The Proof behind just how worthless Windows One care really is.


Recommended Posts

Log file post from SuperAntispyware at the bottom of this post

I was working on a Vista laptop for a customer. All appeared well. No virus or spyware / malware or Trojan warnings. The customer was running windows one care. he didn't have service pack 1 so I installed it. Along will all the latest updates. But I noticed his task manager was disabled. To me that spells "your infected with something".

So I downloaded a copy of SuperAntispyware and did a full system scan. Keep in mind that according to one cares information, it was recently updated and recently did a full system scan with no problems detected.

I think the screenshots speak for themselves.

SuperAntispyware

capturekt2.jpg

Windows One Care

capture1ug6.jpg

Now I do realize other antiviruses could have failed just as miserably. But one care was the one on the system and at lease now we know at lease one worthless AV on the market.

Once that got done I opened defender which said it had not done a scan in 65 days. So I do a scan. It finds nothing.

Next I do a scan with Spybot Search and destroy.

Once again the screenshots speak for themselves.

Windows Defender

defednerhs0.jpg

Spybot Search and Destroy.

spybotuz4.jpg

List of files found in the Superantispyare Log file

C:\PROGRAM FILES\SEARCH SETTINGS\KB125\SEARCHSETTINGS.DLL

Rogue.AntiSpyStorm

C:\Program Files\AntispyStorm\AntispyStorm.exe.MANIFEST

C:\Program Files\AntispyStorm\config.dat

C:\Program Files\AntispyStorm\filesbase.bin

C:\Program Files\AntispyStorm\global_virus_table.bin

C:\Program Files\AntispyStorm\ignoredomainsbase.bin

C:\Program Files\AntispyStorm\ignorefilesbase.bin

C:\Program Files\AntispyStorm\ignoreregsbase.bin

C:\Program Files\AntispyStorm\mdReg.dll

C:\Program Files\AntispyStorm\parser.exe

C:\Program Files\AntispyStorm\regbase.bin

C:\Program Files\AntispyStorm\stat.bin

C:\Program Files\AntispyStorm\uninstall.exe

C:\Program Files\AntispyStorm\uninstall.log

C:\Program Files\AntispyStorm\urlbase.bin

C:\Program Files\AntispyStorm

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntispyStorm\Uninstall AntispyStorm.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntispyStorm

Trojan.Unclassified/NVCOI

C:\Program Files\Temporary

Adware.AdSponsor/ISM

C:\Program Files\Spcron

Trojan.Fake-Drop/Gen

C:\WINDOWS\CTFMON32.EXE

C:\WINDOWS\ACCESSS.EXE

C:\WINDOWS\AVPCC.DLL

C:\WINDOWS\CLRSSN.EXE

C:\WINDOWS\CPAN.DLL

C:\WINDOWS\CTRLPAN.DLL

C:\WINDOWS\DIRECTX32.EXE

C:\WINDOWS\DNSRELAY.DLL

C:\WINDOWS\EDITPAD.EXE

C:\WINDOWS\EXPLORE.EXE

C:\WINDOWS\EXPLORER32.EXE

C:\WINDOWS\FUNNIEST.EXE

C:\WINDOWS\FUNNY.EXE

C:\WINDOWS\GFMNAAA.DLL

C:\WINDOWS\HELPCVS.EXE

C:\WINDOWS\INETINF.EXE

C:\WINDOWS\INTERNET.EXE

C:\WINDOWS\MSCONFD.DLL

C:\WINDOWS\MSSPI.DLL

C:\WINDOWS\MSSYS.EXE

C:\WINDOWS\MSUPDATE.EXE

C:\WINDOWS\MSWSC10.DLL

C:\WINDOWS\MSWSC20.DLL

C:\WINDOWS\MTWIRL32.DLL

C:\WINDOWS\QUICKEN.EXE

C:\WINDOWS\NOTEPAD32.EXE

C:\WINDOWS\QTTASKS.EXE

C:\WINDOWS\RUNDLL16.EXE

C:\WINDOWS\SEARCHWORD.DLL

C:\WINDOWS\SISTEM.EXE

C:\WINDOWS\SVCHOST32.EXE

C:\WINDOWS\SVCINIT.EXE

C:\WINDOWS\WINDOW.EXE

C:\WINDOWS\TIME.EXE

C:\WINDOWS\USERS32.EXE

C:\WINDOWS\WAOL.EXE

C:\WINDOWS\WIN64.EXE

C:\WINDOWS\WINAJBM.DLL

C:\WINDOWS\WINMGNT.EXE

C:\WINDOWS\X.EXE

C:\WINDOWS\XPLUGIN.DLL

C:\WINDOWS\Y.EXE

Trojan.Dropper/ASTCTL32

C:\WINDOWS\ASTCTL32.OCX

Rogue.LiveSecurityCenter-Trace

C:\WINDOWS\DEFAULT.HTM

Trojan.Downloader-Gen/Win

C:\WINDOWS\IEDLL.EXE

C:\WINDOWS\WIN32E.EXE

Trojan.Unclassified/IExplorer-Fake

C:\WINDOWS\IEXPLORER.EXE

Trojan.Unclassified/Loader-Suspicious

C:\WINDOWS\LOADER.EXE

Trojan.CWS/VBE

C:\WINDOWS\RUNDLL32.VBE

Trojan.Downloader-Systeem

C:\WINDOWS\SYSTEEM.EXE

Trojan.Downloader-SystemCritcial/Fake Alert

C:\WINDOWS\SYSTEMCRITICAL.EXE

Trojan.Unclassified/XXXVid

C:\WINDOWS\XXXVIDEO.HTA

Adware.MyWebSearch

C:\WINDOWS.OLD\PROGRAM FILES\MYWEBSEARCH\BAR\1.BIN\MWSOEMON.EXE

Edited by warwagon

wow that is a massive fail on onecares part

the only thing that I could even think to ask was onecare installed before there was a problem or as an attempt to fix one that was there?

wow that is a massive fail on onecares part

the only thing that I could even think to ask was onecare installed before there was a problem or as an attempt to fix one that was there?

Well the fact it is on there at all with that many infections living right next to it, is just sad.

I'm not sure if onecare cleans out trackign cookies, wich is what all those file items are. and it's a fairly useless thign to do anyway.

I'm also fairly sure that it doesn't mess aroudn to much in the registry other than to remove stuff that actually comes with spyware, while that other apps seems to have decided to act as a registry cleaner, wichis not a good thing.

During the deletion process with superantispyware I saw a bunch of random Exe files getting deleted from the windows directoy. one of which was Y.exe

in that case it's strange, it hsould have detected any spyware executables as log as it's properly updated, wich it appears to be.

just think what NOD32 or Kaspersky would have clean'd out

Yes, because kaspersky or nod32 did better than Antivir which is also happens to be free :rolleyes:

One Care, here, just works fine...no virus and no spyware.

Haha? :blink:

I think it's generally considered good practice to have more than one defence these days...

Personally I use Superantispyware, AVG free, CCleaner and Lavasoft Adaware and have never had a problem...

No single program is 100% perfect but they'll catch pretty much everything between them :)

One thing for sure though - I'd NEVER pay for any antivirus/antispyware program - The free ones ARE good enough

(Well, they are in my own personal experience anyway)

I think it's generally considered good practice to have more than one defence these days...

Personally I use Superantispyware, AVG free, CCleaner and Lavasoft Adaware and have never had a problem...

No single program is 100% perfect but they'll catch pretty much everything between them :)

One thing for sure though - I'd NEVER pay for any antivirus/antispyware program - The free ones ARE good enough

(Well, they are in my own personal experience anyway)

I agree, but it also depends on the user. I mean some people just install and "ok-button-bash" anything :)

Been using Vista for more than a year now, after a year I did a spyware / malware check with several programs and all it found were some cookies.

/on-topic: Kinda disappointing from one-care, not that I use it, but it should have detected at least something I'd say.

All the Anti programs have their problems. It makes me laugh when you get a person saying "Program X is the best because I have no spyware/viruses on my PC" How do they know. This thread just goes to show that is not the case.

I run Kaspersky, but I would not say to anyone it's the best, because I don't know if it's got it all. I remember years ago someone telling me AVG was the daddy and I ran it for about a year. The day I swapped, Nod32 picked up a lot of crap. The day I swapped to Kaspersky, that picked up a bit of crap as well. If I swapped again when my sub runs out, whatever I choose to use will no doubt pick up some other crap.

[teach to suck eggs]

The best defence is not to download stuff you know 'may' contain trojans. Avoid dodgy sites (I know some legitimate sites that have dropped a nasty payload, so nothing is 100% safe) and browse with extensions like NoScipt and Adblock active. The only 100% safe way is not go on the interwebitubes (like that'll happen!)

[/teach to suck eggs]

i got avast home edition.. I Trust it to be the best (for me)

It already proved it was better then Novell (used @ school) that proved much for me XD

One Care, here, just works fine...no virus and no spyware.

That's the point of this thread.

I would suggest you take a few minutes to download and install another one, such as SuperAntiSpyware or Spybot, and just scan with those to make sure. Not every program is going to detect everything, and it's much better to have two or even three to make sure you're completely safe.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Exactly. They won't go 100 because current gen consoles are simply too old for any groundbreaking graphics or gaming experience otherwise. They will go with standard (console) price 70 or go with 80 if they really want to go premium. Of course they will have more expensive options too with some useless cosmetics as always.
    • Doesn’t surprise me at all. God is light & He gave us life so it sounds almost logical that we would therefore emit a certain amount of light.
    • This is what I want. Hey Gemini, how do I remove you from all my google products permanently?
    • I would never install install this build before rtm process. only 3 months to go. never install on your daily devices. just wait 3 months.
    • Motrix Next 3.9.6 by Razvan Serea Motrix Next is a modern, open-source cross-platform download manager built as the official next-generation successor to the original Motrix project. It has been completely rewritten using Tauri 2, Vue 3, TypeScript, and Rust, while still relying on the powerful Aria2 download engine for high-speed multi-protocol transfers. The app supports HTTP, HTTPS, FTP, BitTorrent, ED2K and magnet links, offering advanced features like multi-connection acceleration, task scheduling, bandwidth control, and batch download management. With a significantly reduced install size (around 20MB), it focuses on being lightweight, fast, and resource-efficient compared to traditional Electron-based download tools. Designed for Windows, macOS, and Linux, Motrix Next delivers a clean, modern UI inspired by Material Design 3 principles, with smooth animations and a minimal workflow. It improves usability through better download organization, system tray integration, and enhanced torrent handling including selective file downloads and tracker management. Motrix Next features: Multi-protocol downloads — HTTP, FTP, BitTorrent, Magnet, .torrent, ED2K, and Metalink tasks BitTorrent — Selective file download, DHT, peer exchange, encryption controls, metadata caching, GeoIP peer flags, and tracker probing Browser extension integration — Embedded Extension API with independent authentication, download confirmation, smart auto-submit, filename hints, referer/cookie forwarding, and real-time controls (Chrome Web Store · Edge Add-ons) Safe filename handling — Content-Disposition, RFC 2047, non-UTF-8, percent-encoded, and extensionless URL resolution with path traversal sanitization Download organization — Favorite and recent folders, optional file-type categorization, stale-record cleanup, and completed history backed by SQLite Concurrent downloads — Independent controls for active tasks, HTTP connections per server, segments per file, and BT peer limits Speed control — Global and per-task upload/download limits with day-of-week and time-of-day scheduling System integration — Tray operation, optional tray speed display, macOS Dock badge/progress, protocol handlers for magnet://, thunder://, and motrixnext:// Lightweight mode — Destroys the WebView on minimize-to-tray while Rust keeps the engine, task monitor, notifications, history, and extension routing alive Notifications and power options — Native task start/complete/failure notifications, keep-awake during downloads, and optional shutdown after completion Network controls — Scoped proxy support for downloads, app updates, and tracker updates, plus system proxy detection Auto-update channels — Stable, Beta, and Latest Across Channels policies with separate download and install phases Diagnostics — Structured logs, exportable diagnostic ZIPs, database integrity checks, automatic DB rebuild, and Linux GPU rendering fallback Personalization — Light/dark/system theme, 10 color schemes, 26 languages, and first-launch system language detection Motrix Next 3.9.6 changelog: New Features Clipboard management — App-owned copy actions no longer trigger the Add Task auto-detect popup. aria2 input compatibility — Multi-line aria2-style task input is supported for URLs with per-task options such as out=. BitTorrent IPv6 DHT — Added IPv6 DHT support and related configuration. File category URL patterns — File category rules can match URL patterns with validation and localized hints. Task status tags — Added clearer waiting and sharing states for task cards. Download event bridge — Added an aria2 WebSocket event bridge for faster download notifications. Improvements Improved task list transitions and preserved task state during tab switches. Kept RPC origin access enabled for local integrations. Restored AppImage stripping in release builds after beta validation. Added localized preference guidance across supported languages. Download: Motrix Next 64-bit | ARM64 | macOS ~20.0 MB (Open Source) Links: Website | macOS / Linux | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • Conversation Starter
      sumytbe earned a badge
      Conversation Starter
    • One Year In
      B4dM1k3 earned a badge
      One Year In
    • One Year In
      DarkWun earned a badge
      One Year In
    • Dedicated
      Almohandis earned a badge
      Dedicated
    • Dedicated
      JuvenileDelinquent earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      511
    2. 2
      +Edouard
      180
    3. 3
      PsYcHoKiLLa
      86
    4. 4
      Michael Scrip
      78
    5. 5
      Steven P.
      75
  • Tell a friend

    Love Neowin? Tell a friend!