Jarl:
- smss.exe, could be either critically essential or a trojan. *Sigh* IT being in \System32 doesn't help either.
- Is Pinnacle an entertainment program?
- AOL + Norton suck.
Finally, I've removed a certain line from your post that I'm sure you don't want publicly viewable, I'll PM you and Phantom with it if that's okay with you.
ahh... now that PM makes sense.. lucky your a mod
pinnacle is an entertainment program, its actually what i run my cube through so better not get rid of it!
AOL is on there because i tried to get rid of it and it didnt want to be gotten rid of so i thought stuff this, i cant b assed. i didnt know norton was on it though.
any good idea's how to differentiate between the trojan orr critically essential bit?
and as for the 'removed line' is there anything we should do about that?
I'll PM you about the line.
As for that executable, It'll probably be critically essential, but to make sure, tell me ihow much memory it takes up by looking in the task manager.
EDIT- Whilst I remember, let's see if you have any spyware/malware "listening" in on your PC.
Go to Start/Run and type in 'cmd'. (Without the 's)
From there, type 'netstat'. (Again, without the 's)
A good result will look something like this:
![[Image: cmd.jpg]](http://img.photobucket.com/albums/v91/Serpent7/cmd.jpg)
From this I can see that I have only one "active connection", from a program called Xfire, which I know to be safe.
Make sure you're on no website except Ragol before you do it.
im assuming this is good:
smss.exe takes up 32k and 0 cpu. is that good?
Yes, that is good.
As for smss.exe taking up 32K, that sounds about right for that process. If it ever goes higher though, watch out, and PM me.
Is explorer.exe still restarting upon bootup?
it has done it but i think that was just me overloading the computer! it hasn't properly glitched, but it doesnt do it very often (once a week?)
well its now 128k, instead of 32k. whats acceptable?
ok then, i've run netstat when i have the popups on. see attached, is there any way i can block the address thats giving me the popups??
Use Anti Hacker's utility if I were you.
As for "blocking" the address, no you can't.
hrwebservices: Closer investigation reveals that this is the website of the host that Ragol.co.uk uses, however, it's still suspect. More detail please.
hypemakers.net: Seems dodgy, my PC won't run the website, but I gather that it's an advertising service.
72.14.205.19: Google. I assume you have the Google toolbar installed.
216.239.59.99: Same again.
Next time you get popups, right click on them, go to properties, and tell me the URL.
Finally, instead of having to keep on typing "netstat", put in "netstat 3" which will repeat the command every three seconds. Doesn't have to be 3 btw.