steps to changing virus protection? Install or delete first? The infection is in registry key (?) what's up with that? I sure have you working, don't I ?. I really appreciate the help. Really.... After posting my replies, I have a continuous reloading of the page where it tells me the status of my post. It did this last night too. At least 6 t o7 x's before I'd change to another page. Is this normal???




Malwarebytes' Anti-Malware 1.33
Database version: 1682
Windows 5.1.2600 Service Pack 3

1/23/2009 1:19:40 PM
mbam-log-2009-01-23 (13-19-40).txt

Scan type: Quick Scan
Objects scanned: 53627
Time elapsed: 5 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEYCURRENTUSERSOFTWAREMicrosoftWindowsCurrentVersionExtStats{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
Message was edited by: Janisum

[SpiritWind]

Hi :

As you mentioned, not much showing in the malwarebytes scan Results, so will assume

you generally are malware-free . To "switch" from McAfee to Avast , do :

1) DOWNLOAD ( but do NOT "Install" ) from www.avast.com/eng/avast[u4[/u]home.html] .

2) Go To "Add or Remove Programs" section of your computer and "Uninstall" McAfee

3) Run the "McAfee Removal Tool" as mentioned by Flashorn .

4) Go OFF the Internet

5) Install Avast

6) Go back on the Internet and Update Avast ; it would be wise to read through the Info

at [http://www.avast.com/eng/faq-avast-4-home-professional.html] .

7) Configure the Avast "Settings" after RIGHT-clicking on the "a" icon in your System

Tray and selecting "Program Settings"; go through the Menu and make your Choices .

NOTE : Best to "Merge" the 2 Avast icons and no need to "generate" the "VRDB" .

[Janisum]

Your theory on layering was helpful which now brings me to more questions.. I installed Glary Utilities a week ago and ran it last night after finding my infection but it still was found this morning. Could this Glary be bad since I started to notice problems after installing it. I never open any attachments from anyone I don't know. I do however, sometimes open the email but I don't go any further than that. I get alot of done, but w/errors on page . Now I can't get out of this bold text !!!!

I didn't see any mention of microsoft's firewall. Do you not recommend that? I am wanting to try and follow your path of layering. But I need to work out what bugs/errors I may have now first. I also find when my puter' is slow to respond I have Javascript in the btm. left corner of page. Does this tell you anything? I'm trying to find anything helpful. Wish I could get rid of this bold text but ah well.. that's a minute issue right now.. I have Mozilla Firefox installed too and I don't recall doing that myself. I know these boards are to help others but I somehow feel that alot of my problems could be fixed if I'd just take the time and figure them out but I'd be figuring all the time and not get anything else done.!!! I really appreciate the help I get here but I can't take up permanent residency. You people have so many posts you probably want to address and are tired of seeing mine. Anyway....Thanks alot!!

[Flashorn]

Hey Janisum!!



I guess, from your last post that, you are using "Internet Explorer 6 or 7 ? (IE 6 or 7) It would help if

you would post the PC's make and name or number ( NOT the serial #). It would give us more to go

on and maybe help in solving some of your issues. Don't worry about how many posts there are.

We have a number of dedicated regular members that are just waiting help out. In the meantime

gather the info. I asked for :

Make of PC (HP, Dell,Toshiba,Sony ect....)


Model number and or name

CPU core ( if you know)

Memory ( How much)

Hard Drive ( How big and how full)



The error or errors you see at the bottom of the browser, do you have them also on other sites.

Internet Explorer is known for it's bugs and this new platform at PCWorld does not help

matters at all. Since you have Firefox already installed on your PC , why not give it a try

and see if it gives you the same errors and sluggishness.



Could you also download and install this little application from Secunia. It will help with

keeping your applications up to date and help avoid being infected . Older programs are

vulnerable to exploits by malware. Secunia PSI . It is a FREE program.

It does not have run all the time. Only once a month to help with keeping all programs

up to date. If you have older programs that you prefer instead of the up-dated version then

just mark them accordingly in the PSI . I also keep a few older programs. There's nothing

wrong with that.



If you have questions on how too then , don't hesitate to ask.



FLASHORN. !http://forums.pcworld.com/legacyimages/
1!

[SpiritWind]

:D Hi :

Glary Utilities is something I definitely recommend NOT having on a computer; we have

had Posts on this Forum where people have had serious problems with this company .

IF at all possible, go into their program(s) and have it "reverse" whatever it has done .

Do not use their program(s); there are several companies who include a "registry

cleaner" in their programming, which is nothing but potential, big time problems . For

some Expert Opinion on "Registry Cleaner(s)", read through the Thread at

aumha.net/viewtopic.php?t=28099 . IF interested in having an "Evaluation" of WHAT

you have on your computer, Post the "Log" from the "Uninstall Manager" section of the

FREE "HijackThis" program, most easily downloaded from

[http://www.filehippo.com/download_hijackthis] . After installing this program, click the

"Open the Misc Tools section" button, then click the "Open Uninstall Manager" button .

A "List" should appear, which you then "copy, then paste" in your next Reply .

Microsoft's "Firewall" is NOT considered to be very good ; Best to get another firewall,

then "disable" the Microsoft "One" .

[Janisum]

Hey, "My helpers",
I hope to have all the info. to help you or whoever may answer. This is what I rounded up.

* Sony PCV-RS220(UC), Intel pentium 4 CPU, 2.53 GHz, 2546 MHz, ACPI BIOS Rev.1
* 768 RAM, Total GB 106.78 & 99.36 Free. Disk C: 7.61 GB free & D: 91.7 GB free
* OP Sys., XP- home, version 5.1, service pack 3 ( Do I need this SP3? I'm not doing any real work, mainly emails, browsing and some sales" I just installed it when it became available)
* My modem model is Agere Sys. AC 97' ( This has remained the same throughout my transition from Wireless to Broadband. Since I have a different modem, shouldn't this change? or am I just being my typical blonde Bohemia self?
* Port Com 3, Max prt speed 115200.
* I have 2 network adapters, 1395 Net Adapter and Realtek### fast ethernet. Is this typical to have?
* I have never owned a manual or a market system. A good friend made my 1st and he never gave me the startup or any program CD'S. I'd just call him over when I had problems. Another friend gave me this sony and the friend who gave me my 1st sys. installed all the programs for me but he keep the software and again, I have no manual or anything. This guy does have a masters in computer programming but my husband jealous ego put an end to that. So I am on my own, which is ok, He is from Iraq and had a of obsession with me. I always feared he could be tapping into my system. PARANOID? Please know I am, in no way, prejudice. So the system I have now is one that a another friend got from the federal government to help set up her business and with it having all the VAIO programs installed along with the WinXP, I'm twice as confused.. Oh no!!! This system info. says it has 768 MB and 512 KB, if this helps you any.?? Perhaps I've only confused you more. But I really hope I haven't. You've been so great to help me,,
* In the meantime I am going to follow all the instructions given to me and then do a syst. check again. Please advise if you want.
* Peacefully, Slamina
Message was edited by: Janisum I forgot to add that I do use I.E. 7. I want to mention that after I posted this message before editing, the next pg. that reminds me the "message was posted but short delay in viewing,", kept reloading again, about 6 times before I changed pages. While I was writing this message and before editing I did get the error, "done but w/ errors" in the btm. L/ corner of taskbar but when done posting it and now, I am getting the "done" message.

[Flashorn]

Hey Slamina !!



OK, First , in IE 7 , the message at the bottom left hand corner , does it look like this :

!http://forums.pcworld.com/legacyimages/
1!



IF it does then , don't worry about it ,as you can see I get the same message when I use

IE7. IF you "Double Click" on the Yellow triangle , this is the error message that you will get





As you can see in this message box , It says : URL : and then the address of PCWorld .

It also states that there is an error in the Java Script which is not rendered properly.

This seems to be normal for IE7 as we've had this discussion here before.



NOW, if you were to use Firefox , which you said was already on your PC , then, this is

what you would get :

!http://forums.pcworld.com/legacyimages/
1!



As you can see , in Firefox, Java is rendering the pages properly. NO errors , only a DONE notif.

So much for your problem with IE7. IT IS NORMAL.



If you find that your PC is a little slow then , How often do you "Defrag" the Hard Drive. This , if not

done on a regular basis. (once a month) will slow down the PC because it has to find the info.

that you requested which isscattered all over the hard drive. To put every bit of info. back in its place

we "Defrag" every so often to speed up the process. To do a good job of Defragging the hard drive

I would suggest you download and run this defrag utility. It will take some time to finish and not very pretty

to look at but, does a better job of defragging than the utility provided by XP.

JKDefrag by Jeroen Kessels . Once on the site , download this one:
|JkDefrag-3.36.zip|Download for Windows 2000/2003/XP/Vista/2008|479kb|


This utility does NOT need to installed. It a .exe which you simply Double Click on and the process will start

automatically. You will have to Unzip first then choose where you want to save the unzipped file.

Once unzipped , you simply doouble click on the .exe .



How often do you clean out the Temps files on your PC. This is another way of speeding up your PC . By

deleting the Temps files on the hard drive , you will make it faster.To do this , I have another little application

which does not require you to install. Simply Double Click on the .exe and run the program. This will take only

a few seconds to do. ATF Cleaner by Atribune .

BUT first , you should clean it out with the internal cleaner that XP provides. To do this:

Go to : Start > All Programs > Accessories > System Tools > Disk Cleanup. Double Click on the Disk Cleanup

and once it is done this is what you will see :

!http://forums.pcworld.com/legacyimages/
1!



Click on the OK button , accept the prompt to delete the excess files and your done.

Now , you can use the ATF Cleaner to finish the Cleanup.



Do these little steps to help with the sluggishness and then post back and tell us if

you see a difference. Also ,if you could tell us what you have done so far with the security on your

PC (eg. take out McAfee or not) . If not then, either SpiritWind or I will guide you .

BUT plz , do those steps before and use Firefox to see if you get the same errors. I don't.



FLASHORN . !http://forums.pcworld.com/legacyimages/
1!



As far as the rest of your PC , the specs look OK for what you are doing with it. Not too much memory

installed but you should be OK.

[Janisum]

You two have been simply marvoulous in working with me. I just dropped in to let you know I haven't forgotten any of this or you. I've been busy with other issues and had to put my puter' aside for now. I'll be back. I'm keeping this open and not answered only because I haven't done all the steps yet. Peacefully!!!!!!!!

[coastie65]

Hi Slamina, As for your memory, It would be good to up grade it. I looked up the motherboard and you can run 2 Gb of PC-4200 memory. These are 400 Mhz DDR Dual Channel Modules, with 1 Gb on each one. Thjis from all indications is the maximum you can go with the memory, but will be plenty. It will also help your performance as well. coastie65

[Janisum]

Thanks for your feedback and for looking up my motherboard on the web and all. Now I have a really naive question for you. I'm not familiar with the technicalities of puters'. Is this something I can do from a website? Or do I need to buy more memory? Geesh!!!! Better get my PC for Dummies book back out..

[Janisum]

Guess I'll reply to myself since so many of you have helped me. I wanted to peek in again and let a few of you who have taken alot of time with me, to asure you I'll be back.. Oh horrah!!! eh? If anyone of you have not yet been blessed w/ the wonderful virus, "Shingles", I suggest talking to your Dr. about a possible immunization injection. I'll be back when I'm better....

[coastie65]

Hi, Sorry to hear about the bout with Shingles. I haven't had it, but know that it isn't pleasant. I didn't know there was an immunization for it either. Take care. coastie