unknown processes

[Guest]

The following is a list of the Processes running on my computer with my user
name attached. ANyone know what are the files and should they be deleted?
Thanks

sysclean.exe
conime.exe
explorer.exe
ctfmon.exe
teatimer.exe
rundll32.exe
LVComS.exe
qttask.exe
realsched.exe
nwtray.exe
prism.exe
wscntfy.exe
alg.exe
logiTray.exe

 

[Andy Bonanno]

Find a list of files at www.answersthatwork.com . This site should be able
to explain most of them for you.

 

[Guest]

The following is a list of the Processes running on my computer with my user
name attached. ANyone know what are the files and should they be deleted?
Thanks

sysclean.exe
conime.exe
explorer.exe
ctfmon.exe
teatimer.exe
rundll32.exe
LVComS.exe
qttask.exe
realsched.exe
nwtray.exe
prism.exe
wscntfy.exe
alg.exe
logiTray.exe

You have at least 1 worm (RAT)
Scan for viruses, An online virus scan link is listed below


qttask.exe > quicktime-unneeded
realsched.exe>Realplayer-unneeded
LVComS.exe>Webcam
ctfmon.exe >text to speach If you stop this it will just renable itself
whenever any MS office product is started

A RED FLAG> conime.exe
http://www.liutilities.com/products/wintaskspro/processlibrary/conime/
http://www.pestpatrol.com/PestInfo/b/bfghost_1_0.asp

Another RED FLAG> sysclean.ex
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.yoink.html
http://vil.nai.com/vil/content/v_100069.htm



Sometimes,when you remove malware it will stop your TCP/IP
stack from working (Internet connection).
Winsock or LSP-fix will correct the problem,Download first.
Note to anyone using NOD32 Anti-Virus software,Do Not delete the
"imon.dll" this fix reports,That is your e/mail scanning engine.

YES-You need more than 1 malware program,I use all of these.
LSP-fix- http://www.cexx.org/lspfix.htm
Spybot S&D - http://www.safer-networking.org/en/index.html
CWS Smart Killer- http://www.safer-networking.org/minifiles.html

About Buster- http://www.spychecker.com/program/aboutbuster.html
Ad-Aware SE - http://www.lavasoftusa.com/software/adaware/
CWShredder - http://www.majorgeeks.com/download4086.html
Hijack this - http://www.majorgeeks.com/download3155.html\
Hijacjthis tutorial -http://forums.maddoktor2.com/index.php?showtopic=165
SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html
SpywareGuard - http://www.javacoolsoftware.com/spywareguard.html
WinPatrol - http://winpatrol.com
BHODemon - http://pcworld.com/downloads/file_download.asp?fid=23611&fileidx=1
Bazooka -http://www.kephyr.com/spywarescanner/index.html
asquared2 "Trojan Remover" - http://www.emsisoft.com/en/
Socklock- http://nsclean.com/socklock.html

NOD32Anti-Virus Free 30 day trial
http://nod32.com/download/trial.htm

A link for free online virus and trojan scanners.
http://virusall.com/downscan.html

A listing of BHO's
http://www.spywaredata.com/bho.php?current_page=0

To see if that freeware program you are about to inststall
is infested with spyware check it out first at this link.
http://www.spychecker.com/


To help stop unauthorized downloads via your activex controls change your
default settings.
These settings are good for XP. The wording should be close for other systems
as well.
Go to control panel and open "internet options.
Click on the security tab then custom level.
make sure these settings are as follows.

Download signed active x controls>set to prompt
Download unsigned active x controls>set to disable
Initialize and script active x controls not marked as safe>set to disable
Run active x controls and pluggins>set to enable
Script active x controls marked safe for scripting>set to enable
Java permissions>set to high
Launching programs and files in a IFRAME" > Prompt
Installation of Desktop items"> Prompt
Navigate sub-frames across different domains>prompt

Free Firewalls
ZoneAlarm (Free and up)
http://snipurl.com/6ohg

Kerio Personal Firewall (KPF) (Free and up)
http://www.kerio.com/kpf_download.html

Outpost Firewall from Agnitum (Free and up)
http://www.agnitum.com/download/

Sygate Personal Firewall (Free and up)
http://smb.sygate.com/buy/download_buy.htm

NTbackup link
http://www.onecomputerguy.com/software/ntbackup.msi
Erunt- http://home.t-online.de/home/lars.hederer/erunt/index.htm