wozofoz

Comodo Firewall Comodo Firewall Download There are 3 downloads Firewall or Antivirus or Comodo Internet Security (complete suite) Click the Firewall download. • During the installation you will be asked if you want to install Geek Buddy Note: It is a paid service so it's up to you. "So what's the solution? Today, every PC user should subscribe to an easy to use, reliable and inexpensive 24/7/365 Online Troubleshooting Service." • You will also be asked if you want to use the Comodo servers, I think it was to do with Trust Connect which is another paid service, so up to you. • You will also have to choose the 'level' of security you want to install. 1) Just Firewall: This is all you need if you are going to follow this setup by vman 2) Firewall and Defense+ (HIPS): This is selected by default but (again) if you are following this setup from vman you only want the Firewall because MalwareDefender is your HIPS 3) Firewall and Defense+ and Sandbox (if I remember correctly) I am loving Comodo Firewall version 5 very lite on resources and not intrusive but still powerful :smile: Edit: I see the flying fingers of vman have beat me to it :grin: All the best, woz of oz

Internet access Hi jjj :smile: I am not the expert on this but I would assume that Security Holes checker needs internet connection to check with the Windows Update site (or wherever) to make sure you are up to date. Knowing your fondness for tweaking your internet connection ( :smile: ) I ask if you have done any tweaking that might be stopping the automatic connection ? Just a thought All the best, woz of oz

Updated This was also discussed in the thread PC security analysis showing 3 security holes Have you checked for updates for your IObit software ? If not please do this. Do you have Windows Update set to Automatic and Install or have you manually checked for Windows updates ? Please go to Windows Update webpage and either: • Do an Express scan. If it tells you there are no High Priority updates then you can ignore the IObit Hotfix results until the issue is fixed. or • Do a Custom scan and then click Review your update history to see if the updates have already been installed. See the image below. If the updates have already been installed then you can ignore the IObit Hotfix results until the issue is fixed. http://forums.iobit.com/attachment.php?attachmentid=6057&stc=1&d=1286421495 All the best, woz of oz

Reset of settings Welcome to the forum esmo :smile: The first and easiest thing I would try is a reset of the settings. • Launch the software • Un-tick the settings • Click Apply • Exit the software • Launch the software • Tick the settings • Click Apply • Exit the software This has worked for me numerous times with various software when the settings have suddenly changed for no apparent reason. I don't know why the settings change, it seems to be random. Maybe it's just a Windows thing :roll: Good luck All the best, woz of oz

BitRemover That was a typo and it is actually called BitRemover :smile: All the best, woz of oz

Another use ? Please correct me if I am wrong but isn't the following another use: If a Virus/Malware has snuck onto the computer it might attempt to stop the ant-virus/malware software that is installed on the computer from updating. In this case it might be possible to download the Definitions database as you would a normal file and then copy/move it to the anti-virus/malware database folder. Hopefully you can then do a scan and the virus/malware will be identified and dealt with. All the best, woz of oz

How to send the file to IObit, if necessary How to send the file to IObit, if necessary: To ensure the sample was not cleaned/infected in transit, it is necessary to put all samples in password protected ZIP files. The password should be infected There may be an infection on your system, but we are unable to make a conclusive analysis without a sample being sent in this fashion. Note: The maximum file size of *.zip files on IObit forums is 488.3 KB. If the suspicious files you want to upload is more than that, please email the IObit Security 360 scan report to is360submit@iobit.com and send *.zip file as an attachment. If you can't upload the file to the forum or send the file to IObit as an email attachment: • Upload the Password Protected ZIP file (the password should be infected) to a file sharing website like http://www.wikisend.com/ or http://www.2shared.com or http://www.mediafire.com/ • Copy the link that is provided by the website • Paste the link in a new post in the forum thread Our IObit Specialist Team will do further investigation and solve it ASAP. How to copy and ZIP a file Once again using the example Security 360 Scan log from before you would follow the path laid out in the Scan log to get to the file. |Name|Type|Description|ID| Trojan.Agent, File, C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtr es.exe, 12-912 • Launch Windows Explorer (Windows key + E) • Open My Computer (click on the + on the left) • Open (C:) • Open Windows • Open Microsoft.NET • Open Framework • Open v2.0.50727 • Right click on the file cvtres.exe • Select the ZIP software from the Context Menu • Choose to add the file to a ZIP folder (probably called cvtres.zip) • Move the ZIP folder to the Desktop (or anywhere you like) • Open (double click) the ZIP folder • Select File (top Menu) • Select Add a password • infected is the password ************************************************************************** Here is the above procedure screenshots: http://forums.iobit.com/attachment.php?attachmentid=4430&d=1267438697 http://forums.iobit.com/attachment.php?attachmentid=4432&d=1267439096 Thank you for your assistance :smile:

How to upload a file to VirusTotal - 3 http://forums.iobit.com/attachment.php?attachmentid=4426&d=1267438266 [http://forums.iobit.com/attachment.php?attachmentid=4427&d=1267438289 http://forums.iobit.com/attachment.php?attachmentid=4428&d=1267438310 http://forums.iobit.com/attachment.php?attachmentid=4429&d=1267438326 Thank you for your assistance

How to upload a file to VirusTotal - 2 http://forums.iobit.com/attachment.php?attachmentid=4422&d=1267437431 http://forums.iobit.com/attachment.php?attachmentid=4423&d=1267437461 http://forums.iobit.com/attachment.php?attachmentid=4424&d=1267437476 http://forums.iobit.com/attachment.php?attachmentid=4425&d=1267437503 Continued in the next post -->>

How to upload a file to VirusTotal - 1 How to upload a file to VirusTotal: Some users are unsure of how to upload and scan a file at VirusTotal so here is a basic explanation. Please remember, your file may be stored in a different place so this general example is just the basics of what to do. The following example is an actual File Path taken from the forum but of course you should replace the various paths: Windows, Microsoft.NET, Framework, v2.0.50727 and cvtres.exe with those in your File Path. The example IObit Security 360 scan log used is: |Name|Type|Description|ID| Trojan.Agent, File, C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe, 12-912 The File Path (Description) is: C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe This File Path can be easily followed once you realise that backslash ( \ ) is the seperator, so when separated, this becomes: C: then Windows then Microsoft.NET then Framework then v2.0.50727 then cvtres.exe NOTE: Do not upload the IObit Security 360 scan log to VirusTotal, this will not give any true results. You must upload the actual file that the IObit Security 360 scan log has identified as a threat. In the example above the file would be cvtres.exe Here is the VirusTotal procedure: • Go to VirusTotal • Click Browse • On the left of the window that opens click My Computer • Open (double click) (C:) • Open Windows • Open Microsoft.NET • Open Framework • Open v2.0.50727 • Open cvtres.exe (it might just say cvtres in the window if the known extentions are not shown in Folder Options) The window will disappear and C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe will appear in the VirusTotal box. • Click Send File and wait (you may be in a queue) If it says File has already been analysed: you should reanalyse the file because your file might be infected • Click Reanalyse file now and wait When the VirusTotal scan has finished: • Note the result eg: Result: 0/41 • There is no need to copy the whole scan result, just copy the address from the browser address bar to post here. The address will look something like this: [noparse]http://www.virustotal.com/analisis/060a33f770835fa60172c4e02f4c1d3d19d643a2e915d478d07a01788ad5fdb2-1267420531[/noparse] Follow this procedure for all the threats listed in the IObit Security 360 scan. Thank you for your assistance ************************************************************************** Here is the same procedure laid out in screenshots: http://forums.iobit.com/attachment.php?attachmentid=4420&d=1267437039 http://forums.iobit.com/attachment.php?attachmentid=4421&d=1267437057 Continued in the next post -->>

Before reporting a False Positive, please read the following guidelines and requirements: First, use the latest version of IObit Security 360 and make sure IObit Security 360 has checked for database updates, then do a scan Step 1: Save a scan log Scan Log Example: IObit Security 360 OS: Windows XP Version:1.4.1.11 Define Version:1331 Time Elapsed:00:11:11 Objects Scanned:66286 Threats Found:1 |Name|Type|Description|ID| Trojan.Agent, File, C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe, 12-912 To read the log of the threat shown above notice that the seperator is comma ( , ). Name: Trojan.Agent Type: File Description: C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe ID: 12-912 Step 2: Upload the file(s) to VirusTotal @ http://www.virustotal.com/ If you are unsure how to upload files to VirusTotal, see Post # 2 NOTE: Do not upload the IObit Security 360 scan log to VirusTotal, this will not give any true results. You must upload the actual file that the IObit Security 360 scan log has identified as a threat. In the example above the file would be cvtres.exe When the VirusTotal scan has finished: • Note the result eg: Result: 0/41 • There is no need to copy the whole scan result, just copy the address from the browser address bar to post here. The address will look something like this: [noparse]http://www.virustotal.com/analisis/060a33f770835fa60172c4e02f4c1d3d19d643a2e915d478d07a01788ad5fdb2-1267420531[/noparse] Follow this procedure for all the threats listed in the IObit Security 360 scan. Step 3: Post your results in the Forum When you have the IObit Security 360 scan log and the VirusTotal scan result address you can post them here in the forum. • Go to the section False Positives Report • Click on New Thread (on the left near the top) • In the Title box put the name of the file that was listed as a threat. Using the example given above the Title would be cvtres.exe There may be more than one threat, in that case you can just choose one. If this is confusing for you just put the title False Positive ? and we will change it if necessary :smile: • Paste the IObit Security 360 scan log in the reply box • Write the VirusTotal scan result eg: Result: 0/41 • Paste the VirusTotal scan results address or addresses in the reply box. There is no need to include the whole scan result. • Click Preview Post and check that it looks ok • Click Submit New Thread Here is an example of what your post might look like: Title: cvtres.exe These first 2 steps are usually enough for the IObit Specialist Team to determine if the threat is a False Positive or not but sometimes it will be necessary to send the file to IObit so it can be checked completely. If asked to send the file, please see Post # 5 Thank you for your assistance :smile:

Version 1.4.1 Welcome to the forum King :smile: I'm not Melvin_Deal but I would like to ask, did you update to Security 360 1.4.1 that was available here on February 9th, 2010 ? This update fixes the bug. If you did update and the bug was still there, did you try the 'fix' samr mentioned in post # 339 of this thread ? He later quotes the fix in post # 341 which is the one before your post. If you go to post # 340 you will see my update went very smooth but I guess that was because I had not previously put the Flash Player 'problem' in the Ignore list. If the samr fix doesn't work I would suggest you do a Clean Install If you are unsure how to do a Clean Install go to Usage of IObit Products - Over the top/Clean install After un-installing the IObit software and deleting the folders I recommend you also use the BitRemover tool that is mentioned in that post to clean up any leftovers. Then clean the Registry All the best, woz of oz

Try this Edit: It seems you don't need the following help but I will leave it here just in case. However, this information is important I think. Now for my original post: There have been some forum problems and that is probably why you got the invalid link message, the link is working now. Clean Install go to Usage of IObit Products - Over the top/Clean install After un-installing the IObit software and deleting the folders I recommend you also use the BitRemover tool that is mentioned in that post to clean up any leftovers. Then clean the Registry I found these instructions to uninstall AT&T (and Yahoo) components, see this FAQ @ http://www.dslreports.com/faq/7950 After following the instructions in the FAQ I would suggest you Restart your computer then Exit ASC completely (if necessary) then remove the Ignore file from ASC (it will be created again) then start ASC and check the Startup Manager. For instructions on removing the Ignore file see This Post for details. This will clean out all the unnecessary items from the Startup Manager list. All the best, woz of oz

All good here • I checked for an update with version 1.4.0 and it said there were none. • I downloaded version 1.4.1 and installed it over the top (no clean install) and everything went well. • I again checked for an update and there was now a Definitions update which I installed but this did not change the database Definitions # which is still 1321. • I checked for Security Holes and the Macromedia Flash Player problem (See Here) was not there anymore. Note: I had never tried to put the Macromedia Flash Player problem in the Ignore list, I just disregarded it. • I ran a Smart Scan and the RTNicProp32.dll False Positive (See Here) was still there, so I will have to wait for Definition update 1322 All is good so far and looking forward to Definitions update 1322 :smile: All the best, woz of oz

ASC Clean Install I suggest when you update to v 3.5 you do a Clean Install This will get rid of the extra items that have been 'saved' by the Startup Manager but you will have to re-configure ASC as all your Options (Preferences) will be lost. If you are unsure how to do a Clean Install, go to Usage of IObit Products - Over the top/Clean install Don't forget to use the BitRemover tool that is mentioned in that post. As to the multiple entries of Self Support Tool, I found this @ http://www.techspot.com/startup/12284/ Is this the tool you have/had ? Note the sentence I have put in Bold All the best, woz of oz

Moved Welcome to the forum oneperrev :smile: I moved your post to this thread where there is already a discussion happening. Did you do a Clean Install ? If you are unsure how to do a Clean Install, go to Usage of IObit Products - Over the top/Clean install All the best, woz of oz

Upload to VirusTotal Welcome to the forum RayK :smile: Please upload the file to VirusTotal for analysis and post the link to the scan report here. If you are unsure how to upload and scan a file at VirusTotal, see Post# 4 of the thread Guidelines and Requirements for Reporting a False Positive :smile: All the best, woz of oz

Me too That's exactly what mine does as well. I think it's a useful feature, as I can easily decide what I want to do. It should probably be called Minimize instead of Close though :wink: Edit: And Options should say something like 'Always Minimize to System Tray' instead of 'Minimize to System Tray when program is closed' All the best, woz of oz

Funny Bunny A friend sent me this :lol: All the best, woz of oz

Should be easy Welcome to the forum kliffroger :smile: I guess you mean Advanced System Care and you have version 3.4.0 ? Normally you should not have to make any changes to host or IP address or port etc To get Advanced System Care updates just clicking on the Update link on the screen should be enough (as long as you have an internet connection) But at the moment the update feature is not working in version 3.4.0 which I guess is what you are experiencing. If you want you can install a previous version that will update the databases, see this post http://forums.iobit.com/showpost.php?p=29331&postcount=12 I have not bothered to do this, I am staying with version 3.4.0 until IObit fixes the update feature, hopefully this will not be long :smile: All the best, woz of oz

I am not a zero, I am the one There are 3 types of people in the world. Those that understand Binary and those that don't. :mrgreen: All the best, woz of oz Shouldn't it be 10 types?

One evening an old man is sitting on a bench when a young man approaches: Young man: Excuse me sir but I am doing a survey, do you mind if I ask you a few very personal questions ? Old man: Not at all, go right ahead Young man: When was the last time you had sex ? Old man: Hmmm, let's see, that would be 1959 The young man starts laughing then stops himself Young man: I am sorry for laughing sir but that is a very long time ago Old man: Not really sonny, it's only (looks at his watch) 21:45 now All the best, woz of oz

Sorry to be a pest I deleted the 'theat' that I got in the previous post but it has come back again. Here is the report from today and it is exactly the same as on the 11th Maybe this has something to do with it: I installed Everything Search and then went to Administrative Tools > Settings and changed Windows Search from Automatic to Disabled. I also customized the Start Menu and took the Search icon out. After deleting the threat on the 11th I found that the Search icon was back in the Start Menu the next time I started my computer. I have not deleted the 'threat' this time (it does not quarantine just deletes) and will see what happens :) EDIT: Here is the Hijack Scan report. The 'threat' is still on my computer during this scan Logfile of IObit HijackScan v1.0.0.0 Scan saved at 3:48:26, on 2009-9-13 Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\IObit\IObit Security 360\IS360srv.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\LAUNCH~1\QtZgAcer.EXE C:\Acer\Empowering Technology\eRecovery\eRAgent.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\RocketDock\RocketDock.exe C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\PhraseExpress\phraseexpress.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\igfxext.exe C:\WINDOWS\system32\igfxsrvc.exe C:\Program Files\IObit\IObit Security 360\is360.exe C:\Program Files\IObit\IObit Security 360\IS360tray.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\WordWeb\wweb32.exe C:\Program Files\IObit\IObit Security 360\a_hijackscan.exe O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\SPYBOT~1\SDHelper.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKCU|\Software\Microsoft\Windows\CurrentVersion\Run\: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" O4 - HKCU|\Software\Microsoft\Windows\CurrentVersion\Run\: [smartRAM] "C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe" /m O4 - HKCU|\Software\Microsoft\Windows\CurrentVersion\Run\: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [LaunchApp] Alaunch O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [M3000Mnt] Rundll32.exe M3000Rmv.dll ,WinMainRmv /StartStillMnt O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O8 - Extra context menu item: &Download by Arles Download Manager - O8 - Extra context menu item: E&xport to Microsoft Excel - O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700}LegitCheckControl.LegitCheck.1 - http://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}Java Plug-in 1.6.0_16 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}Java Plug-in 1.6.0_16 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}Java Plug-in 1.6.0_16 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab O23 - Service: Apple Mobile Device (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus (avast! Antivirus) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner (avast! Mail Scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner (avast! Web Scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Bonjour Service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: iPod Service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: IS360service (IS360service) - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe NOTE: O8 - Extra context menu item: &Download by Arles Download Manager I tried and deleted Arles Download Manager using Revo UnInstaller long ago, other than that I don't know. All the best, woz of oz

I'm not sure I hope this is the right section. When I launched Software Information Windows (portable version) I got the following pop-up from Security360. I have never got this before but I had just updated the Security360 database. I canceled and exited SIW then I ran a Security360 Full Scan and got the following: I deleted this 'threat' I don't know if there is any relation between the two. Thanks for the help :smile: All the best, woz of oz

Hi garybear :smile: I got this as well and the Secunia website has this to say: Read more here "Successful exploitation requires that the user is tricked into visiting a malicious web site." Careful what you click :!: All the best, woz of oz