Let's review the security programs: Who's Confused?!
The HJ log for Logfile of Trend Micro HijackThis v2.0.2, Scan saved at
4:37:12 PM, on 4/18/2009 (Post 3#) shows
C:\Program Files\Common Files\
Symantec Shared\Security Center\SymWSC.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
AND
C:\Program Files\Alwil Software\
Avast4\aswUpdSv.exe
AND
C:\PROGRA~1\
McAfee\MSC\mcmscsvc.exe
Thee HJ log for Logfile of Trend Micro HijackThis v2.0.2, Scan saved at
10:26:27 PM, on 4/20/2009 (Post #3) shows
C:\Program Files\Alwil Software\
Avast4\aswUpdSv.exe
ONLY
Computer #1: Post 3: shows the McAfee Suite and Avast
Computer #1: Post 5: shows Avast only. McAfee removed.
I did not even know I have Symantec on here also. I will put the Avira on.
Another HJ log in Post 3:
Logfile of Trend Micro HijackThis v2.0.2, Scan saved at 6:15:56 PM, on 4/18/2009 shows
C:\PROGRA~1\
McAfee\MSC\mcmscsvc.exe
AND
C:\Program Files\
Avira\AntiVir Desktop\avguard.exe
Actually, there is Avast already installed and running. There are also 2 entries left from Symantec/Norton which can be removed by running the Norton Removal Tool.
IT would be very helpful of you clearly told us WHICH of these logs is for Compute #2 as they are all presented as Computer #1.
My suggestion would be: If you have Avast or Avira, don't make a change. If you have PAID for the McAfee Suite, I would urge you to keep it for now. If it is only trial version, okay to uninstsall. Otherwise, remove the free programs and wait until the McAfee subscription comes due and THEN male a change.
But I would like to discourage you from having ANY suite. You can find free standing, free antivirus program, firewall and spyware/adware programs. Why pay for a suite- especially one that doesn't work ell.
But understand that you, the user are the first line of defense on computer security. No matter what security programs you have in place, what you do while online-email and surfing-makes the final malware decision!
You have TeaTimer running. Real Time Protections must be temporarily disabled while scanning:
SPYBOT TEATIMER
* Launch Spybot S&D, go to the Mode menu and make sure "Advanced Mode" is selected.
* On the left hand side, click on Tools, then click on the Resident Icon in the list.
* Uncheck the "Resident "TeaTimer" (Protection of overall system settings) active." box.
* Click on the "System Startup" icon in the List
* Uncheck the "TeaTimer" box and "OK" any prompts.
* If Teatimer gives you a warning that changes were made, click the "Allow Change" box when prompted.
* Exit Spybot S&D when done.
* (When we are done, you can re-enable Teatimer using the same steps but this time place a check next to "Resident TeaTimer" and check the "TeaTimer" box in System Startup.]
