1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.


Discussion in 'All Other Software' started by gutlypig, Jan 24, 2006.

Thread Status:
Not open for further replies.
  1. gutlypig

    gutlypig Thread Starter

    Jan 17, 2006
    Is there a way to tell if a site offering downloads is legit or a p2p site.I dont suppose its as simple as if you have to pay for it its legit.Or should i find a site and then ask you guys first? Sorry if this threads in the wrong forum please advise me of my mistakes:D
  2. buck52

    buck52 Banned

    Mar 9, 2001
    Not easy but...

    There are plenty of legit/pay sites you want nothing to do with...

    trust your gut...If it sound/looks to good to be true...it probably is

  3. Byteman

    Byteman Gone but Never Forgotten

    Jan 24, 2002
    Hi, Your thread is fine here. P2P means peer to peer filesharing, they are programs not websites.
    Free filesharing programs, P2P, will most likely bring you trouble.

    Some names of more common P2P programs are, Kazaa, Limewire, eMule, EDonkey, Morpheus and there are quite a few others. We do not support the use of, and cannot help with using P2P programs. If you don't use any now my advice is to not start.

    What you are referring to is freeware- there certainly are plenty of good, legitimate freewares and sites that have files for download...but, there are probably MORE sites that mix adware-containing downloads along with perfectly good downloads, so it is quite difficult to know what you are getting, a program containing spyware or adware or a decent "junkfree" freebie. Open Source programs are freeware for example, but not videos or songs...if that is what you have in mind and not programs or utilities> you need to investigate the newer and safer music downloading (legal, cheap, pay-for ones!) sites.

    There are lots of goodies found at these sites:










    Those are some of hundreds.

    You need a list of software that DOES contain adware or spyware as well as sites that don't.

    If you can't find what you want at one of the sites above, post what you are looking for and someone will help.


    One above shows you spyware removal programs that are not all that good, or give you false detections, cost you to scan etc.
  4. Silver Drop

    Silver Drop Guest

    Hi. It is difficult to tell for certain if a free download is 'legit', that is, it won't also download something you don't want. Below are a few things I take into consideration when trying to determine if a free download is safe. Also, ewido anti-malware 3.5 allows you to scan downloads you've saved (and not run) from the right click menu before you open or run or extract them WHICH does not guarantee anything, but is helpful. You can get a 14 day free trial of ewido anti-malware 3.5 here:


    In General:
    • Look for and Read the site's "Terms of Use" Page or Section - if it does not have one and the issue of why the downloads are offered free is not openly addressed elsewhere then I would definitely consider the site suspect. Also, they may openly state that by accepting free downloads you will be agreeing to something you don't want to.
    • Look for and Read the Site's "Privacy Policy".
    • Ask yourself 'what are they getting out of this?' If the answer is not apparent, openly stated or you cannot find it I'd be suspicious myself..
    • Go to www.google.com and search for the name of the download, site name or company name that's offering the download + the word "spyware". If nothing turns up, repeat the search but add the word "forum" instead. This way, you may be able to read about troubles (or good experiences) others have had with the download/site/company.
    • Create a System Restore Point ( from the link in your Start Panel ) before downloading anything. This won't guarantee anything either, but if your computer does not operate properly after running a download, restoring your system to its state before you ran it may give you more functionality.

    Also, if your download has an EULA, ( End User's License Agreement ), read it carefully and opt to cancel the installation of the download if it seems 'fishy' to you.

    EULAnalyzer is a program that scans EULAs for keywords that might point to something suspicious. IT DOES NOT provide a substitute for reading the agreement yourself - however, if your new to these agreements, it may aid you by flagging something you missed yourself. You can download it here:


    Hope some of this useful gutlypig. Mainly its just common sense. Good Luck! :)
  5. valis

    valis Moderator

    Sep 24, 2004
    just a question; are you actively looking for something? If it's legit, chances are someone here either has it or knows how to get it, or a comparable app, for free legally. Or for cheap, but still legally. The way you worded it, 'Is there a way to tell if a site offering downloads is legit or a p2p site' is rather vague. You may also want to search the best freeware thread in, I think, either random discussion or tips and tricks forum.

  6. gutlypig

    gutlypig Thread Starter

    Jan 17, 2006
    Byteman:Thanks for all the links ive just removed adware filter from my pc cheers(y) theres so much info to be read in those links its answered most of my questions.
    Silver drop:I have downloaded the user agreement reader will come in really useful.
    valis:If i had actually taken the time to read more threads before posting my own i probably wouldnt have asked the same question(my bad).I am looking at getting a new antivirus as my norton runs out in may but i have seen so many threads on the subject now im looking properly that it seems a stupid question to ask which one and where from.
    i do find the idea of downloading videos or tv series attractive but if this cant be done totaly legal and fairly safetly then i wont.Other than that i also download e-books and avatars and i would like to download music maybe even music videos.I just want to do everything as safe and as legal as poss..
  7. redoak

    redoak Gone but never forgotten

    Jun 24, 2004
    Quick recommendations for anti-virus replacement for Norton: "AVG" and "Avast." Both regularly recommended here at TSG. Free versions may be available. Use a search engine to find their sites.
  8. emoxley


    Jan 6, 2004
    Get AVG Free Edition here: http://free.grisoft.com/freeweb.php/doc/2
    I used AVG and Norton, until Norton's time ran out, and I didn't renew it. When I installed AVG, and ran it, it found eight virus' that Norton never saw. You'll get updates to AVG, every few days. They stay on top of things................
    Good luck! :)
  9. valis

    valis Moderator

    Sep 24, 2004
    ditto for what emoxley said. I was going to switch to avg when my norton subscription ran out, but it let something in that hosed my system first. Once I got my system back, spent about 8 hours uninstalling norton (have fun with THAT), and tossed on AVG, and it found a few more things that norton missed.
  10. gutlypig

    gutlypig Thread Starter

    Jan 17, 2006
    So i have to wait for my norton to expire first or can i use both?i think norton let a download trojan in but i cant find it is there a scan software for this trojan or should norton pick up on it if it was there ?
  11. Byteman

    Byteman Gone but Never Forgotten

    Jan 24, 2002
    Hi, If you want to use two antivirus programs you need to have one not running in the background. Lots of people make the mistake of installing a second while say Norton is active which can really give you problems...

    Any antivirus program can be set to not start when the computer does> so things will play nice. To cross-check say Norton with AVG, you would temporarily turn off Norton's Protection or set the program to not start when the computer does. Then start up AVG and scan to check against Norton A/V.

    A firewall might be the answer- to keep things from infiltrating from the Net.

    Your trojan help:
    We ask that you post a Hijackthis log for a check:

    Click here to download HJTsetup.exe
    • Save Hijackthis.exe to your desktop.
    • Double click on the HJTsetup.exe icon on your desktop.
    • By default it will install to C:\Program Files\Hijack This.
    • Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
    • Put a check by Create a desktop icon then click Next again.
    • Continue to follow the rest of the prompts from there.
    • At the final dialogue box click Finish and it will launch Hijack This.
    • Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
    • Click Save to save the log file and then the log will open in notepad.
    • At the top of the Notepad HJT log screen, hit EDIT then SELECT ALL then click EDIT and then click COPY, doing that copies the text to the clipboard, you won't see it yet....
    • Open a TechSupportGuy forum Reply window for this thread, to have ready to paste the Hijackthis log into. Click once to place the typing cursor in the reply window.
    • At the top of your TSG/browser window, hit EDIT then PASTE
    • You should see your copied Hijackthis log appear in the reply space....then, submit the reply
    • DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

    Try some online antivirus/trojan and antispyware scanners to check for any bugs:




    If any infected items are found by any scanner, you need to SAVE the report or results logfile, this is just a text file listing the file names, locations, and the ID of the bugs...very handy to have if something is not disinfected right then and there.
    Post the report contents in a reply if you find any trojan type things and need help with them

    _ _ _ _ _ _ _ _
    Only for Windows 2000/XP> Ewido Security Suite. Installed program, keeps working after trial time period expires but does not update latest detections past the trial period.

    Ewido Security Suite is a very good thing to try or buy> there is a 15 day free trial that is fully functional:


    Install ewido.
    · During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
    · Launch ewido
    · It will prompt you to update click the OK button and it will go to the main screen
    · On the left side of the main screen click update
    · Click on Start and let it update.
    · DO NOT run a scan yet. You will do that later in safe mode.

    Restart your computer into safe mode now. Perform the following steps in safe mode:

    How to get to Safe Mode in XP:

    Restart your computer.

    Press F8 after the Power-On Self Test (POST) is done. If the Windows Advanced Options Menu does not appear, try restarting and then pressing F8 several times after the POST screen.
    Choose the Safe Mode option from the Windows Advanced Options Menu then press Enter

    Run Ewido:
    · Click on scanner
    · Click Complete System Scan and the scan will begin.
    · During the scan it will prompt you to clean files, click OK
    · When the scan is finished, look at the bottom of the screen and click the Save report button.
    · Save the report to your desktop
    This will take some time to run!
    Post that log, unless all it finds are Cookies.
  12. valis

    valis Moderator

    Sep 24, 2004
    not that I would want to speak badly of norton (I did voluntarily give them money, after all) but any company that gives a FREE, very detailed, removal tool, well that should tell you something about that application. It's a bear to remove, and that is why Symantec offers this tool. I don't know how many registry entries it makes, but it's a bunch. I've heard rumors of up to 300 entries, but I'm not entirely sure of the source, so let's just say that's a royal guess.

  13. redoak

    redoak Gone but never forgotten

    Jun 24, 2004
    The "Removal Tool" MAY bail you out once you are in trouble- see the intro comments. It did not for me. Be sure to use the S/N removal procedure, not the generic Ws approach. Here is some info that may be valuable:

    The following quotes come from this Thread: http://forums.techguy.org/t418507.html

    "Removing Norton products is not always easy. If it is not done 'correctly' some debris can be left behind that may cause all sorts of problems. Go to the Norton/Symantec website and look for removal procedures for the software to be removed. Be sure you know the correct name and version. In some cases, you must download and run special 'removal' programs to get it all unsnarled from your system.


    "Enter "removal" and look for your program."

    Good luck, {redoak}
  14. gutlypig

    gutlypig Thread Starter

    Jan 17, 2006
    Logfile of HijackThis v1.99.1
    Scan saved at 16:46:19, on 29/01/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    C:\Program Files\Inventel\Gateway\wlancfg.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Acer\eRecovery\Monitor.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
    C:\Program Files\Picasa2\PicasaMediaDetector.exe
    C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
    C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.co.uk/iesearch/default.htm
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.co.uk/
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
    R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Wanadoo
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\PROGRA~1\Wanadoo\WSBar\WSBar.dll
    O3 - Toolbar: AdwareFilter - {1028F737-81E7-452B-A860-E50CAD90A08C} - C:\Program Files\AdwareFilterToolbar\AdwareFilter.dll
    O4 - HKLM\..\Run: [LaunchApp] Alaunch
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
    O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
    O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
    O4 - HKLM\..\Run: [eRecoveryService] C:\Program Files\Acer\eRecovery\Monitor.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
    O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Search with Wanadoo - res://C:\PROGRA~1\Wanadoo\WSBar\WSBar.dll/VSearch.htm
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: SpywareCleanerService - Unknown owner - C:\Program Files\Spyware Cleaner\SCService.exe (file missing)
    O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

    heres my hi jack log.
    i do have microsoft anti spy but the panda site picke up 14 spywares and 1 dialer,
    norton hasnt picked up on anything either
  15. Byteman

    Byteman Gone but Never Forgotten

    Jan 24, 2002
    Hi, Did you Save the Panda report file, (or, any Reports from anything?)
    Panda's is named activescan.txt, post the contents by copy/paste if you saved it.

    Panda is good at viruses, and detects a ton of ad and spywares, but does not clean them, you need the log file as a reference to guide you/us in deleting leftover junk. You can run it again if you need to, the stuff should still be found.

    Did you get and run Ewido yet as in my reply back about 3 or 4 posts? That's the one that will probably show and remove ad and spywares....surprising though that much would be left after Microsoft A/S program scanned......

    You do have to temporarily turn off Microsoft A/S when making changes, and probably during antivirus scans, as it tends to interrupt and ask for allow/block answers. If you are OK so far, and can handle the alerts or it isn't bothering you at all stay as you are. I know during the Ewido scan you will be in Safe Mode--but the Microsoft program I believe is still active in Safe Mode so turn it off!

    Here is how, but remember you have to go back and reverse these settings to turn it back on.!

    Right-click on the Microsoft Anti-Spyware icon in the system tray [it's the one with the red and yellow bulls-eye].
    Click on "Security Agents Status".
    Click on "Disable real-time protection".

    Next right-click on the Microsoft Anti-Spyware icon in the system tray again to open Microsoft Anti-Spyware.

    Click on the Options menu and choose Settings.
    In the left pane column click on "Real Time Protection".
    Under Startup Options, uncheck "Enable (MSAS) Security Agents on startup (recommended)"
    Under Real-time spyware threat protection, uncheck and "Enable real-time spyware threat protection" (recommended).
    Click the Save button and close Microsoft AntiSpyware.
    Finally, right-click on the MSAS icon in the system tray and select "Shutdown Microsoft Antispyware".

    Then follow the steps to get, install, update and boot to Safe Mode and run Ewido as in my reply. Save the results, the program will have a button to do that, and post the log along with a new HJT when you are done. The Panda log also. Use more than one reply if you have to or attach them to a reply.
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/436953

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice