Vista - General safety issue.

Hello dear members,

When I installed my computer I found the standard Windows firewall in Vista
premium. I trusted this and did not want to slow down the system by adding an
other firewall. Besides, this policy also was discouraged by the helpfiles
that came with the system. Virusprotection was not done by the system, so
advisable to install a virusprotection tool. I read a lot on the net on that
item and finally installed Avast antivirus.

So far so good. Had no troubles from oktober 07 till a week ago. Than I
decided to destall Avast and to install One Live one care. The critics did
not take me to this. But I think it is a good policy to have the safety
issues in the same hand as the system resources are. I take another step and
expect the safety cause covered in the system itself. Sell a new car without
safety features!
I installed the One care, I did want to give it my support, I did not expect
it to be bad at all.

Microsoft also gave me a free trial for 90 days, fair enough, join the army
than. Quite a difference in feel, that is because Avast alway gave me a kind
of messenger report with a sliding window, which told me that an other part
of the virus library was loded online, faithfully from as soon as I came on
the internet. Beside of that it did its job silently, without a lot of noise.
That is what we expect computers to do and specially tasks on it, dedicated
to the system.

Until a couple of days ago, I could not install the Adobe flashplayer. The
loading routine caused the firewall problems, or the other way around. To be
short on this, I investigated tasks, processes and services. Also
investigated the ActiveX elements in the tasktray on the ie-browser. Also
came on the installed program list on the controlpanel.

The One Care green ball suits me, but I had expected deleted programs, realy
being deleted from now, why does Vista still leave anything there in that
list, yes it is a safety issue. Only when program does what it is asked to
do, it will be trustfull, can you come around another way?
Thought I realy had destalled the Itune software, when I found not, I could
not trust the window tool and did some deleting and stopping on services and
programs involved with those programs.
It did not work. Now there still are tasks that are scheduled and updates
are done, quite a world behind my computerscreen and keyboard that I thought
was long gone. How can this be under One Care? Why isn't this cleaning more
drasticly done. Why is this? I found this bonjour program and learned a bit
of what it stands for, it might be no virus but it is quite stubburn to get
lost. I deleted it several times, it still is there!
Thought I only installed a player, seems to be part of a strategy to intrude
on my computer and to have control over it. I think safety has a lot to do
with policy. Do the certification, link back to threads and threadrates on a
list, then automate to hit back on trespassing and hacking.

I came upon the site ProcessScanner and scanned my files, after I had
scanned it with the scanning tool that comes with One Care. One Care reported
all fine. ProcessScanner gave me an allert on

wininit.exe. It thougt me in its library and with me millions others, that
it is a trojan horse, an evil virus. ProcesScanner comes under label Uniblue,
it shows there to be a Microsoft certified partner (?)
So I again, I just scanned this file by One Care. No warnings whatsoever!
I roled back the system (fine feature!), but wininit.exe is still there.
There are some tools
offered on that Microsoft goldcertifed board, are they to be trusted. I read
a lot of registry cleaning, it is offered there aswell, do you advise me to
use it? I like the backup and restore part, but should that be this noisy. It
is easy and should be integrated in the maintenance part. Why is this not?

Enough for today, maby also for tomorrow.

Questions:
Does One Care do any virus scanning?
Does it have a frequent update on the virus library? How?
Is One Care right and isn't wininit.exe a trojan horse?
How come I cannot delete wininit.exe? I know, by the accounts and ownership
on the file, but who shuts me outoff permission on that file, though I have
administrator rights? Who is cheating here?
Should I destall One Care and go back to just the common firewall with a
scanner like Avast?
Does the maker of One care still do what is good for the product and the
customers?
--
Live gets better all the time!

Vista Firewall is fine! Uninstall one care.

http://www.avast.com/eng/download-avast-home.html

Above is a link to Avast Free 4 Home Anti-Virus
It is low resource using, free and Vista 32bit and 64bit compatible.

http://www.safer-networking.org/en/index.html

For Spyware removal, use the above link to “Spybot Search & Destroy 1.5.2�
Download it, install it, update it, immunize your system and scan your
System with it.

http://www.javacoolsoftware.com/

For a non-scanning, but running in the background, Program to STOP Spyware
being downloaded to your Computer, use SpywareBlaster 4, available at the
above link.

--
Mick Murphy - Qld - Australia


"Renee59" wrote:

Hello Nick and other Members,
I did a part of what you told me. I scanned my system with Spybot S&D.
Ofcourse I immunized first. And ran the scan then. The Spybot destroyed 3
cookies about tracking my system by mailsending my internet experience. (Not
to bad.) Furthermore it found three entries from ErrorSmart which were also
fixed. A month or so ago I tried to get rid of that program, did not
download, just ran the routine to report me the anomalies. (I had some
mediaplayer problems.)

The program also reported an abnormal entry in the registry for an IE
feature about a lockdown.The registry content showed false, I decided to
leave that.(?)

So no spy reported. Than I searched through the log files from OneCare. I
found a lot of blocked computer IP's. And on march 24, I found a lot of
removed infected files. Several viruses were reported, all trojan horses. The
reported ones were removed. After this I scanned in two more ways, but no
viruses were found anymore.

I reacted on the file wininit.exe to be a trojan horse, it is still in my
directory. Strange enough Spybot S&D responds like OneCare: No thread. I had
not yet gone this deep in OneCare, although I have big problems now (comes
more), I won on confidence about OneCare. It also has these features for
controling on backups and buildin restore. Optimalisation schedule-settings,
total control on malware. You notice, I still want to give it a try.

My system is easy now, the green ball is there, and in the auto-updatelist
are these newly downloaded packages on the defender-library. Quite
confidential. There is a tray in OneCare that shows me the defender, it is
inactive, not needed by OneCare. Switched off whenever I come back there.
Also in that tray I found the resident Spybot R&D, I switched his both
protection routines to off on startup. OneCare excepts it there set active,
but I switched it off there aswell. So OneCare has to do the job.

To save my system, stopped some ActiveX controls, specially those that are
reported not to be certified. ('Certified' maybe troubled by translation. I
am dutch, see.)
There are a triple ActiveX on Apple Inc. These support Quicktime. Coming to
the third to switch to inactive, did not believe my eyes when I saw one of
the others being switched to on again! It left me to choose two outof three
to switch off. After a restart the triple is inactive now.
I doubt about the state of the others I switched off:
XML DOM Document 4.0 - Microsoft Corporation ?
XML HTTP 4.0 - Microsoft Corporation ?
XSL Template 4.0 - Microsoft Corporation ?
isInstalled Class - (Sun Microsystems Inc.) ?
MusicManagerPlugin.MediaBar On - Demand Distribution ltd.
Free Threaded XML DOM Document - Microsoft Corporation
CLVistaGenie Control - Cyberlink
Sorry, to me they are all spy candidates, get that certificat!


Now the problem I came upon, mentioned already, but it became worse: I
cannot remove a program. None at all! In my user directory I come on maps
that were always mine. Not anymore! Went to the account program and found my
account set to common user. No administrator rights anymore! Tricked it,
saved! Came back: Common again! I once had my appartment door destroyed
comming home. I met the junk before in front of the building. That feeling!

Troubles apeared to be bad when I tried to remove Bonjour and Quicktime out
of the programlist. When I start the routine Vista comes telling me that it
gathers information and installs(!) the program. It persistendly ends with a
defender warning that an unknown program is to be executed. The program is
called 'remover' (in dutch). The defender offered me to execute, or to
cancel. In both ways the program is still there! Vista now tells me I have to
start the program as an administrator, remove doesn't start up at all!
Is there some help? I went through the helpfiles on accounts, all I get is a
headache! I get a bit of that stuff, but it is to scarey and tricky to be
sure I make good changes.

What should I do now? Realy need a professional now. Oh, I should be doing
fotographs and other lovely things. Mick, you like this, please?
Gratefull for your attention!
--
Live gets better all the time!


"Mick Murphy" wrote:

Hello Nick and other Members,
I did a part of what you told me. I scanned my system with Spybot S&D.
Ofcourse I immunized first. And ran the scan then. The Spybot destroyed 3
cookies about tracking my system by mailsending my internet experience. (Not
to bad.) Furthermore it found three entries from ErrorSmart which were also
fixed. A month or so ago I tried to get rid of that program, did not
download, just ran the routine to report me the anomalies. (I had some
mediaplayer problems.)

The program also reported an abnormal entry in the registry for an IE
feature about a lockdown.The registry content showed false, I decided to
leave that.(?)

So no spy reported. Than I searched through the log files from OneCare. I
found a lot of blocked computer IP's. And on march 24, I found a lot of
removed infected files. Several viruses were reported, all trojan horses. The
reported ones were removed. After this I scanned in two more ways, but no
viruses were found anymore.

I reacted on the file wininit.exe to be a trojan horse, it is still in my
directory. Strange enough Spybot S&D responds like OneCare: No thread. I had
not yet gone this deep in OneCare, although I have big problems now (comes
more), I won on confidence about OneCare. It also has these features for
controling on backups and buildin restore. Optimalisation schedule-settings,
total control on malware. You notice, I still want to give it a try.

My system is easy now, the green ball is there, and in the auto-updatelist
are these newly downloaded packages on the defender-library. Quite
confidential. There is a tray in OneCare that shows me the defender, it is
inactive, not needed by OneCare. Switched off whenever I come back there.
Also in that tray I found the resident Spybot R&D, I switched his both
protection routines to off on startup. OneCare excepts it there set active,
but I switched it off there aswell. So OneCare has to do the job.

To save my system, stopped some ActiveX controls, specially those that are
reported not to be certified. ('Certified' maybe troubled by translation. I
am dutch, see.)
There are a triple ActiveX on Apple Inc. These support Quicktime. Coming to
the third to switch to inactive, did not believe my eyes when I saw one of
the others being switched to on again! It left me to choose two outof three
to switch off. After a restart the triple is inactive now.
I doubt about the state of the others I switched off:
XML DOM Document 4.0 - Microsoft Corporation ?
XML HTTP 4.0 - Microsoft Corporation ?
XSL Template 4.0 - Microsoft Corporation ?
isInstalled Class - (Sun Microsystems Inc.) ?
MusicManagerPlugin.MediaBar On - Demand Distribution ltd.
Free Threaded XML DOM Document - Microsoft Corporation
CLVistaGenie Control - Cyberlink
Sorry, to me they are all spy candidates, get that certificat!


Now the problem I came upon, mentioned already, but it became worse: I
cannot remove a program. None at all! In my user directory I come on maps
that were always mine. Not anymore! Went to the account program and found my
account set to common user. No administrator rights anymore! Tricked it,
saved! Came back: Common again! I once had my appartment door destroyed
comming home. I met the junk before in front of the building. That feeling!

Troubles apeared to be bad when I tried to remove Bonjour and Quicktime out
of the programlist. When I start the routine Vista comes telling me that it
gathers information and installs(!) the program. It persistendly ends with a
defender warning that an unknown program is to be executed. The program is
called 'remover' (in dutch). The defender offered me to execute, or to
cancel. In both ways the program is still there! Vista now tells me I have to
start the program as an administrator, remove doesn't start up at all!
Is there some help? I went through the helpfiles on accounts, all I get is a
headache! I get a bit of that stuff, but it is to scarey and tricky to be
sure I make good changes.

What should I do now? Realy need a professional now. Oh, I should be doing
fotographs and other lovely things. Mick, you like this, please?
Gratefull for your attention!
--
Live gets better all the time!

Dear members, (Sorry for the double post before, took a log time to come up.)
Maby help comes soon, but in the meantime this post. Welcome for reading!
There are more posts in this area and on User safety issues, under Windows,
that shows the problem on permissions.
All of them lost the administrations rights. I also notice there is a lack
of help on that issue.
Can there please be done some more help?
I suggest to open a new tread just on this subject. Maby a MS MVP can do so.
One comment on that more:
I subscribed to the open system on Microsoft experience share. Maby
Mircrosoft expects us then to behave in a sertain way. For example I moved
some file, that was not on mine and I changed on some file the permission
settings. But if Microsoft expects me to don't things on my own computer, I
might expect them to say so.
I also changed my mapsettings from default: no system files shown to:
standard shown. I once got a warning on this, maby standard system, one realy
gets paranoia by these. Can somebody tell us a bit more on this and explain
on behavior of Microsoft in these matters.
If you cannot find similar posts I refered for, feel obliged to make you a
list.

Hope to get some answers.

--
Live gets better all the time!

Renee59 wrote:
Your various posts are difficult to read/follow. This is not a discussion
board; it is a newsgroup and therefore aimed at answering specific
questions. While this resource is excellent for end users getting help, if
you want a forum experience you should post to a forum. I suggest
www.computerhaven.info or one of the forums on www.aumha.net. See Section C
below for a full explanation of why you think this is a forum and it isn't.

In the meantime, here are some suggestions to help you:

A. I don't believe English is your first language. If you want to use
newsgroups, you may find it more efficient to post in a newsgroup in your
native language (French perhaps?). It is difficult enough to get/give
technical support in writing about unseen computers without adding in a
language barrier. See the link to a list of MS newsgroups in Section C
below so you can find the right one for your language.

B. As much as I can determine from reading your various posts, you don't
really know what you are looking at and are therefore having a hard time
communicating your system's details (also refer to Section A above). It
would probably be wisest for you to take your machine to a local computer
professional and have them straighten everything out for you. This will not
be your local equivalent of BigComputerStore/GeekSquad. I do not say this
to hurt your feelings in any way; I'm just being practical.

C. Newsgroups - general

Since you are using the web interface, you may not realize that this is
really a newsgroup. You will get far more out of this resource if you learn
to use a newsreader. There are many good newsreaders for Windows, but you
can use Outlook Express (XP) or Windows Mail (Vista) since you already have
it. Here are some links to information about newsgroups:

About Usenet:
http://en.wikipedia.org/wiki/Usenet
http://www.faqs.org/faqs/ - Usenet FAQs from the Internet FAQ Archives
http://www.usenetmonster.com/infocenter/
http://www.elephantboycomputers.com/page2.html#Usenet - a brief explanation
of newsgroups

Outlook Express/Windows Mail as Newsreader:
http://michaelstevenstech.com/outloo...snewreader.htm
http://rickrogers.org/setupoe.htm
http://vistasupport.mvps.org/accessi...ndows_mail.htm

How to Post:
http://www.elephantboycomputers.com/page2.html#Usenet
http://support.microsoft.com/default.aspx/kb/555375 - How to Ask a Question
http://users.tpg.com.au/bzyhjr/liszt.htm - How Not to Get Technical Help on
Usenet
http://www.catb.org/~esr/faqs/smart-questions.html

http://aumha.org/nntp.htm - list of MS newsgroups
microsoft.public.test.here - MS group to test if your newsreader is working
properly
http://www3.telus.net/dandemar/munad.htm - how to munge email address
http://en.wikipedia.org/wiki/Crossposting - crossposting
http://www.blakjak.demon.co.uk/mul_crss.htm - multiposting

Other Newsreaders for Windows:
http://www.forteinc.com/main/homepage.php - Forte
http://www.mozilla.org - Thunderbird
http://gravity.tbates.org/
http://www.40tude.com/dialog/
http://xnews.newsguy.com/

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

"Renee59" <Renee59@xxxxxx> wrote in message
news:80BC6A5E-B8D3-4D91-96C6-24CB013A2754@xxxxxxNo reason to uninstall Avast! unless there is an "on-access" scanner
in 'One Live one care' - whatever that is. As a matter of choice, I
probably would have stayed with Avast!
I disagree. I think it is better to have AV from an experienced AV company,
Anti-Malware "suites" seldom have the "best" of each malware category.
It's a matter of choice again - I also preferred "component" stereo systems
as compared to integrated systems by the same reasoning.

I'm sure Microsoft is fully capable of buying into this arena and making
good choices of what technology to buy into. Still, I would rather make
use of the many years of experience the outside vendors have and choose
from their offerings.
Some "safety features" are actually just "fluff" (perhaps nice, but not
really necessary features). Fluff becomes bloat when there's too much
of it. Not bundling it with the OS was a *good* thing IMO.
Sorry, I didn't understand a lot of the above, but it seems you missed an
important thing about these types of anti-malware programs. The simple
fact is that they don't work the way most people think they do.

They work - imperfectly! None of them will protect you - completely.
They *all* will miss something sometime.

As to the imperfect cleaning (deleting?) - that depends on many factors.
Absolutely! Policy is very important.
Sorry, you lost me again.
Don't know.
No. Your "policy" should be to not try out programs you don't actually
*need* - especially if you are unsure about the source.
Lost me again.
Don't know.
Probably not. Submit suspect file to many online scanners to get a feel
for the "false positive" possibility.
The system will always have more power than the user - unless it's broken.
If you want to - your choice.
What do you mean by "still". )

If you are having problems getting rid of viruses, spyware, etc, when you are
scanning; reboot and use the programs in Safe Mode.
Reboot, tap F8, and then select Safe Mode using the UP and DOWN arrows when
the list comes up. Then select ENTER

The reason for this is that you can not delete a file that is being used.
Safe mode means that there is the bare, basics running in Windows

I don't know how far you got with things, so below is orig advice.



http://www.avast.com/eng/download-avast-home.html

Above is a link to Avast Free 4 Home Anti-Virus
It is low resource using, free and Vista 32bit and 64bit compatible.
Only have one (1) anti-virus installed; more than 1 can cause conflicts.

http://www.safer-networking.org/en/index.html

For Spyware removal, use the above link to “Spybot Search & Destroy 1.5.2�
Download it, install it, update it, immunize your system and scan your
System with it.

http://www.javacoolsoftware.com/

For a non-scanning, but running in the background, Program to STOP Spyware
being downloaded to your Computer, use SpywareBlaster 4, available at the
above link.


--
Mick Murphy - Qld - Australia


--
Mick Murphy - Qld - Australia


"Renee59" wrote:

If you are having problems getting rid of viruses, spyware, etc, when you are
scanning; reboot and use the programs in Safe Mode.
Reboot, tap F8, and then select Safe Mode by using the UP and DOWN Arrows
when the list comes up. then select ENTER.

The reason for this is that you can not delete a file that is being used.
Safe mode means that there is the bare, basics running in Windows

I don't know how far you got with things, so below is orig advice.



http://www.avast.com/eng/download-avast-home.html

Above is a link to Avast Free 4 Home Anti-Virus
It is low resource using, free and Vista 32bit and 64bit compatible.
Only have one (1) anti-virus installed; more than 1 can cause conflicts.

http://www.safer-networking.org/en/index.html

For Spyware removal, use the above link to “Spybot Search & Destroy 1.5.2�
Download it, install it, update it, immunize your system and scan your
System with it.

http://www.javacoolsoftware.com/

For a non-scanning, but running in the background, Program to STOP Spyware
being downloaded to your Computer, use SpywareBlaster 4, available at the
above link.


--
Mick Murphy - Qld - Australia

--
Mick Murphy - Qld - Australia


"Renee59" wrote:

--
Live gets better all the time!


"Malke" wrote: