Windows Update error 0x80072EFD

Help for v2
#1

Hello!
I searched a lot and no solution worked for me. When CPF is on I just can’t use windows Update site, I just get an error 0x80072EFD and Comodo’s logs shows:
Date/Time :2006-10-10 22:20:58
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:65.55.192.126:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 65.55.192.126:http(80)

Date/Time :2006-10-10 22:20:58
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:207.46.209.122:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 207.46.209.122:http(80)

Date/Time :2006-10-10 22:20:58
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:207.46.211.124:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 207.46.211.124:http(80)

Date/Time :2006-10-10 22:20:56
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:72.246.49.40:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 72.246.49.40:http(80)

Date/Time :2006-10-10 22:20:56
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:72.246.49.49:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 72.246.49.49:http(80)

Date/Time :2006-10-10 22:20:56
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:72.246.49.42:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 72.246.49.42:http(80)

Date/Time :2006-10-10 22:20:56
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:72.246.49.35:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 72.246.49.35:http(80)

Date/Time :2006-10-10 22:20:55
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:72.246.49.32:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 72.246.49.32:http(80)

Date/Time :2006-10-10 22:20:54
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:200.216.69.231:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 200.216.69.231:http(80)

Date/Time :2006-10-10 22:20:54
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:200.216.69.230:http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 200.216.69.230:http(80)

Are there any rules I can create to stop that?

Thanks in advance.

#2

Go to the Component Monitor (Security tab). Scroll down until you find services.exe. If it’s blocked, Allow it. Scroll down some more until you find svchost.exe. If it’s blocked, Allow it. Press Apply at the top of the screen. Neither of these module should be blocked if you want Windows Update to work.

But, be advised… not all the URLs in your log are anything to do with Microsoft Update. The 72.246.49.* lot are old friends (search the forums) Akamai Technologies & 200.216.69.230 is Latin American and Caribbean IP address Regional Registry… this is a whois… if you didn’t do it or have some bit of software doing it, then you should investigate this.

#3

Hello! Thanks for answering fast.
Both are not even in the componet monitor. Should I add them?

Well… I didn’t do a thing, how can I investigate?
I live in Latin America if this helps.

EDIT: I turned off Comodo, made Windows Update, restarted and now WU is working again with CPF on. That’s odd… but I’m happy it’s OK.
Those IP logs that are concerning me, can you help me to investigate?

#4

I’m not sure, since I wonder why CPF is blocking them without orders… so to speak. Check the Application Monitor & check if either of them are in there.

Well... I didn't do a thing, how can I investigate?

To find out more about Akamai do a Search on these forums for that word or do a Google search. Some software providers use Akamai (ie. software on your system).

I live in Latin America if this helps.

No, not really. Did you know what a whois was?

#5

I can’t find anything about Akamai here. I Googled it a little and I couldn’t see any relation about it and any software I use.
The logs stoped after the restart also. I’ll keep an eye on my logs and post if they show up again.
Thanks for helping.

#6

From Google I got 288,000 hits for the phrase “Akamai spy” ::slight_smile:

#7

Do you know an anti-spy that can catch it? None that I use got it.

This is interesting: http://www.petri.co.il/wu_problems_800a138f.htm

#8

I think some of those links in google tell how to git rid of it. But, listen… Akamai can also be legitimate. I had it and I think Zone Lab’s Zone Alarm Pro left it behind. Seriously, software that you just wouldn’t connect with the name Akamai actually use it. I’m not 100% sure what they do & there is risk that some software you have will either cease to function or be impaired. That’s why I’m a bit reluctant to give a direct link to a program to remove it.

Anyway… if you didn’t run a “whois”… worry about that more!

#9

I didn’t find any trace of Akamai here. I followed the instructions and I have none of the files.
About the Whois, I didn’t run it, but, after the restart, I don’t see it on my logs anymore. I’m doing a bunch of tests and they’re OK. Maybe I had that results cuz I turned off CPF to do the windows update.

#10

I recommend you visit HijackThis… don’t worry they don’t Hijack you or anything. The page explains what it does, you can download the software & run it on your system. There is some sort of automatic help to analyze the log it produces, called Self Help I think. You can send back your results to be analyzed. It looks for any bad or suspicious entries. Actually, if you’re running CAVS, it will think that is suspicious because it doesn’t know about CAVS yet. And can always post the log here as well… someone might notice something.

#11

I already use Hijack This, I can’t live without it, lol! (:WIN)
Anyways… here’s my log:

Logfile of HijackThis v1.99.1
Scan saved at 00:29:18, on 11/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Arquivos de programas\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WService.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Arquivos de programas\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Arquivos de programas\AntiVir PersonalEdition Classic\avgnt.exe
C:\Arquivos de programas\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\CTHELPER.EXE
C:\Arquivos de programas\Spyware Terminator\SpywareTerminatorShield.exe
C:\Arquivos de programas\iTunes\iTunesHelper.exe
C:\Arquivos de programas\Comodo\Firewall\CPF.exe
C:\WINDOWS\mHotkey.exe
C:\Arquivos de programas\ScannerU\KYESCAN.EXE
F:\Yzdock\YzDock.exe
C:\Arquivos de programas\AntiVir PersonalEdition Classic\sched.exe
C:\Arquivos de programas\AntiVir PersonalEdition Classic\avguard.exe
C:\Arquivos de programas\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\DRIVERS\WtSrv.exe
C:\Arquivos de programas\iPod\bin\iPodService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\alg.exe
F:\Emule\emule.exe
C:\Arquivos de programas\MSN Messenger\msnmsgr.exe
F:\Arquivos de programas\ICQLite\ICQLite.exe
C:\Arquivos de programas\Xfire\Xfire.exe
C:\WINDOWS\system32\svchost.exe
F:\uTorrent\utorrent.exe
C:\Arquivos de programas\Mozilla Firefox\firefox.exe
F:\RanGS\Game.exe
F:\ARQUIV~1\FREEDO~1\fdm.exe
C:\WINDOWS\system32\wuauclt.exe
G:\Escanteio\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = &http://home.microsoft.com/intl/br/access/allinone.asp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:4001
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Arquivos de programas\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de programas\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - F:\Arquivos de programas\Free Download Manager\iefdmcks.dll
O4 - HKLM..\Run: [WService] WService.EXE
O4 - HKLM..\Run: [REGSHAVE] C:\Arquivos de programas\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM..\Run: [HPHUPD05] C:\Arquivos de programas\Hewlett-Packard{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM..\Run: [CTSysVol] C:\Arquivos de programas\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM..\Run: [avgnt] “C:\Arquivos de programas\AntiVir PersonalEdition Classic\avgnt.exe” /min
O4 - HKLM..\Run: [HP Software Update] C:\Arquivos de programas\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM..\Run: [nwiz] nwiz.exe /install
O4 - HKLM..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM..\Run: [SpywareTerminator] “C:\Arquivos de programas\Spyware Terminator\SpywareTerminatorShield.exe”
O4 - HKLM..\Run: [iTunesHelper] “C:\Arquivos de programas\iTunes\iTunesHelper.exe”
O4 - HKLM..\Run: [QuickTime Task] “C:\Arquivos de programas\QuickTime\qttask.exe” -atboottime
O4 - HKLM..\Run: [Comodo Firewall] “C:\Arquivos de programas\Comodo\Firewall\CPF.exe” /background
O4 - HKLM..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM..\Run: [ISUSScheduler] “C:\Arquivos de programas\Arquivos comuns\InstallShield\UpdateService\issch.exe” -start
O4 - HKLM..\Run: [CHotkey] mHotkey.exe
O4 - HKCU..\Run: [STYLEXP] C:\Arquivos de programas\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU..\RunOnce: [ICQ Lite] F:\Arquivos de programas\ICQLite\ICQLite.exe -trayboot
O4 - Startup: YzDock.lnk = F:\Yzdock\YzDock.exe
O4 - Global Startup: KYESCAN.lnk = C:\Arquivos de programas\ScannerU\KYESCAN.EXE
O8 - Extra context menu item: Download all with Free Download Manager - file://F:\Arquivos de programas\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://F:\Arquivos de programas\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download with Free Download Manager - file://F:\Arquivos de programas\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: ÔÚFoxmailÖÐÌí¼Ó¸ÃRSSƵµÀ/ƵµÀ×é - res://C:\WINDOWS\system32\fmrsslink.dll/201
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - F:\Arquivos de programas\ICQLite\ICQLite.exe
O9 - Extra ‘Tools’ menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - F:\Arquivos de programas\ICQLite\ICQLite.exe
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {2A7EFEAA-8059-4C69-8FE2-4BA999C3B102} (TrickCtrl Class) - https://ssl2.gcrest.com/trickster/cabs/TrickLauncher.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.2.2.89.cab
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5FFFA267-0B81-42B4-BE64-77B5C9FE287F} (MinWebLauncher Control) - http://www.playran.com/game/MinWebLauncher.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab
O16 - DPF: {89981B1D-07DA-43C3-9770-06C51E7E5DCE} (NostaleWebStarter Control) - http://game.nostale.com/sso/NostaleWebLauncher.cab
O16 - DPF: {ADCC68D4-AAEA-4338-817D-1F261D9FB759} (ENetLauncher Control) - http://www.dragongemworld.com/Active_X/ENetLauncher.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O16 - DPF: {C8F5F737-2683-40B8-BFB6-47B15AC20A79} (Game Starter Control) - https://service.gamania.co.jp/auth/NewX/lcjggame.cab
O16 - DPF: {CEA3052D-65B9-44E2-A501-5E14024BC66F} (TricksterActiveX Control) - http://www.tricksteronline.com/control/tricksterActiveX.cab
O16 - DPF: {D88C7675-7CEE-4C9A-BDD4-7A43EED7794D} (Logout Class) - http://www.tricksteronline.com/control/KALogoutComponent.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15023/CTPID.cab
O16 - DPF: {F7899FAE-51C9-4EF5-B98C-A64997635235} (GSPRunGame Class) - http://www.playinfinity.net/cab/WindyGSPAx.cab
O17 - HKLM\System\CCS\Services\Tcpip..{B49A909C-E859-49AF-99EE-A86085A4F67C}: NameServer = 200.149.55.140 200.165.132.147
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Arquivos de programas\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Arquivos de programas\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Arquivos de programas\Comodo\Firewall\cmdagent.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Arquivos de programas\Arquivos comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Arquivos de programas\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Arquivos de programas\Arquivos comuns\PCSuite\Services\ServiceLayer.exe
O23 - Service: StyleXPService - Unknown owner - C:\Arquivos de programas\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: WinTab Service (WinTabService) - Unknown owner - C:\WINDOWS\system32\DRIVERS\WtSrv.exe

WService is not a virus, it’s my tablet’s driver. They have the same name, lol! (:TNG)

What can I do about the whois? (:SAD)

#12

Just to throw my opinion in, with all the items you have and since the update error is obviously pointing to your firewall with the svchost.exe. I would suggest simply doing this, uninstall CPF, restart. Use Ccleaner or some other PC clean up utility. Reinstall Comodo, reboot, install in automatic config mode, and then try to run updates. If you further need to configure your firewall , you can then do so. I find that I have to install my firewalls last of any apps or re-install to get it working.

Paul

#13

But it started to work normally when I rebooted.
I had a strange problem and I had to do a system restore previous to the Windows Update, when I re-did WU it was normal.
Strange stuff… I think I’ll just format or wait till Vista comes if it’s an usable OS.
Thanks a lot for helping me.

#14

To be honest, while there is no limit technically unless bound by drive space and RAM as to how many running\non running programs we can have, I find many times when even a large drive gets enough installed programs , things tend to go haywire. Eventually you start to get errors etc…things not working and yes, a fresh install is fine every so often. If without trouble, I reinstall every 6 to 8 months. Do you run a disk defragmenting utility, and\or cleanup utility? This can help a lot. Also, keeping install files in one spot, docs, pics, music, seems to keep the pc functioning better. Just a few thoughts before you re-install the OS. If you don’t know of some utilities , Windows has a couple but there are better free ones as well. Just ask. :wink:

Paul

#15

Thanks, Comicfan, I know all those stuff… It doesn’t look like but I’m pretty an advanced user.
I’m concerned about some logs I found today…

Date/Time :2006-10-11 17:05:42
Severity :High
Reporter :Network Monitor
Description: DDOS Attack (SYN Flood)
Duration: 20 seconds # of packets: 155 # of attackers: 1
Attacker(s): 200.216.69.231
The firewall has switched to EMERGENCY mode

Date/Time :2006-10-11 17:04:22
Severity :High
Reporter :Network Monitor
Description: TCP Port Scan
Attacker: 200.216.69.231
Ports: 21768, 58119, 52999, 19976, 33800, 34312, 30984, 35080, 58375, 56839, 34568, 57607, 33032, 62983, 33544, 60679, 62471, 59399, 59911, 63495, 60935, 61959, 61191, 3080, 1288, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
The attacker has been temporarily blocked

I made a tracert and that IP comes from Akamai. What the hell? I searched my computer like crazy and I didn’t find anything concearning Akamai’s spy… no files… no nothing.
I wouldn’t be so worried if this IP came from some random hacker wanna be, I would just mail his or her ISP. But it’s Akamai! I have no clue what to do since I can’t find any trace of spywares here.

#16

Hi, this may be an attack on the akamai server itself, flooding the network. I don’t know about other places but this is a federal offense. Perhaps contact akamai and alert them, but they probably know. The DDOS attack is denial of service. Many have told me , bull, I have NTFS not DOS so i’m safe, loll, well it’s not that DOS, not that you don’t know that, I just think it’s funny. Unless one of the other guys can help you , this is my suggestion.

Paul

#17

Check to make sure your “Spyware Terminator” program is legit:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

cheers, rotty

#18

Lol! Its legit, I got it from the official site and it’s recommended by a MVP Microsoft forum.
Just now it avoided a Nero video filter installer to change my IE start page. (:TNG)
I don’t think I’ll use that filter anymore… I just got it to fix mine that’s corrupted.

#19

EDIT: Confused an MVP with a person with MCSE (Can be a load of you know what) with a MVP, though i still doubt that any MVP forum would recommend “Spyware Terminator” but anyways, whatever rocks your boat.

As long as you did not get it from one of the rogue sites, that’s the main thing. Other then that your log seems fine, i would not worry to much, if you are worried go to http://www.kaspersky.com and use their online virus scan it will not delete anything for you but if you are knowledgeable enough it gives you vital clues as to what is up.

cheers, rotty

#20

Akamai is a Japanese company, the provide bandwidth for downloads, means they host file for people to download, their bandwidth amount will make you drool all over yourself, if they got DDOS, thats common cause lots of peeps are downloading stuff from they. Its like they have 0 downtime, if they have even 1 minute of downtime, the world is ■■■■■■■.