Larry, remember to just right click the file and look at the properties, it should tell you there if it's from HP or where ever. -Clint God Bless Clint Hamilton, Owner http://www.OrpheusComputing.com http://www.ComputersCustomBuilt.com ----- Original Message ----- From: "LarryB" added comments to this post. =========================== LarryB Have a great day Clint Hamilton-PCWorks Admin wrote: > Ok but what happens when you go to the update tab and look > for > updates? Does it download and install updates, or does it > always say nothing is available? If the latter, then that's > the problem I described. It hasn't had any definition > updates > in years. Yes, ZA can really slow things down. I haven't > used > it in a long time, but if it has any AV part to it, disable > it > (since it obviously doesn't work well either). > Can't update as none are available. ========================================================= > I can't help you with AVG since I never used it. All I say > is > to go through ALL of its options, tools or settings, and make > sure ALL files are scanned--not just exe files, the real-time > active scanning or shield is on all the time for files and > webpages, and any heuristics option is on and set to the max. I will check AVG and see if there any items I may have missed. ================================================================= > > I'm not familiar with the "System performance monitor", did > you > add that? I did not add it. It just started to show up with this yellow triangle. ========================================================================= What's it from, HP? I really can't tell where it comes from. ======================================================================== It could be an IM part of > Messenger which should be disabled if you don't use it. It > could also be the infection you have. See this for possible > info on it: > http://www.itc.virginia.edu/desktop/docs/messagepopup/ > http://forums.techguy.org/malware-removal-hijackthis-logs/494678-systray-virus-alert-your-computer.html > http://forums.cnet.com/5208-6132_102-0.html?hhTest=1&forumID=32&threadID=201375&messageID=2159757 > It may go away once your PC is clean. > -Clint > > > ----- Original Message ----- > From: "LarryB" > > > I don't see anything that says I can get updates to Sygate. > > I did the immunization thing with SB and also with Spyware > Blaster. > I don't see where it scans anything so it must just stop > spyware from > getting in. > > My AV program might not be set correctly either. If not then > I > be back > to get advice on what's good. > > I use to have Zone Alarm but it seemed with every update > things > got > slower so I dumped it. > > Now I understand that ZA's firewall it in the top 10. > > I'm printing these emails out so if I lose the ability to > reach > the > Internet I will still have these emails. > > I am getting a yellow triangle with System performance > monitor > warnings and don't know if it is the Trojan telling me or my > legit > system telling me. It suggests I click the balloon to > download > spyware > so it is probably bad. > > > Larry Browning > K & L Electronics > Anderson, SC > > > > Clint Hamilton-PCWorks Admin wrote: > >>SB is free, that's their only version. So can you get >>updates >>for Sygate? >> >>This is probably your problem: iebtm.exe & iebtmm.exe, these >>are backdoor Trojans. >>http://www.fileresearchcenter.com/I/IEBTM.EXE-13001.html >>http://www.bleepingcomputer.com/startups/iebtm.exe-23379.html >>http://www.greatis.com/appdata/d/i/iebtmm.exe.htm >>http://www.bleepingcomputer.com/startups/iebtm.exe-23379.html >>Do a search on them for more info and how to remove it. >>Obviously AVG missed it and I would use another AV program. >> >>I wanted to post that now ASAP, I'll go over the rest next. >>-Clint >> >> ========================= The list's FAQ's can be seen by sending an email to PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line. To unsubscribe, subscribe, set Digest or Vacation to on or off, go to //www.freelists.org/list/pcworks . You can also send an email to PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line. Your member list settings can be found at //www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks . Once logged in, you have access to numerous other email options. The list archives are located at //www.freelists.org/archives/pcworks/ . All email posted to the list will be placed there in the event anyone needs to look for previous posts. -zxdjhu-