Hi bjm,
Well, here goes--I'll try to answer what I can.
NIS current ver for 09 at some point u may want to Upgrade for free to 2010 ...I do have it and will do so when computer is running OK...
FF 3.5.5 has known patched security vulnerabilities fixed in current FF 3.6.3 ...Ditto--will update after test run.
April 13th was Microsoft Download Tuesday...second Tues every month....when you are connected ..Please run Windows Update...multiple Vista Updates should be available: .Ditto--will update after test run.
Shockwave Flash is current
Java is outdated version with known security issue...the current ver 6.0.190.4 also has a known security issue...for now disable Java...so few apps use it....I run with it disabled all the time: How do I do this?
Cookies > Tools Options > Privacy > untick Accept third party cookies: Is this supposed to be in FF? Under Tools, Options, Privacy there is only "Remember History/Never/Use Custom settings button, links to "clear your recent history" or "remove individual cookies" and a Location Bar setting. Perhaps this is because I am working offline?
Review Norton Security History > Resolved Risks / Unresolved / Quarantine ~ review all History ~ anything not look OK
Norton Icon has green check? Norton has the green tick--I looked in the history and around the time I got the trojans it didn't detect anything--I can't really tell what does or doesn't look OK, but around that time it says,
IP address has diasppeared from adapter NVIDIA nForce 10/100 Mbps Ethenet #2 and is no longer being protected (IP address: fe80;;1163;ec6d:4429:4320
about 27 mins later it says
IP address has diasppeared from adapter NVIDIA nForce 10/100 Mbps Ethenet #2 and is no longer being protected (IP address: 192.168.0.7)
About an hour and half later itsays it is protecting the connection to a newly detected network at the same addresses. Then, "an instance of "C:\Program Files\Java\jre6\bin\java.exe is preparing to access the internet" is detected.
Then, 2 entries with low severity: " pdfupd.exe made 3 modifications to yourSystem Configuration" is detected, followed by "xjrfledtssd.exe accessed your network resources" is detected.
Then, "An instanceof c:\Users\Online and Email\AppData\Local\ulsvrewgv\xjrfledtssd.exe is preparing to access the Internet" is detected.
Then, Norton Community Watch Feedback is processing.
Then, "Firewall rules were automatically created for xjrfledtssd" twice.
Then, under Medium Severity, "Unauthorized access logged" (Access Process Data) is Logged. (The actor is c:\users\online and email\appdata\local\ulsvrewgvlxjrfledtssd.exe)
This looks odd to me--there are also a few entries that were detected as firewall activities "Rule Default Block mircorosoft Windows 2000 SMB" blocked communication, " but then only pretty regular entries until another
Medium Severity, "Unauthorized access logged" (Access Process Data) is Logged. (The actor is c:\users\online and email\appdata\local\ulsvrewgvlxjrfledtssd.exe)
Then, the 3 trojans are noted as detected by the virus scanner and quarantined. The tracking cookies are detected and qurantened as well. All entries after that seem fine (relate to programs already on system.)
I can export this and send it to someone at Norton if needed, once I am connected again.
Are you ready to test drive this pc--I don't know--do you think I am? I never ran malwarebytes--should I do that first or do you think I don't need to?
