The Proof behind just how worthless Windows One care really is.


Recommended Posts

Log file post from SuperAntispyware at the bottom of this post

I was working on a Vista laptop for a customer. All appeared well. No virus or spyware / malware or Trojan warnings. The customer was running windows one care. he didn't have service pack 1 so I installed it. Along will all the latest updates. But I noticed his task manager was disabled. To me that spells "your infected with something".

So I downloaded a copy of SuperAntispyware and did a full system scan. Keep in mind that according to one cares information, it was recently updated and recently did a full system scan with no problems detected.

I think the screenshots speak for themselves.

SuperAntispyware

capturekt2.jpg

Windows One Care

capture1ug6.jpg

Now I do realize other antiviruses could have failed just as miserably. But one care was the one on the system and at lease now we know at lease one worthless AV on the market.

Once that got done I opened defender which said it had not done a scan in 65 days. So I do a scan. It finds nothing.

Next I do a scan with Spybot Search and destroy.

Once again the screenshots speak for themselves.

Windows Defender

defednerhs0.jpg

Spybot Search and Destroy.

spybotuz4.jpg

List of files found in the Superantispyare Log file

C:\PROGRAM FILES\SEARCH SETTINGS\KB125\SEARCHSETTINGS.DLL

Rogue.AntiSpyStorm

C:\Program Files\AntispyStorm\AntispyStorm.exe.MANIFEST

C:\Program Files\AntispyStorm\config.dat

C:\Program Files\AntispyStorm\filesbase.bin

C:\Program Files\AntispyStorm\global_virus_table.bin

C:\Program Files\AntispyStorm\ignoredomainsbase.bin

C:\Program Files\AntispyStorm\ignorefilesbase.bin

C:\Program Files\AntispyStorm\ignoreregsbase.bin

C:\Program Files\AntispyStorm\mdReg.dll

C:\Program Files\AntispyStorm\parser.exe

C:\Program Files\AntispyStorm\regbase.bin

C:\Program Files\AntispyStorm\stat.bin

C:\Program Files\AntispyStorm\uninstall.exe

C:\Program Files\AntispyStorm\uninstall.log

C:\Program Files\AntispyStorm\urlbase.bin

C:\Program Files\AntispyStorm

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntispyStorm\Uninstall AntispyStorm.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntispyStorm

Trojan.Unclassified/NVCOI

C:\Program Files\Temporary

Adware.AdSponsor/ISM

C:\Program Files\Spcron

Trojan.Fake-Drop/Gen

C:\WINDOWS\CTFMON32.EXE

C:\WINDOWS\ACCESSS.EXE

C:\WINDOWS\AVPCC.DLL

C:\WINDOWS\CLRSSN.EXE

C:\WINDOWS\CPAN.DLL

C:\WINDOWS\CTRLPAN.DLL

C:\WINDOWS\DIRECTX32.EXE

C:\WINDOWS\DNSRELAY.DLL

C:\WINDOWS\EDITPAD.EXE

C:\WINDOWS\EXPLORE.EXE

C:\WINDOWS\EXPLORER32.EXE

C:\WINDOWS\FUNNIEST.EXE

C:\WINDOWS\FUNNY.EXE

C:\WINDOWS\GFMNAAA.DLL

C:\WINDOWS\HELPCVS.EXE

C:\WINDOWS\INETINF.EXE

C:\WINDOWS\INTERNET.EXE

C:\WINDOWS\MSCONFD.DLL

C:\WINDOWS\MSSPI.DLL

C:\WINDOWS\MSSYS.EXE

C:\WINDOWS\MSUPDATE.EXE

C:\WINDOWS\MSWSC10.DLL

C:\WINDOWS\MSWSC20.DLL

C:\WINDOWS\MTWIRL32.DLL

C:\WINDOWS\QUICKEN.EXE

C:\WINDOWS\NOTEPAD32.EXE

C:\WINDOWS\QTTASKS.EXE

C:\WINDOWS\RUNDLL16.EXE

C:\WINDOWS\SEARCHWORD.DLL

C:\WINDOWS\SISTEM.EXE

C:\WINDOWS\SVCHOST32.EXE

C:\WINDOWS\SVCINIT.EXE

C:\WINDOWS\WINDOW.EXE

C:\WINDOWS\TIME.EXE

C:\WINDOWS\USERS32.EXE

C:\WINDOWS\WAOL.EXE

C:\WINDOWS\WIN64.EXE

C:\WINDOWS\WINAJBM.DLL

C:\WINDOWS\WINMGNT.EXE

C:\WINDOWS\X.EXE

C:\WINDOWS\XPLUGIN.DLL

C:\WINDOWS\Y.EXE

Trojan.Dropper/ASTCTL32

C:\WINDOWS\ASTCTL32.OCX

Rogue.LiveSecurityCenter-Trace

C:\WINDOWS\DEFAULT.HTM

Trojan.Downloader-Gen/Win

C:\WINDOWS\IEDLL.EXE

C:\WINDOWS\WIN32E.EXE

Trojan.Unclassified/IExplorer-Fake

C:\WINDOWS\IEXPLORER.EXE

Trojan.Unclassified/Loader-Suspicious

C:\WINDOWS\LOADER.EXE

Trojan.CWS/VBE

C:\WINDOWS\RUNDLL32.VBE

Trojan.Downloader-Systeem

C:\WINDOWS\SYSTEEM.EXE

Trojan.Downloader-SystemCritcial/Fake Alert

C:\WINDOWS\SYSTEMCRITICAL.EXE

Trojan.Unclassified/XXXVid

C:\WINDOWS\XXXVIDEO.HTA

Adware.MyWebSearch

C:\WINDOWS.OLD\PROGRAM FILES\MYWEBSEARCH\BAR\1.BIN\MWSOEMON.EXE

Edited by warwagon

wow that is a massive fail on onecares part

the only thing that I could even think to ask was onecare installed before there was a problem or as an attempt to fix one that was there?

wow that is a massive fail on onecares part

the only thing that I could even think to ask was onecare installed before there was a problem or as an attempt to fix one that was there?

Well the fact it is on there at all with that many infections living right next to it, is just sad.

I'm not sure if onecare cleans out trackign cookies, wich is what all those file items are. and it's a fairly useless thign to do anyway.

I'm also fairly sure that it doesn't mess aroudn to much in the registry other than to remove stuff that actually comes with spyware, while that other apps seems to have decided to act as a registry cleaner, wichis not a good thing.

During the deletion process with superantispyware I saw a bunch of random Exe files getting deleted from the windows directoy. one of which was Y.exe

in that case it's strange, it hsould have detected any spyware executables as log as it's properly updated, wich it appears to be.

just think what NOD32 or Kaspersky would have clean'd out

Yes, because kaspersky or nod32 did better than Antivir which is also happens to be free :rolleyes:

One Care, here, just works fine...no virus and no spyware.

Haha? :blink:

I think it's generally considered good practice to have more than one defence these days...

Personally I use Superantispyware, AVG free, CCleaner and Lavasoft Adaware and have never had a problem...

No single program is 100% perfect but they'll catch pretty much everything between them :)

One thing for sure though - I'd NEVER pay for any antivirus/antispyware program - The free ones ARE good enough

(Well, they are in my own personal experience anyway)

I think it's generally considered good practice to have more than one defence these days...

Personally I use Superantispyware, AVG free, CCleaner and Lavasoft Adaware and have never had a problem...

No single program is 100% perfect but they'll catch pretty much everything between them :)

One thing for sure though - I'd NEVER pay for any antivirus/antispyware program - The free ones ARE good enough

(Well, they are in my own personal experience anyway)

I agree, but it also depends on the user. I mean some people just install and "ok-button-bash" anything :)

Been using Vista for more than a year now, after a year I did a spyware / malware check with several programs and all it found were some cookies.

/on-topic: Kinda disappointing from one-care, not that I use it, but it should have detected at least something I'd say.

All the Anti programs have their problems. It makes me laugh when you get a person saying "Program X is the best because I have no spyware/viruses on my PC" How do they know. This thread just goes to show that is not the case.

I run Kaspersky, but I would not say to anyone it's the best, because I don't know if it's got it all. I remember years ago someone telling me AVG was the daddy and I ran it for about a year. The day I swapped, Nod32 picked up a lot of crap. The day I swapped to Kaspersky, that picked up a bit of crap as well. If I swapped again when my sub runs out, whatever I choose to use will no doubt pick up some other crap.

[teach to suck eggs]

The best defence is not to download stuff you know 'may' contain trojans. Avoid dodgy sites (I know some legitimate sites that have dropped a nasty payload, so nothing is 100% safe) and browse with extensions like NoScipt and Adblock active. The only 100% safe way is not go on the interwebitubes (like that'll happen!)

[/teach to suck eggs]

i got avast home edition.. I Trust it to be the best (for me)

It already proved it was better then Novell (used @ school) that proved much for me XD

One Care, here, just works fine...no virus and no spyware.

That's the point of this thread.

I would suggest you take a few minutes to download and install another one, such as SuperAntiSpyware or Spybot, and just scan with those to make sure. Not every program is going to detect everything, and it's much better to have two or even three to make sure you're completely safe.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • FxSound 1.2.9.0 / 1.2.10.0 Beta by Razvan Serea FxSound (formerly DFX Audio Enhancer / FxSound Enhancer) is now free, making high-quality audio enhancement accessible to everyone. Designed for all PC sound systems, from average setups to audiophile-grade equipment, it offers automatic or fully customizable processing. As automatic or customizable as you want, it utilizes the highest-grade processing to deliver more volume, better equalization, and a wider, deeper sound. For the serious audiophiles, FxSound gives you the tools to adjust the FxSound Effects and EQ to your exact preferences. Turn FxSound on and immediately hear the difference in sound quality. FxSound is ideal for budget audiophiles, music lovers, gamers, transcriptionists, Netflix enthusiasts, and more. It’s particularly beneficial for those relying on quiet laptop speakers or low-quality audio hardware. As a free tool, FxSound excels in boosting volume, enhancing bass, and improving sound quality. No other free EQ for Windows matches its ease of use. FxSound Is Now Completely Free and Unrestricted FxSound Pro is now free for everyone, not just those who can afford it. Get free and unrestricted access to better sound today. FxSound is now entirely supported by users. Click here to donate to help fund continued development and improvements to FxSound. FxSound 1.2.9.0 changelog: Auto save preset when Equalizer or Effects settings are changed Reset to factory defaults can reset the unsaved preset changes Settings dialog UI improvements for Audio and Equalizer sections Output device list is now displayed in the device preference order Preset is selected immediately when the preset for an active output device changes from settings Fixes and improvements in preferred output device selection Fixed crash issue #487 Fixed preset not getting applied and EQ flat after update (#403 and #472) Fixed system audio device not being restored on reboot (#483) Fixed preset export and import dialogs not shown when always on top is enabled Fixed audio not being restored on exit after the preset save dialog Fixed FxSound on/off handling on Windows session changes FxSound 1.2.10.0 Beta changelog: Command line options can now be applied to an already running instance of FxSound Command line option added to launch FxSound minimized to the system tray Fixed output device not being changed through hotkeys when FxSound is off (#524) Individual hotkeys can now be disabled with Delete key (#515) Fixed the but to prevent invalid hotkeys from being registered (#523) Bluetooth devices removed from device settings are removed from device preference list Fixed device detection failures Fixed application hang when retrieving the audio mix format fails Fixed presets import dialog file name combo box text alignment Fixed output device not being applied through command line Fixed a delay blocking application load when minimizing to the system tray Fixed EQ band sliders not refreshing when switching number of bands (#521) Fixed user-set mute being overridden by FxSound Fixed icon visibility in ARM64 version Finnish language support added Corrected Persian translations Download: FxSound 1.2.9.0 | ARM64 | ~70.0 MB (Open Source) Download: FxSound 1.2.10.0 Beta | ARM64 View: FxSound Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • mIRC 7.84 Final by Razvan Serea mIRC is a full featured Internet Relay Chat client for Windows that can be used to communicate, share, play or work with others on IRC networks around the world, either in multi-user group conferences or in one-to-one private discussions. It has a clean, practical interface that is highly configurable and supports features such as buddy lists, file transfers, multi-server connections, SSL encryption, proxy support, UTF-8 display, customizable sounds, spoken messages, tray notifications, message logging, and more. mIRC also has a powerful scripting language that can be used both to automate mIRC and to create applications that perform a wide range of functions from network communications to playing games. mIRC has been in development for over a decade and is constantly being improved and updated with new technologies. mIRC 7.84 changelog: Added custom dialog editbox option 'optional' for grayed out optional text. Fixed DirectShow temporary wave file not being deleted on exit. Changed $urlget() to retry a connection without compression in the event of an error. Updated code signing certificate to use Azure Artifact Signing. Fixed menubar display bug when in dark mode. Fixed /server -a not preserving existing entry's codepage. Fixed Address Book nick colors "idle time" display bug. Changed installer to no longer require administrator access on startup. Added support for displaying an MDI window's System menu when right-clicking its titlebar. Updated libararies to OpenSSL v3.5.7, TagLib v2.2.1, Zlib v1.3.2, and ADA v0.5.5. Updated CA root certificates cacert.pem file. For a full list of recent changes, please see the versions.txt file. Download: mIRC 7.84 | 4.3 MB (Shareware) View: mIRC Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • You might be right... Look at his name, hiding in plain sight: hAmId.
    • ExplorerPatcher 26100.8457.70.3 by Razvan Serea ExplorerPatcher is a versatile and free tool that allows you to tweak and enhance the Windows Explorer. It comes with a range of useful features, including the ability to add new context menu items, change file name colors, and enable hidden features. Feature summary Choose between Windows 11 or Windows 10 taskbar (with labels support, small icons and lots of customization). Disable Windows 11 context menu and command bar in File Explorer and more. Open Start to All apps by default, choose number of frequent apps to show, display on active monitor and more. Choose between the Windows 11, Windows 10 and Windows NT Alt-Tab window switcher with customization. Lots of quality of life improvements for the shell, like: Skin tray menus to match Windows style, make them behave like flyouts and center them relative to the icon. Choose action when left and/or right clicking the network icon. Revert to the Windows 7 search box in File Explorer, or disable Windows Search altogether. Disable immersive menus and use mitigations that help you run the real classic theme without glitches. Discover the program's full range of features by reading this wiki article. ExplorerPatcher 26100.8457.70.3 changelog: Tested on OS builds 22621.4317, 22631.7079, 26100.6899, 26100.8037, 26200.8246, 26200.8457, 26300.8493, and 28000.2113. TIP: Windows Defender no longer flags ExplorerPatcher. It is no longer needed to configure Defender exclusions. Enjoy! Important Update for Windows Insider Users If you're running Windows 11 Beta build 26220.8474 or Experimental build 26300.8493, updating ExplorerPatcher is highly recommended. Microsoft has removed parts of the old Windows 10 Start menu from these builds, which caused ExplorerPatcher's Windows 10-style taskbar and Start menu to crash. This update fixes those issues and ensures Explorer starts correctly after future Windows updates. Because the required components are no longer included in Windows, the Windows 10 Start menu option has been disabled on these builds and future builds that lack the necessary files. A temporary workaround is to replace StartTileData.dll with a version from build 26xxx.8457, but this solution may stop working in future releases. The good news: development on the Windows 10 Start menu isn't over yet. More updates are planned. Highlights Fixed crashes affecting the Windows 10 battery flyout on Windows builds 25951 and newer. As part of that fix, network flyout buttons now behave like they did before Windows 11 version 24H2. Changes to the Primary taskbar location on screen setting now apply instantly without requiring a restart. ExplorerPatcher no longer modifies Windows 11 taskbar auto-hide settings when Explorer starts. The Open Start in All apps by default option is now hidden when the new Windows 11 Start menu is enabled. Fixed Windows 10 Start menu crashes on very early Windows 11 builds (21996–22000.51). Fixed a crash in Registry Editor when switching to thumbnail view during registry import/export operations. Improved compatibility with recent Windows builds, especially ARM64 and upcoming 26H1 releases. Improved overall ARM64 performance. Added Greek language translations. Thanks to @KonVetsos! ep_taskbar Improvements ep_taskbar now supports all 43 Windows 11 display languages. Fixed several issues in the system tray and other taskbar components. For mod developers: DLL naming has been simplified and made easier to understand. For mod developers: internal TrayUI changes provide better stability across Windows builds that use different taskbar implementations. Windows 10 Start Menu Improvements To help preserve compatibility, ExplorerPatcher now includes a newly recreated version of the tile layout engine that Microsoft removed in build 26xxx.8474. Current limitations: Tiles may occasionally overlap when pinned in certain ways. Restarting StartMenuExperienceHost.exe or Explorer usually corrects the layout. Further improvements are planned. Additional Fixes Added a blacklist that prevents ExplorerPatcher's shell extension from loading inside specific applications where it may cause problems. Updated Windows 10 Start menu animation support for newer ARM64 Insider builds. Fixed a rare taskbar initialization deadlock that could occur during startup. Start10 Updates Addressed a new compatibility issue caused by Microsoft's ongoing removal of tablet mode code in Windows 11 25H2 Experimental builds. Pinned tiles are no longer reset after repeated crashes. Various wording and interface text improvements throughout the application. Translation and UI Several interface strings have been cleaned up and clarified. Thanks to @sefinek for wording improvements. Please consult the README for more details. Download: ExplorerPatcher 26100.8457.70.3 | ARM64 | ~11.0 MB (Open Source) View: ExplorerPatcher Home Page | Features | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • This author may be AI..... we just...... don't know.... lol AI is taking over.....run for the hills!
  • Recent Achievements

    • One Month Later
      timbobit earned a badge
      One Month Later
    • One Month Later
      nates earned a badge
      One Month Later
    • Week One Done
      Almohandis earned a badge
      Week One Done
    • Rookie
      dorf went up a rank
      Rookie
    • First Post
      mike_rumble earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      468
    2. 2
      +Edouard
      165
    3. 3
      PsYcHoKiLLa
      106
    4. 4
      Michael Scrip
      87
    5. 5
      Steven P.
      69
  • Tell a friend

    Love Neowin? Tell a friend!