How safe is running Zoek 5.0.0.0

[marysilver]

Restore default Services:
http://www.sevenforums.com/tutorials/236709-services-restore-default-services-windows-7-a.html

If the Service needs to be Started, it will show Started/Manual. or, Started/Automatic, etc.

Thank you. That was very helpful!

1) What about SoftThinks Agent Service?
C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE"

I have it on started and automatic. Researching it is confusing.



2) Software Protection will NOT stay on Started no matter how many times I change it. Is that a problem?

3) Windows Defender will NOT stay on Started no matter how many times I change it. Will not change from Manual either. Are these a problem?

4) What is ZAtheros Bt&Wlan Coex Agent and ZAtheros Wlan Agent? Are they needed? Both are on Started and Automatic.

 

[gregrocker]

Google any service or process to learn about it. That probably keeps Dell backup at the ready. I wouldn't want any Dell services running. You'll get at least 30% better performance by reinstalling a factory install which is the definition bad install. And yours is crippled by malware worse than most.

I have offered to connect but your best bet is to back up to quarantine drive to later scan with everything, wipe the hard drive except Dell Utility partition if Diagnostics will still run from F12 at boot. Then do the reinstall. Again I'll offer to walk you through install til you get online then connect via TeamViewer to set it up for you.

This level of help is not available at any price and can be one of the greatest learning experiences in life, from the top experts in the field. No one will have a better install than yours

 

[marysilver]

OK thank you.

The backup drive hasn't arrived yet. So in the mean time I'm trying to fix the problems myself to save you from bothering with me.

Just found out the sound the computer makes is the sound of plugging into the USB Port. When the USB Port makes that sound the mouse freezes. This happens randomly when the USB Port is NOT in use.

I'll have to research the USB Port now and find out what programs it uses.... to see if they are corrupt.

 

[marysilver]

Restore default Services:
http://www.sevenforums.com/tutorials/236709-services-restore-default-services-windows-7-a.html

If the Service needs to be Started, it will show Started/Manual. or, Started/Automatic, etc.

Is there a similar page for the registry editor? I'm at the registry editor and there's weird stuff there. Can viruses hide there?

When I save all the files on the computer on an external hard drive are there any folders I should avoid copying so when I reload everything back on the computer, it doesn't become reinfected from the saved data?

 

[marysilver]

Are these normal programs in the registry editor?

-UPH .....it has parameters
-PC-Doctor
-Nico Mak Computing
-2 programs are just a bunch of numbers
-I have two "WinRAR"

Is it really possible for a virus to delete files from the computer and replace them with their own? I'm no technology expert....Mercury was located in my 12th House at the time of my birth after all but assuming viruses and Trojans aren't encouraged by the computer industry why don't computer manufactures place one of those reCAPTCHA for every main computer change/deletion?

 

[cottonball]

marysilver,

The Registry is a dangerous playground!! Would not delete entries out of it without being absolutely sure of what you are doing.

Some of those entries you mentioned are programs installed. If you wish to remove the program, go to Control Panel > Programs and Features, and go thru the Uninstall List to determine what you no longer need.

Is it really possible for a virus to delete files from the computer and replace them with their own?

Yep!! A virus can change or delete files.

...why don't computer manufactures place one of those reCAPTCHA for every main computer change/deletion?

Hollie schmollie!!!

Doubt that you would ever get anything done. An average computer probably has anywhere around
200, 000+ files, gazillions of code, etc.

 

[marysilver]

Thank you. I'll skip using the Registry.

Did another AV scan and I found:

atdmt.com tracking
7search.com tracking
googleleadservices.com

Doing a search, I found another AV called: UnHackMe.

Is it safe?




I tried Stopzilla but it stopped my computer and had to do a hard restart.


I also found shopfromhome.com in my firefox extensions.

Checked out "troubleshooting information" in firefox and found this unknown ghost file under Extensions:

{aa46cf4e-4db4-48cf-82c5-c87c3790c166} 0.4 true {aa46cf4e-4db4-48cf-82c5-c87c3790c166}82c5-c87c3790c166}

Is there any way to delete it. It doesn't show up in my Extensions...only under troubleshooting?

 

[gregrocker]

I'd Delete or disable those.

I'd also run another full updated scan with Malwarebytes and SuperAntiSpyware to make sure everything is gone for good, and then check the System files for any lingering damage using SFC /SCANNOW Command.

When those three give an all-clear - after the last scan which found something and they are all three repeated again for certainty - you should be clean enough to function normally unless there is a highly specialized infection that they cannot handle which is very rare.

 

[marysilver]

Thank you. I'll do that.

Found a way to put {aa46cf4e-4db4-48cf-82c5-c87c3790c166} in the extension trash folder. It wouldn't allow me to delete it from the computer.

Is it important or a virus?

 

[gregrocker]

It's obviously not wanting us to know what it is. :huh: As a rule of thumb in places like Extensions/Add-On's you only want what you know you need and use.

I always disable all but Flash, a Reader, Silverlight and anything user has added to browser and vouches for.

 

[marysilver]

Thanks.

Looking through Services again today and noticed this:

UmRdpService
<Failed to Read Description. Error Code: 2 >

It is on manual. Looked it up, can't figure it out.

 

[cottonball]

UmRdpService:
Remote Desktop Services UserMode Port Redirector
Allows the redirection of Printers/Drives/Ports for RDP connections

Please go to the Performance & Maintenance forum for assistance on that issue:
http://www.sevenforums.com/performance-maintenance/

Someone there will be best qualified to deal with the issue.