sws anti-spyware

[ketls]

The deletions went fine, no problems

[silver]

Hi ketls,

The deletions went fine, no problems

Great

The ntoskrnl.exe traffic is related to Windows file sharing.
Whether you should allow or block it depends on:

How do you connect to the internet?
Do you share files with other computers on a local network?

[ketls]

I'm not on a local network. I have a broadband connection and generally surf news and some other sites of which I'm sure the other sites is where my problems began. Would you recommend Kaspersky Internet Security for protection or are the programs I have in place now enough? I hope I haven't been too much of a pain. I can't tell you how much I appreciate all the time you have spent helping me. It is my hope that in the future I can avoid some of the mistakes I have made that got me into this situation. Thank you very much!!

[silver]

Hi ketls,

No problem I'm very happy to help you

You're not on a local network - so you use a broadband modem to connect to the internet?

If so, the configuration of your Sygate personal firewall is crucial for your protection - without it your computer could be very vulnerable.

In this case you should not allow ntoskrnl.exe access to the internet, both inbound and outbound can be blocked. You should have no firewall rules allowing inbound connections unless you know what you're doing. Outbound access should only be given to selected applications which you wish to allow access - these will include your web browser, email program and probably C:\Windows\System32\svchost.exe. Please backup your current firewall settings before making any changes in case of problems.

The programs you currently have installed are fine however Kaspersky Internet Security is considered to be amongst the best available so if you choose to purchase it you will be very well protected.


Here are some final steps and some more tips to help you keep your computer clean:


Click Start->Run and type cleanmgr in the box and press OK
Ensure the boxes for Recycle Bin, Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
Press OK and Yes to confirm

Next, create a new, clean System Restore point which you can use in case of future system problems:
Press Start->All Programs->Accessories->System Tools->System Restore
Select Create a restore point, then Next, type a name like All Clean then press the Create button and once it's done press Close

Now remove old, infected System Restore points:
Next click Start->Run and type cleanmgr in the box and press OK
Ensure the boxes for Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
Select the More Options tab, under System Restore press Clean up... and say Yes to the prompt
Press OK and Yes to confirm

Operating system vulnerabilities can easily be exploited by malware so please ensure your operating system is automatically kept up to date by using Windows Update:
Go to Start->Control Panel->Automatic Updates
Select Automatic and select a suitable schedule

You have good protection software installed however please ensure it is kept up to date. Check that your antivirus and antispyware programs are set to automatically update themselves daily, and that your firewall is the latest version.

Spywareblaster is a free program which prevents the download and installation of Internet Explorer ActiveX based malware by immunizing your system against it. You can download Spywareblaster from here and a tutorial to help you get started is available here.

Consider a custom hosts file such as MVPS HOSTS. This custom hosts file effectively blocks a wide range of unwanted ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and many hijackers.
For information on how to download and install, please read this tutorial by WinHelp2002
Note: Be sure to follow the instructions to disable the DNS Client service before installing a custom hosts file.

Please take care when downloading programs. One of the easiest ways to be infected is to download freeware/shareware programs which come laden with malware - this includes allowing websites to install browser plug-ins or ActiveX controls. Before downloading, it is crucial to check whether the source is reputable.
One way to check is to use McAfee SiteAdvisor. Copy the domain name into the space provided and SiteAdvisor will give you a report on the website which can help you decide if it is safe. They also have a toolbar for IE and Firefox which adds this functionality to your browser.

Download and install the free version of WinPatrol. This program protects your computer in a variety of ways and will work well with your existing security software. Have a look at this tutorial to help you get started with the program.

Find out more about how to prevent infection in the future
http://forum.malwareremoval.com/viewtopic.php?p=33687

Please post back to let me know that you have read this, and if there are any further questions or issues.

[ketls]

Thanks, I've read and installed the suggestions made. Right now I can't think of anything more. Once again thank you for your time and effort.

[silver]

Hi ketls,

You're most welcome, glad we could be of assistance.

This topic is now closed. If you wish it reopened, please send an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.