Errorsafe

[soulandy]

When my PC boots up, I keep getting a little pop-up warning telling me that "ERRORSAFE" service is currently unavailable Anyone know what this is? It has been happening now for about two months. have done spy-bot and adaware and my antivirus dosen't pick anything up
this keeps popping up aswell
http://errorsafe.com/pages/scanner/index.php?aid=msg_en_ed2&lid=uk&ex=1&p=1&ax=1

is it safe or not?
Cheers

[thecoalman]

I don't know but any site that requires a activex control be installed then makes every attempt it can to get you to download and run a exe when you try to navigate away from the page is suspicious to me.

If you don't have a secure computer I'd suggest not clicking on the link above.

[isogonic]

look in add/remove programs panel and if error safe is in there uninstall it. reboot computer once afterwards, if its present

with IE open>tools>internet options>under temp internet files click on>settings then>view objects see if there is a bho related to error safe. if so delete it

start>run type in services.msc
under the name column see if there is a errorsafe service listed.

[Xylob the Destroyer]

many programs are hidden in the Add/Remove panel
if you can't find it in your Add/Remove programs panel, do this:
go to your control panel and click "folder options". on the "View" tab, tell it to "Displaay the Contents of System Folders", "Show hidden files and folders", and remove the check marks next to "Hide extensions for known file types" and "Hide protected operating system files"

now click Start>Search>For Files or Folders>
choose the advanced settings to search system folders, hidden files and folders, & subfolders.
now search your operating system drive for the file named "sysoc.inf" (no quotes obviously)
once it's done searching (it may find several files with this name), open each file in wordpad and click Edit>Replace and in the Find dialog, type the word "hide" (again, no quotes) and click the "Replace All" button. (leave the "Replace with" box blank!!)
now save and close the file and repeat with every file that has the name sysoc.inf.

now go back into the Add/Replace panel and you will most likely find a lot more programs in there than you did before.

[ranchhand]

I would be extremely suspicious of this outfit. As soon as I entered the website, a popup wanted my to agree to everything and download their program. Adware/malware outfits are notorious for this.

If nothing else works, download Hijack This and run a log. Put a check against anything that says or refers to Errorsafe. As an alternate and if you feel comfortable editing your register, check the RUN hive in H_KEY LOCAL MACHINE/ SOFTWARE/ MICROSOFT/ WINDOWS / RUN; look in the Right hand half of the window and I am dead-sure you will find a startup entry for Errorsafe. Delete that entry. I am also sure there is something loaded on your harddrive, do a search on "C:".

[soulandy]

I have run Hijack This and this is my log. Anything I should get shut of???

Logfile of HijackThis v1.99.1
Scan saved at 20:24:24, on 27/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\SYSTEM32\GEARSEC.EXE
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\inKline Global\PC Booster\pcbooster.exe
C:\WINDOWS\system32\sstray.exe
C:\Program Files\inKline Global\Modem Booster\ModemBtr.exe
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\WINDOWS\Downloaded Program Files\UERS_0001_NI57M1124NetInstaller.exe
C:\WINDOWS\vsnpstd3.exe
C:\WINDOWS\system32\lexpps.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\DV Series\Console\Watch.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\ANDYPR~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.dmluuztfcxjpgbzhclymxst.info/WwmDlFTGFcL3Uu1tPFG_YnLw7zk5P3io95h8N/7Mr5Ciw8..._3TKshRrC.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.fcunitedofmanchester.co.uk/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe"
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0A7D03C4-EA45-94D3-7736-5A9EF37B1760} - C:\DOCUME~1\Thomas\APPLIC~1\COOLAD~1\inter play.exe (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [PC Booster] C:\Program Files\inKline Global\PC Booster\pcbooster.exe
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [Modem Booster] C:\Program Files\inKline Global\Modem Booster\ModemBtr.exe
O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [windows] iexplore.exe
O4 - HKLM\..\Run: [regs less five hold] C:\Documents and Settings\All Users\Application Data\Platformsignregsless\Mapi wave.exe
O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
O4 - HKLM\..\Run: [NI.UERS_0001_NI57M1124] "C:\WINDOWS\Downloaded Program Files\UERS_0001_NI57M1124NetInstaller.exe" -nag
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\RunServices: [windows] iexplore.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Buildcast] C:\DOCUME~1\ANDYPR~1\APPLIC~1\CAKEAX~1\CAMP 4.exe
O4 - HKCU\..\Run: [ATI Remote Control] C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Watch.lnk = C:\Program Files\DV Series\Console\Watch.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\tv\EXPLBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.update.microsoft.com
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {2E28242B-A689-11D4-80F2-0040266CBB8D} (KX-HCM10 Control) - http://217.27.243.70/kxhcm10.ocx
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com/PhotoUpload/MsnPUpld.cab?10,0,910,0
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1125862681092
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C1BAC744-8F0B-11D0-89E7-00C0A8295197} (Cameractl Class) - http://www.nwales-traffic.co.uk/files/activex/camera.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_aac.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download/files/abasetup161.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab28578.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\ATIMUL~1\RemCtrl\x10nets.exe (file missing)

[Xylob the Destroyer]

kill this! C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\Downloaded Program Files\UERS_0001_NI57M1124NetInstaller.exe
C:\Program Files\MSN Messenger\msnmsgr.exe

phone-home programs are bullshit and UERS_0001_NI57M1124NetInstaller.exe is apparently a virus.....

you also seem to have quite a bit of useless crap running in the background, but that's just a matter of opinion.

if there's something in the list you posted that you don't recognize, just use google to find out what it is. most searches will point you to liutilities.com which has a very good list of processes, what they are, and whether or not you should mess with them.

[soulandy]

Cheers for that. I'll get it sorted before the end of the year, hopefully

[thecoalman]

UERS_0001_NI57M1124NetInstaller

Google only has two search results for that, apparently it's new. First reported the 1st of this month. There's a good chance it's not in the spyware/virus updates yet.

[isogonic]

those two 04 entries for IE dont look good. i would do a online scan or two at one of these:

BitDefender Free Online Virus Scan
http://www.bitdefender.com/scan/licence.php
check AutoClean under Scan Options.

Panda ActiveScan
http://www.pandasoftware.com/products/activescan?NRMODE=Published&NRORIGINALURL=%2fact...ACHEHINT=Guest

Kaspersky virus scanner
http://www.kaspersky.com/virusscanner

Housecall at TrendMicro
http://housecall.trendmicro.com/housecall/start_corp.asp
check Auto Clean.

F-Secure virus scanner
http://support.f-secure.com/enu/home/ols.shtml

eTrust Antivirus Web Scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

[ranchhand]

Hi Soulandy,

I am at work and don't have the time for a deep analysis, but these two look extremely suspicious:

O4 - HKLM\..\Run: [NI.UERS_0001_NI57M1124] "C:\WINDOWS\Downloaded Program Files\UERS_0001_NI57M1124NetInstaller.exe" -nag

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.dmluuztfcxjpgbzhclymxst.info/WwmDlFTGFcL3Uu1tPFG_YnLw7 ... shRrC.html

The R1 entry I cannot find any info on, and when I click on it I just get a "not found" message on MIE. If you recognize it and want it do not delete.

The 04 entry I suspect is your nag screen.

You are running HT from the Temp file; please create a Folder Directory off of C for it and run it from there. Place checks against the two entrys and click FIX. After re-scan and make sure they are gone, run a fresh log and post it here.

By the way... AV programs will not target adware/spyware. Those are in a league of their own.

[soulandy]

Blimey!!!! Things seem to be getting a bit complicated to say the least I'll take it easy with all this and see what happens. I'll have to have a quiet word with the family not to go mad on some things out there. thanks for all the advice and will hopefully get it sorted. Computors eh, easy to use and even easier to break

Cheers

[thecoalman]

If you secure your machine you can avoid most of these things. First and most important make sure you have the latest updayes from MS for IE or run Firefox. I'm no fan of firefox and it's not necessarily more secure, it's just less a target.

From there you need 3 things, the following are all free:

1. A good firewall, www.zonelabs.com That will prevent unwated incoming and outgoing traffic. I've only had one major piece of crap get installed on this computer in 2 years, the result of letting a teenager use it. My firewall was the first thing to detect it when it tried to connect to the internet. Make sure to disable the MS firewall if you insatll this.

2. Spyware monitoring, right now I'm using the free MS spyware blocker. Ad-Aware and Spybot are two other good ones.

3. Anti-Virus AVG is free and updates itself daily. If your running a out of date pay for anti virus software uninstall it and try that one. Anti virus software is only as good as the last update. It can prevent some things but the virus writers will attempt to circumvent it, hence the regular updates.


The biggest thing to do to avoid junk like that is don't install anything when website wants you too. There's very few plugins you need, only a handful and they would be from major vendors. Research before you hit that install button.

[guns1inger]

The major problem with the MS Antispyware product is that too many items have shifted priority as M$ have either aquired an interest in the company that produced them, or have in some other way been enticed to 're-evaluate' the rating applied. I know that one of my clients has been using this to protect it's student's laptops, and that a rather painful piece of crap called 'funwebproducts', and an associated nasty calle 'mywebsearch' have been an ongoing problem. Early in the year, M$AS would detect these and recommend removal. A couple of months later both dropped to 'Ignore' status, and a month after than, neither would be detected. Quite a few different items have followed this path, although adaware and spybot continue to nail them. Thankfully not eveyone is beholden to corporate greed.

The M$ product has quite a few things going for it, but I no longer trust it's impartiality the way I trust others.

[thecoalman]

or have in some other way been enticed to 're-evaluate' the rating applied.

Here's another thought, many of these programs are borderline, even legitimate ones. Even the Google toolbar has been labled spyware by some. If enabled it will send what website you're viewing to Google to gwt the PR ranking, it's a tool used mainly by webmasters. They could if they wanted use that data for other uses if they wanted. Google is a legitimate company so it doesn't get the spyware lable from spyware detection apps.

If you have a spyware app that uses the same formula there's a good chance that it is going to be labled syware, let's say one that can be easily uninstalled and clearly states what it does in EULA. If MS lables it spyware couldn't they possibly be setting themselves up for litigation. MS knows it no good, the computing community knows it's no good but in essence how would you differentitate between what the ggole toolbar does and what is truly spyware.

[soulandy]

I am currently running the MS Antispareware, Norton Internet security 2004 with all updates, Spybot search & destroy (free) and Ad-Aware SE personal.
While the MS spyware always shows nothing the Spybot picks a couple of things up. Should I ditch any of these or add any others? Should I have the windows firewall turned on aswell as Norton?
Cheers

[Xylob the Destroyer]

I'm running Ad-Aware SE and Norton AntiVirus2005 and I almost never have even the slightest problems....
of course, I've also changed the default security settings in IE to be fairly restrictive -- there's no reason my computer should do anything that I haven't specifically told it to do.

stop visiting all those russian midget porn sites and you should be fine.

that and all those silly ass toolbars and "smiley" add-ins for email programs, weather bug, etc....

[isogonic]

soulandy,
those apps you have are fine. always check for updates before using. make sure widows "firewall" is off. keep nortons. you might consider adjusting activeX controls in IE. i have a section on IE at my webpage. you might want to try firefox also. you can use either one or both.