[CCleaner yet another trojan on Uninstaller]

So what are you saying?

 

I wish I knew what I was saying...

 

I guess MrG is the only one who can answer this question.

[CCleaner yet another trojan on Uninstaller]

LOL!

 

This is using Patrick Kolla's FileAlyzer. Not unexpectedly identical to what I got before.

 

There seem to be numerous legitimate versions of this file...

[CCleaner yet another trojan on Uninstaller]

How are you getting the checksums?

Personally, I'm using Summerproperties, a nice little shell extension which adds a 'Checksums" tab to your file's properties. Very handy.

 

http://www.earthmagic.org/?software

[CCleaner yet another trojan on Uninstaller]

hi, i got the same message by ccleaner. to be absolutly sure, can anyone give me his/her md5-checksum?

 

 

5bb116b6b982f79626fcea7ccee9d8c0

[CCleaner doesn't remove files in %temp%]

Hello Tobias,

 

Please go to Options > Advanced, and UNtick the "Only delete files in Windows Temp folders older than 48 hours" check box , should it be checked.

 

That ought to make a difference.

[Virus scanner reports false positive for CCleaner]

Ah, thank you - I was just about to report it...

[Virus scanner reports false positive for CCleaner]

I'll report this to Sophos for you.

[Firefox Extensions]

Page Update Checker is a FireFox extension that automatically checks to see if web pages have changed.

 

Once installed, you will be able to right-click on any page in Firefox and select "Monitor for Updates." The PUC options will open up and you can select how often you would like PUC to download the webpage and see if it has changed.

 

https://addons.mozilla.org/firefox/920/

 

Very nice; I now use it alongside Copernic to track web pages that hold my interest.

[Firefox Extensions]

I don't use any extensions....did in the past but not with 2.0 most of the extensions are useless anyway

 

Not really, I have all but one of my extensions working now; if you look further, many have beta versions to comply with 2.0, and occasionally there's a workaround.

And sometimes there's of course a very good alternative to a favorite extension that does work well with 2.0.

[IE7 and ctfmon.exe!]

Really, I'm all for disabling any stuff you decidedly do not need or use from running.

 

Memory management in Win 2000, XP and Vista is a whole lot better than used to be the case with win 98 and ME, but the less there are unnecessarily running processes, the better your computer will run. It's as simple as that...

[IE7 and ctfmon.exe!]

Ah, that's interesting... You might consider posting in one of the dedicated MS Newsgroups:

 

http://www.microsoft.com/windows/ie/suppor...ps/default.mspx

[IE7 and ctfmon.exe!]

Have you already tried uninstalling Alternative User Input following the directions in the MS article I linked to??

[IE7 and ctfmon.exe!]

It is an "Office Thing". Here's some reading:

 

http://support.microsoft.com/default.aspx?...b;EN-US;q282599

[Windows Vista RC1 and CCleaner]

Is the creator of Vista aware of this?

 

 

Did you mean to ask whether the creator of CCleaner is aware of this?

 

At least that's what I think you meant... LOL

[registry watcher]

Another option is InCtrl5. It allows you to take snapshots before and after an event, and produces a log listing all registry changes.

 

http://www.pcmag.com/article2/0,4149,9882,00.asp

[Norton Protected Recycled Bin 2006]

What Really Slows Windows Down

 

 

[Internet crime to hit homes]

May I suggest everyone submit any phishing email they get to the CastleCops "Phishing Incident Reporting and Termination Squad"?

 

http://wiki.castlecops.com/PIRT

 

It only takes a minute, and it really makes a difference.

 

At present, the following organizations already receive PIRT feeds:

 

8e6 Technologies, Alice's Registry, Anti-Phishing Working Group, Australian Computer Emergency Response Team (AusCERT), Authentium, Blue Coat, Brand Dimensions, CERT / Software Engineering Institute / Carnegie Mellon University, Compete, Co-Logic, ContentKeeper Technologies, CyberDefender, Cyveillance, EveryDNS, Federal Bureau of Investigation (FBI), Firetrust, For Critical Software Ltd, Fortinet, Forum of Incident Response and Security Teams (FIRST), FraudWatch International, IronPort, Infotex, Internet Crime Complaint Center (IC3), Internet Identity, Intellectual Property Services, Korea Information Security Agency (KISA), Korea Internet Security Center (KrCERT/CC), Laboratoire d'EXpertise en Securite Informatique (LEXSI), Malware Block List, National Cyber- Forensics and Training Alliance (NCFTA), Netcraft, NYSERNet, Okie Island Trading Company, OpenDNS, Rede Nacional de Ensino e Pesquisa (RNP), SonicWALL, Sunbelt-Software, Support Intelligence, SURBL, Symantec, Team Cymru, Thomas Jefferson National Accelerator Facility (JLab), TrustDefender, United Online, United States Computer Emergency Readiness Team (DHS US-CERT), Websense, Webwasher, XBlock

[ccleaner - virustotal]

You're very welcome.

[ccleaner - virustotal]

We had an issue a few days ago: http://forum.ccleaner.com/index.php?showtopic=6763

 

As you can see in that topic, both Kaspersky and F-Prot fixed that false positive really fast.

 

Moreover, it seems that only Fortinet is detecting a 'possible threat', which constitutes no positive detection, but only a heuristic or behavioral one, perhaps due to the packer found.

 

As TM already said, it's just a FP and none of the AVs are actually flagging it as malware.

 

However, I have reported it.

[Norton Protected Recycled Bin 2006]

LOL, I resisted the comment. I knew someone else would come along with one though

 

 

I even knew who it would be...

[Update at shutdown]

ive noticed, if it asks me to install updates, i can simply install them at shutdown by going to start>shutdown>shutdown.

this is also where it tells you that theres updates and they will be installed.

 

 

Certainly, but if you read CeeCee's original post carefully you'll see that he/she has Automatic Updates DISabled, hence the question.

[Update at shutdown]

Well, I'm sure it's nothing to worry about. It may just be a default action Windows undertakes at shutdown, whether or not AU is enabled or not.

 

You could also try posting in the dedicated MS Windows Update newsgroup for some more input:

 

news://msnews.microsoft.com/microsoft.public.windowsupdate

[Update at shutdown]

It's indeed a Windows Update feature. At shutdown Windows looks for freshly downloaded Windows Update to install, and will present you with a prompt at shutdown if they're found.

 

"WUAutoUpdateAtShutdown failed" > error 8024000C generally points to some kind of a network issue.

 

Not sure why it appears while you have automatic updates disabled though . Maybe it's precisely because you have them disabled...

 

BTW, go to Start > Run > Services.msc and scroll down to the Automatic Updates Service. Is it in fact disabled?

[winapp2.ini - how to add a program with variables]

It's not often that the number of locations in which a particular file you want CCleaner to delete is found is so large that you'd actually need that type of wildcard.

 

I looked around, and here the sqmfiles are created only in my Application Data\Microsoft\MSN Messenger\********** folder (where the asterisks represent the name of the subfolder in question

 

I just added the following winapp2.ini entry which does the trick, but of course only for sqm files in that particular folder.

 

You could add other folders where you find these files being created. There can't be dozens of them...

 

[MSN Live Messenger]

LangSecRef=3022

Detect=HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger\SQM

Default=True

FileKey1=%userprofile%\Application Data\Microsoft\MSN Messenger\1231231231|*.sqm

 

(NOTE: in that rule, replace "1231231231" by the name of the subfolder in your particular profile!

[Virus alert with CCcleaner files]

OK, according to Frisk/F-Prot's Mike:

 

That was fixed already - they should update...

 

So there ya go...