svchost.exe process and a bunch of PUM (and other stuffs)

[Curson]

Hi Heantrad,

Oh, okay, I'm just throwing ideas without much sense, as maybe some of them are right, but however.

You are hungry for knowledge, this is clearly not a bad thing.

Also, AdwCleaner detected this after entering (and almost downloading something from it. thanks to safeweb Norton) Solvusoft (didn't know it was malicious until a pair of days ago) it was removed succefully, any idead of what could it be?

It was a BHO belonging to PUP SupTab.

Regards.

[Heantrad]

Hi Heantrad,

Oh, okay, I'm just throwing ideas without much sense, as maybe some of them are right, but however.

You are hungry for knowledge, this is clearly not a bad thing.

Also, AdwCleaner detected this after entering (and almost downloading something from it. thanks to safeweb Norton) Solvusoft (didn't know it was malicious until a pair of days ago) it was removed succefully, any idead of what could it be?

It was a BHO belonging to PUP SupTab.

Regards.

SupTab... didn't know about it. What does it do and in which folder does is normally (for precaution, to check if something is going wrong).

[Curson]

Hi Heantrad,

SupTab is a browser hijacker and is usually located in the following folders :

%ProgramFiles%\SupTab
%ProgramFiles%\XTab

Regarding the logs, it should not be present anymore.

Regards.

[Heantrad]

Hi Heantrad,

SupTab is a browser hijacker and is usually located in the following folders :

%ProgramFiles%\SupTab
%ProgramFiles%\XTab

Regarding the logs, it should not be present anymore.

Regards.

Just checked, there isn't any folder named like that on my program files, thanks.

[Curson]

Hi Heantrad,

You are welcome.
Regards.

[Heantrad]

Hi Heantrad,

You are welcome.
Regards.

Forgot to ask, what browsers does it hijack?

[Curson]

Internet Explorer.

[Heantrad]

Internet Explorer.

Well, I use Chrome, so I think it would do anything is there was rests of it on my PC.
Anyways, by the name I supect is one of those sidebars that adds into your browser, but my Internet Explorer doesn't have any of those, so it's probably fine.
Also, what is all that about unistalling Flash, is has that many security fails?.
And about the program files, I think I selected delete old OS folders or something like that when I deleted Windows.old, it worked for the Windows folder, but the old program files stills there, I'll atach a screenshot showing both folders, the one with the red circle is the old one, need to say I neither can delete it manually, as it tells me that I don't have the permission to do that (I'm running as an administrator on the PC always).
By the way, is this website safe? https://clyp.it/ . I found it today because I wanted to share a song in Reddit and as the creators say, they want to make a sound imgur. I did scans with VirusTotal and Norton's Safe Web and in both it showed clean (but Softonic also shows clean, so...), but I still distrust little known websites.

[Curson]

Hi Heantrad,

Also, what is all that about unistalling Flash, is has that many security fails?.

You could uninstall it, but many sites won't work properly. I rather suggest you to keep it updated.

And about the program files, I think I selected delete old OS folders or something like that when I deleted Windows.old, it worked for the Windows folder, but the old program files stills there, I'll atach a screenshot showing both folders, the one with the red circle is the old one, need to say I neither can delete it manually, as it tells me that I don't have the permission to do that (I'm running as an administrator on the PC always).

Windows.old folder contain all the files you could safely delete. I advise you not to remove any "old" folders since the OS may still use them.

By the way, is this website safe? https://clyp.it/ . I found it today because I wanted to share a song in Reddit and as the creators say, they want to make a sound imgur. I did scans with VirusTotal and Norton's Safe Web and in both it showed clean (but Softonic also shows clean, so...), but I still distrust little known websites.

It seems safe.

Regards.

[Heantrad]

Hi Heantrad,

Also, what is all that about unistalling Flash, is has that many security fails?.

You could uninstall it, but many sites won't work properly. I rather suggest you to keep it updated.

And about the program files, I think I selected delete old OS folders or something like that when I deleted Windows.old, it worked for the Windows folder, but the old program files stills there, I'll atach a screenshot showing both folders, the one with the red circle is the old one, need to say I neither can delete it manually, as it tells me that I don't have the permission to do that (I'm running as an administrator on the PC always).

Windows.old folder contain all the files you could safely delete. I advise you not to remove any "old" folders since the OS may still use them.

By the way, is this website safe? https://clyp.it/ . I found it today because I wanted to share a song in Reddit and as the creators say, they want to make a sound imgur. I did scans with VirusTotal and Norton's Safe Web and in both it showed clean (but Softonic also shows clean, so...), but I still distrust little known websites.

It seems safe.

Regards.

I'm sure they don't use the folder, as it didn't get updated until I tried to delete it, then it deleted some files but some other are impossible to delete for some reason.
Also, I want to delete it because it occupies like 60 GB and I know that I had virus before changing the OS (I used to piracy a lot back then, now I don't because it always ends with me getting infected and now I can buy stuff without problems also).

[Curson]

Hi Heantrad,

If you really want to delete the folder, you need to take ownership before to be able to delete it.
Launch the command prompt windows (cmd) with admin rights and copy/paste the following command :

Code: [Select]

takeown /f C:\Archivos de programa /r /d y && icacls C:\Archivos de programa /t /q /grant PAQUITO:FNow, you should be able to delete the folder.

Regards.

[Heantrad]

Hi Heantrad,

If you really want to delete the folder, you need to take ownership before to be able to delete it.
Launch the command prompt windows (cmd) with admin rights and copy/paste the following command :

Code: [Select]

takeown /f C:\Archivos de programa /r /d y && icacls C:\Archivos de programa /t /q /grant PAQUITO:FNow, you should be able to delete the folder.

Regards.

The folder was created when I installed Windows 7, my previous OS was XP (I changed for all the end of support thing), I think none of the programs I have updated or used the folder, as it didn't update until I tried to delete it for the first time (and until SAS! detected a pair of viruses...).
Also, what does the code do?, I know, it's for giving me rights to delete the folder, but I mean what does the code do (each part).

[Curson]

Hi Heantrad,

The first part of the script takes ownership of the directory, the second part gives full right to your account over the directory.
For a full explanation, please check takeown and icacls documentation pages at TechNet.

Regards.

[Heantrad]

Hi Heantrad,

The first part of the script takes ownership of the directory, the second part gives full right to your account over the directory.
For a full explanation, please check takeown and icacls documentation pages at TechNet.

Regards.

So the first part selects the directory to execute the action of giving full right to my account on that folder, right?

[Curson]

Takeown
Enables an administrator to recover access to a file that previously was denied, by making the administrator the owner of the file.

Icacls
Displays or modifies discretionary access control lists (DACLs) on specified files, and applies stored DACLs to files in specified directories.