Replies to post #608963 on Zeev's Turnips Patch-No Politics (ZEEV)

[tantal]

Thanks Bud, one system is clear, two to go . . .

[Bruce A Thompson]

So Far, Only 2 machines were completely clean

Mine (yes I am anal about security) And Wccawa's. He surfs porn sites with all his AV turned off just to see what he can catch. (g) His hobby is cleaning crap off his machine.


http://www.malwarebytes.org/mbam.php

[DSinDAKOTA]

Bruce,

I run Norton AV,SpywareBlaster, and Ad-Aware. Malwarebytes found 18 items on the first scan. It looks good to me. I'll buy it!

Dave

[brainlessone]

sophos would not let it load

gave a hips/fileMod-005 error

http://sav7-00.p.link.sophos.com/t/en/HIPS/FileMod-005


Runtime behavior alerts of this type inform the user that an attempt has been made to install a suspicious-looking system driver. Any attempt at this behavior by an unauthorized program could indicate a malware infection.


Please note that the behavior of some legitimate product installers can sometimes resemble that of malware. For this reason, installing or updating software carries an increased likelihood of unwanted HIPS detections and we recommend configuring HIPS to Alert Only mode for the duration of any product installs or updates. For further information please refer to the following knowledgebase article deciding whether to allow or block a file.


HIPS/FileMod-005 uses Sophos Behavioral Genotype technology to enhance detection accuracy.



may not mean anything

[ezey]

Thanks:

Detected: hIjackPROP...REGISTRY DATA
HKEY_LOCAL_MACHINE|SOFTWARE|MICROSOFT|WINDOWS|Curent Version|POLICIES\EXPLORER BAD(1) GOOD (0) DELETED SUCCESFULY