Donna said:
Thanks for the suggestion Tim
I don't have ZoneAlarm installed on my computer but your comment about the
firewall makes me think that is something that Rogers Online Protection has
installed to support their firewall version. I disabled it but it still scans
and I cannot change the priority. I guess I will write to them
Cheers
Donna
A number of ISPs appear to use software written by RadialPoint. What I can't
tell, is whether RadialPoint is just a "delivery vehicle", a way for Rogers
to push other software to the machine, or what the idea is. This is an
example of a Rogers download. The download looks too small, to be a complete
software suite.
http://radialpoint.fileburst.com/rogers/SPA20/current/RogersServicepointAgent.exe
Looking at various HijackThis results files, I don't see a correlation between
"scanningprocess.exe" and things like rps.exe .
For example, Verizon offers their customers software like Rogers does,
and this is an example of the path. The install path is different for
each ISP.
C:\Program Files\Verizon\Verizon Internet Security Suite\RPS.exe
Someone with a Sympatico package installed...
C:\Program Files\Bell\Security Manager\RPS.exe
These appear to be examples of Rogers installed files. As far as I know,
RPS stands for RadialPoint Software. This is not a complete list,
just a few I could copy and paste.
C:\Program Files\Rogers Online Protection\Rogers Online Protection\Fws.exe
C:\Program Files\Rogers Online Protection\Rogers Online Protection\rps.exe
C:\Program Files\Rogers Online Protection\Rogers Online Protection\RpsSecurityAwareR.exe
C:\Program Files\Rogers Online Protection\Rogers Servicepoint Agent\RogersServicepointAgent.exe
C:\Program Files\Rogers Online Protection\Rogers Servicepoint Agent\RogersServicepointAgentComHandler.exe
C:\Program Files\Rogers Online Protection\Rogers Online Protection\RpsSecurityAwareR.exe
C:\Program Files\Rogers\SelfHealing\rogersagent.exe
C:\Program Files\Rogers Online Protection\Rogers Online Protection\pkR.dll (popup blocker)
C:\Program Files\Rogers\SelfHealing\SHS.exe
C:\Program Files\Rogers\Update Manager\UpdateManager.exe
*******
I think I'd want to search the computer first, and see if I can find
where "scanningprocess.exe" is stored. That might give a hint as
to what it is part of. It is possible more than one program
uses a name like that. You may not be able to find it, but if
it is visible somewhere, the path to the file may tell you
something, like the examples above. If you find it, try
doing "Properties" on it and so on, to try to learn more
about it.
You could also download and try "Autoruns", which is a tool
that can show what programs are configured to run automatically.
Maybe there is some info there that explains where
scanningprocess.exe is coming from.
http://technet.microsoft.com/en-us/sysinternals/bb545027.aspx
Some of the Sysinternals tools will set off AV software. On a machine
that had Kaspersky on it, some of the Sysinternals programs would
cause the computer to lock up, as Kaspersky and the program got
into a knife fight. I hope "Autoruns" is benign enough, that such
a knife fight won't break out. On that computer, I had to sort
Sysinternals programs into two piles, the ones that would lock
the computer, and the ones that Kaspersky would allow to run.
(I wasn't really interested in attempting to reconfigure Kaspersky,
every time I wanted to run a program.)
Paul