22 replies to this topic

[Kichō]

I just scanned with Comodo Firewall Pro(Comes with antivirus/anti spyware)
PCtools threatfire.
Spybot search and destroy.
Windows defender.
Avira antiVir.

And they all found nothing.

However I just used ZeroSpyware and it found 8 spyware however none of the above did?

So I'm just wondering is this software rouge or legit?

I'll post a screenshot of it.




Could it be a false positive?
EDIT:The computer I'm using was recently built but still you never know what could get through...

EDIT2:Heres another screen:

Edited by Zhen Ji, 26 March 2008 - 18:05.

[G-sus]

hard to say from this information...
imo all of the stuff you scanned with sucks (try AdAware for spyware removal), and showing stuff that doesnt exist in free versions of such programs is not uncommon anymore...
but otherwise, the CWS (CoolWebSearch) thingy is a pretty hard nut, iirc just not at hiding itself, but the removal of it...
so either the programs u scanned with rly suck ***, or these are fake infections.
my impression of that program is that its legit, but not effective. the ones listed above are weak anyway...

[Kichō]

Thanks G-Sus I just updated them all before I scanned.

ZeroSpyware was on Spywarewarriors rouge list but was delisted when it got a new engine.

I would try Ad-Aware but it hogged my resources on my last computer >.>.

Comodo Firewall is actually good.

[G-sus]

you´re running vista ultimate and complain about some little spyware scan program hogging ressources...?! -_-

i´m kinda.... speechless... dunno what to say other than i´d like to hit you with a brick...

[Kichō]

G-sus, on 26 Mar 2008, 18:26, said:

you´re running vista ultimate and complain about some little spyware scan program hogging ressources...?! -_-

i´m kinda.... speechless... dunno what to say other than i´d like to hit you with a brick...

It's XP luls.

Besides I have alot of programs running when I start it up. D:

And how can you throw a brick from your location to Beijing? :o

EDIT:Ad-Aware hogged my old PC when it had 512MB(RAM.
This one has 1203 or something.
I might get Ad-Aware I don't know. :X

Edited by Zhen Ji, 26 March 2008 - 18:34.

[Reaper94]

get AVG from grisoft.

free and rly good (served me anyway)

[Kichō]

Tried it and it's my worst enemy,Besides PotP said it reported false positives.

Heck it even reported Shockwave has a trojan untill it updated...

Mind you..The software I use are all betas (Apart from the firewall)

[Dauth]

If you're spyware hunting pretty much everyone uses the one with their AV of choice and backed up with spybot S&D, I suggest you do the same.

http://www.safer-networking.org/

[jnengland77]

Spybot S&D can detect and get rid of CoolWebSearch so I think the program is not legit, Just my opinion. On my tablet and on my other HD with XP (dual boot with primary OS as Linux). I use ClamWin as anti-virus software with Spybot S&D, and on occasion I run Adware Free 2007. I like the older versions better honestly.

~jnengland77

[Kichō]

Thanks for the Input Dauth and Jnengland.

Like I say ZeroSpyware was suspected as rouge but it was de-listed when it got a new engine upgrade.

Either Spybot search and destroy is tripping on acid or it just hates my computer.

I didn't notice anything unusual when I installed ZeroSpyware.

[Dauth]

It appears to be a legit piece of Software, however brands are made and broken by reputation, Spybot has a good reputation, but if ZeroSpyware was willing to remove some CWS rubbish I'd remove it and then remove ZeroSpyware.

[Kichō]

Dauth, on 27 Mar 2008, 9:17, said:

It appears to be a legit piece of Software, however brands are made and broken by reputation, Spybot has a good reputation, but if ZeroSpyware was willing to remove some CWS rubbish I'd remove it and then remove ZeroSpyware.

I just did,Although the UI/GUI of ZeroSpyware looks awesome I can't say I trust it.

But my question remains...Why did it find those infections but Spybot and the otheres couldn't?

It found 'SafeNet' which is meant to be a keylogger but I checked all my accounts and nothing was taken/modified.

So this is strange,It's either false positives or real infections.

[Dauth]

I don't know why, it could be an old build and have false positives.

You can find a program called cwshredder which removes most cws infections, failing that feel free to post a hijackthis log here and I'll see if I can spot anything.

http://www.download.com/Trend-Micro-Hijack...4-10227353.html

Edited by Dauth, 27 March 2008 - 17:44.

[Kichō]

Thanks Dauth, I just ran CWshredder.exe and it found nothing..Just read I'll post my Log file.

If you don't know some entries/programs I think I can explain most of them (as I installed most of them)

Edited by Zhen Ji, 27 March 2008 - 18:10.

[Dauth]

Ok, looks clean however unless you use toolbars (and if you do jist get firefox it's better) I'd uninstall your google toolbar and the msn toolbar since toolbars are a common weakness and can lead to infections.

@Veterans, yes I know it should be in code tags but code doesn't show formatting.

Quote

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 17:53:16, on 27/03/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.17184)

Boot mode: Normal



Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\AusLogics Visual Styler\themehelpersvc.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\RunDLL32.exe

C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

C:\Program Files\ThreatFire\TFTray.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Comodo\VEngine\VEngine.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Uniblue\ProcessQuickLink 2\ProcessQuickLink2.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\LClock\LClock.exe

C:\Program Files\Vista Sidebar\sidebar.exe

C:\Program Files\ViStart\ViStart.exe

C:\Program Files\ViOrb\ViOrb.exe

C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

C:\Program Files\Thoosje Sidebar V2.3\Thoosje Vista Sidebar.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\WINDOWS\ATKKBService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\COMODO\Firewall\cmdagent.exe

C:\Program Files\Kontiki\KService.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\ThreatFire\TFService.exe

C:\Program Files\Mozilla Firefox 3 Beta 4\firefox.exe

C:\WINDOWS\System32\alg.exe

C:\Program Files\EA Games\Command & Conquer Generals Zero Hour\ShockWave.exe

C:\Program Files\EA Games\Command & Conquer Generals Zero Hour\generals.exe

C:\DOCUME~1\Owner\LOCALS~1\Temp\~e5d141.tmp

C:\Program Files\EA Games\Command & Conquer Generals Zero Hour\game.dat

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe



R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft..../?LinkId=105563

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.slizone.com/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Comodo VerificationEngine Browser Helper - {A968A4B4-C492-4834-B651-17602C3885C8} - C:\Program Files\Comodo\VEngine\ESigil.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM

O4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe

O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe" /StartupJobs

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide

O4 - HKLM\..\Run: [VEngine] C:\Program Files\Comodo\VEngine\VEngine.exe

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [Uniblue ProcessQuickLink 2] "C:\Program Files\Uniblue\ProcessQuickLink 2\ProcessQuickLink2.exe" /autostart

O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [VistaStartMenu] "C:\Program Files\Vista Start Menu\VistaStartMenu.exe"

O4 - HKCU\..\Run: [viwc] C:\WINDOWS\system32\viwc.exe

O4 - HKCU\..\Run: [LClock] C:\Program Files\LClock\LClock.exe

O4 - HKCU\..\Run: [Vista Sidebar] C:\Program Files\Vista Sidebar\sidebar.exe

O4 - HKCU\..\Run: [ViStart] C:\Program Files\ViStart\ViStart.exe

O4 - HKCU\..\Run: [ViOrb] C:\Program Files\ViOrb\ViOrb.exe

O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all

O4 - HKCU\..\RunOnce: [WindowBlinds] C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbconfig.exe

O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

O4 - Startup: Thoosje Vista Sidebar.lnk = C:\Program Files\Thoosje Sidebar V2.3\Thoosje Vista Sidebar.exe

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.liv...m/quickadd.aspx

O8 - Extra context menu item: Crawler Search - tbr:iemenu

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/b...lineScanner.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)

O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll

O23 - Service: AusLogics Windows Themes Helper (ALThemeHelper) - Unknown owner - C:\Program Files\AusLogics Visual Styler\themehelpersvc.exe

O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\Firewall\cmdagent.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exe

O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Owner/LOCALS~1/Temp/msohtml1/04/clip_image002.jpg

KService is a p2p item used by a few legit corporations (BBC for example) but it won't stop if you close the appropriate program and I would get rid of it (if you knwo you need it then keep it).

The bold items are things than can cause IE7 to spasm (top of the log), the bold and italic items are trying to load files that don't exist, these can be safely removed.

Check out my Computer FAQ if you want, it may prove helpful.

Edited by Dauth, 27 March 2008 - 18:28.

[Kichō]

Thank you very much Dauth.

Like I say this computer was built recently but still I could of gotten a virus or what not.

I use Firefox 3 beta 4 and Safarai...IE8 wont work as Drwatson keeps popping up saying it needs to close.

Kservice I need so I can download and watch BBC programs.

I'll check out the thread of yours for extra info.

I do have CCleaner should I run that?

Also Comodo Firewall pretty much acts like Vista's UAC as it tells me everything whats going on.

Again thanks.

[Kris]

About Ad-Aware hogging resources. Are you using the 2007 version of it? The Ad-Aware 2007 was a complete joke from lavasoft, Find Ad-Aware SE. Its much better even though you cannot get def files for it anymore D:

[Kichō]

Chris, on 28 Mar 2008, 0:00, said:

About Ad-Aware hogging resources. Are you using the 2007 version of it? The Ad-Aware 2007 was a complete joke from lavasoft, Find Ad-Aware SE. Its much better even though you cannot get def files for it anymore D:

Link to Ad-Aware SE?

Oh found it...It's a very old version? >.>

I'll stick witch Comodo antivirusspyware.(Another beta..)
And Sophos 4 in 1 scanner.

EDIT2:Ok this now freaks me out...Sophos claims that Hijackthis is a virus?

Edited by Zhen Ji, 28 March 2008 - 01:07.

[Dauth]

I use CCleaner regularly, you don't need adaware if you use firefox and the adblock plus addon you'll have a more efficient adblocker.

You use a lot of beta software and these can have bugs, I consider myself quite a geek when it comes to keeping programs up to date, but generally let the release come out first.

Sophos is a good AV program however it is wrong about Hijackthis. HJT is a heuristic anti-badware program and due to its methods can be used to disable pretty much anything (this is probably why sophos is worried).

How can someone based in China get the iPlayer working? Other than you're using my lisence fee money, I was sure international access was denied.

[Kichō]

Dauth, on 28 Mar 2008, 10:31, said:

I use CCleaner regularly, you don't need adaware if you use firefox and the adblock plus addon you'll have a more efficient adblocker.

You use a lot of beta software and these can have bugs, I consider myself quite a geek when it comes to keeping programs up to date, but generally let the release come out first.

Sophos is a good AV program however it is wrong about Hijackthis. HJT is a heuristic anti-badware program and due to its methods can be used to disable pretty much anything (this is probably why sophos is worried).

How can someone based in China get the iPlayer working? Other than you're using my lisence fee money, I was sure international access was denied.

Reason why I use beta software is because I like to try things out I'd like to help a company spot bugs etc.^^

I do agree Sophos is good antivirus but it's probably it's Heuristics that can cause false positives.

About the BBC Iplayer thing, When I was in the UK,(This computer was made in the UK)I installed some software and I came around Iplayer I downloaded that and when I left the UK it was fine,Nothing unusual happened. >.<

China doesn't ban everything.

[Dauth]

Well the world needs beta testers, since I have access to my university comupters through ssh I'm sure the admin would beat me with a stick if I used untested software.

HJT uses heurestics, not so sure about sophos, I don't use it I just know people that do.

Have you got rid of the toolbars yet?

[Kichō]

If you mean Google Toolbar/Crawler Toolbar for IE8 yes.

Removing them caused IE8 to work.

Thanks for helping^^

[Dauth]

Just glad I could help, for any other queries don't hesitate to MSN me or PM me (both are available in my profile)