Jump to content

WDGC

Member
  • Posts

    157
  • Joined

  • Last visited

  • Donations

    0.00 USD 
  • Country

    Australia

Posts posted by WDGC

  1. I just ran a scan with Ad-Aware and was quite surprised to find 1 critical object had been found. First time ever.

    Name:Spyware.AdvancedKeyLogger

    Category:Spyware

    Object Type:Process

    Size:-

    Location:C:\Program Files\Sygate\SPF\tse.dll

    Last Activity:20-12-2005 9:37:47 AM

    Relevance:High

    TAC index:10

    Comment:(CSI MATCH)

    Description:Spyware.AdvancedKey is a keylogger that monoitors clipboard contents, and takes desktop

    screenshots.

    For further information one is directed to the "TAC page for Spyware.AdvancedKeyLogger" the URL of which is:

    http://www.lavasoftnews.com/ms/display_mai...vancedKeyLogger

    however this page is somewhat less than enlightening.

    A search with Google for Spyware.AdvancedKeyLogger only found 4 instances, with only 2 of possible relevance. One is a Lavasoft blog showing Spyware.AdvancedKeyLogger is part of the latest definitions and the other is a French forum [in French] possibly saying something about a false alert.

    Lavasoft blog

    Fausse alerte - Spyware AdvancedKeylogger

    The supposed location of Spyware.AdvancedKeyLogger - C:\Program Files\Sygate\SPF\tse.dll - seems rather odd, as tse.dll is a legitimate component of C:\Program Files\Sygate\SPF. What happens to the firewall if Ad-Aware quarantines or deletes "Spyware.AdvancedKeyLogger"?

    MS AntiSpyWare, Spybot SD and AVG didn't detect anything and what the "Last Activity:20-12-2005 9:37:47 AM" entailed is beyond me.

    I find it hard to believe something undesirable is present, but not having any experience of "critical objects", I'd appreciate the views of others on this matter.

    .

  2. Stop being such a goof about validation. Like who really gives a sh**? Do YOU? Do I?

    "... a goof about validation. ..." ? - Your appraisal of a simple, straightforward question is rather odd.

    You apparently are not familiar with the concepts of curiosity and the desire to know.

    .

  3. Since the introduction of WGA validation I've had to validate 4 times, that is, re-validate on 3 occasions.

    I've used both the ActiveX Control and Windows Genuine Advantage Tool executable file methods to validate, but neither seems to "hold" for an extended period. However, according to the Genuine Windows FAQ, this should not be the case:

    -- Q:

    Do I have to revalidate if I reinstall Windows on my system?

    A:

    Yes. You will need to revalidate each time you reinstall Windows. However, you will only need to validate once per reinstallation. --

    Genuine Windows FAQ

    Have others had this experience? Is there a way to overcome it?

    .

    Title Edited - Please follow new posting rules from now on.

    --Zxian

  4. QUOTE:

    The initial WGA 1.0 program downloaded an ActiveX control to check the authenticity of your Windows software. Since it was an ActiveX control, only Internet Explorer (IE) users could use it.

    But the recent growth of Firefox has forced Microsoft to rethink their strategy. Microsoft Genuine Windows Validation process now works in Firefox and other Mozilla browsers. Firefox users can download and install the Windows Genuine Advantage validation Firefox plug-in - WGAPluginInstall.exe available on Microsoft's website to complete the Windows validation process.

    Microsoft WGA Plug-in for Mozilla Firefox provides the same Windows validation as the original IE ActiveX control. The Windows Genuine Advantage Diagnostic Site will automatically detect settings of your Mozilla Firefox web browser (1.0.5 or higher) to ensure that the appropriate helper applications such as the WGA Plug-in for Mozilla Firefox is installed.

    Windows Genuine Advantage supports Firefox

    Why is this WGA Firefox plug-in required?

    When the Microsoft Genuine Windows Validation process was implemented some months ago, I validated my copy of Windows XP using IE and then repeated the process using Firefox. Since then I've been able to use either IE or FF to download from the MS Download Centre.

    IE is still the default browser.

    What experiences have other members had?

    .

  5. C:\Documents and Settings\Terry Pinnell\Local Settings\Temporary Internet Files\Content.IE5\083A8GIF

    I tried to use Windows Explorer to find that but was surprised that I couldn't do so. I gather these 'Content.IE5' folders are hidden. But why? (I can view all other hidden/system files I think.) And how would I find the files they contain?

    --

    Terry, West Sussex, UK

    If you are using Win. XP, run Disk Cleaner, select 'Temporary Internet Files', select 'View Files'.

    This will take you to C:\Documents and Settings\Terry Pinnell\Local Settings\Temporary Internet Files\Content.IE5

    -

  6. ...

    Logical volumes in an extended partition are flakey at best, I do not recommend using them.

    ...

    Why do you claim this?

    I have had logical volumes in extended partitions on a number of machines over a number of years without any problems whatsoever.

  7. Windows XP Home Edition SP2.

    I don't have System Restore or Recycler running on any partitions.

    However, there are still RECYCLER and System Volume Information folders in each partition.

    Even though these folders are empty I would rather be rid of them, but cannot delete them.

    How should I go about removing them?

    -

  8. When running a scan 1.4 either "hangs" or takes an inordinately long time when scanning Internet Explorer and Firefox bookmarks.

    This is at the very end of the scan, the progress bar showing:

    "Running bot-check [24098/26697 : Internet Explorer - Owner - Bookmark]", and

    "Running bot-check [24098/26697 : Firefox - default - Bookmark]"

    Until this point the scan takes approx. 3 minutes, but scanning of these 2 entries takes a further 3+ mins.

    The same problem occurs on my second computer. Each runs Win. XP Home Edit. SP2 and with 1.3 entire scans always took about 3 minutes.

    Is this a known problem?

    Is there a workaround or remedy?

  9. Below are the details appearing with 3 postings made 28/05/2005 - 1 by me and the other 2 by new members.

    How is it I am still referred to as a "Newbie", yet they are not?

    28/05/2005 posts

    _jd_

    Group: Members

    Posts: 3

    Joined: 28-May 05

    Member No.: 57882

    WDGC

    Newbie

    Group: Members

    Posts: 43

    Joined: 6-October 04

    Member No.: 32876

    Chalky Top Gun

    Group: Members

    Posts: 1

    Joined: 28-May 05

    Member No.: 57907

    EDIT:

    Topic Title : should be "Appellation", not "Appelation"

  10. Sorted ... 

    -------

    I'm not absolutely certain, but I think that key was one of the many that RegSeeker found. There were scores described as 'redundant' or 'obsolete' or words to that effect. I deleted all 5000 plus entries it recommended. There's bravado for you  :)  So maybe I will be encountering a few more quirks!

    BTW, deleting those 5000 reduced registry sizes by only 1-2%.

    --

    Terry, West Sussex, UK

    Glad to hear the problem seems to have been fixed relatively easily.

    Upon consulting my records, and in light of your findings, I now think it almost certain the key was a RegSeeker deletion - I first noticed the wrong icon not long after making deletions with RegSeeker, but inexplicably didn't make the connection.

    Coincidentally, there is a new version - RegSeeker 1.45 beta - available.

    http://www.majorgeeks.com/download2579.html

    and

    http://www.hoverdesk.net/freeware.htm

    At majorgeeks the download is regseeker.zip and at hoverdesk the download is RegSeeker.zip and is from the old 1.35 beta download link. However, after downloading and extracting each, I can say they appear to be identical.

    Only a 1-2% reduction after 5000 deletions shows just how many entries are in the registry!

  11. 4. This reply gave a method of using REGEDIT which gives significantly different sizes to those I had previously obtained [5 Hives Total 28576 KB compared with 63301 KB previous]

     

    _ _

    But did you say you got the sum of FIVE hives?

    --

    Terry, West Sussex, UK

    Using REGEDIT "export to Win9x/NT reg format (choose this from the save as drop down box)." See AumHa post.

    I haven't used DuReg yet.

  12. . Somehow the normal yellow folder tray icon has been replaced by the blue 'monitor' shown here:

    The correct yellow one is still used in My Computer folders, as I've also shown in that same shot.

    --

    Terry, West Sussex, UK

    About 2 1/2 months ago I had the selfsame problem. I've never used RegSupreme, and as mentioned previously have used RegSeeker a number of times over the past 2 years, but have only had this problem the once.

    Unfortunately I can't offer a solution as I was so irritated by this behaviour I soon reinstalled the OS from an image made a couple of days prior. At times such as this I'm glad I make OS images at least weekly.

    However, I did post the problem to a number of fora, but didn't save the responses.

    Over the weekend I should have time to search these fora and will post here anything I find out.

×
×
  • Create New...