[icywhite2008]

Things seem to be running way way faster which is a great thing

It feels good ya know? I still can't run my Avast virus checker or system mechanic tho. Will I have to reinstall those too? As far as I know those are the only two programs not opening anymore, but I haven't tried them all of course.

Thanks so so so much for your help! You guys here are always amazing and I hope you don't take offense when I say I'm glad I don't have to use this forum often but when I DO need it, I'm always so happy with just how much you guys are willing to help people!

[Advertisements]

When you say that you can't run them do they not start?

OK for the programmes that don't want to play please do the following

Download this programme

Drag each of the exe files that you are unable to run into Inherit.exe.

Then wait for it to say "OK"

If that doesn't work I would suggest a reinstall, it should hopefully clear up any issues with them.

Now for the good news.

Congratulations your logs appear clean!!

Clean up

Follow these steps to uninstall Combofix and tools used in the removal of malware

• Click START then RUN
• Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
  

• Download OTC to your desktop and run it
• Click Yes to beginning the Cleanup process and remove these components, including this application.
• You will be asked to reboot the machine to finish the Cleanup process. Choose Yes.

Browsers

Just because your computer came loaded with Internet Explorer doesn't mean that you have to use it, there are other free alternatives, FIREFOX and OPERA, both are free to use and are more secure than IE.

If you are using firefox you can stay more secure by adding NoScript and WOT (Web Of Trust)

NoScript stops Java scripts from starting on a web page unless you give permission for them, and WOT (Web Of Trust) has a comprehensive list of ratings for different websites allowing you to easily see if a website that you are about to go to has a bad reputation; in fact it will warn you to check if you are sure that you want to continue to a bad website.

• Make your Internet Explorer more secure - This can be done by following these simple instructions:
• From within Internet Explorer click on the Tools menu and then click on Options.
• Click once on the Security tab
• Click once on the Internet icon so it becomes highlighted.
• Click once on the Custom Level button.
• Change the Download signed ActiveX controls to Prompt
• Change the Download unsigned ActiveX controls to Disable
• Change the Initialize and script ActiveX controls not marked as safe to Disable
• Change the Installation of desktop items to Prompt
• Change the Launching programs and files in an IFRAME to Prompt
• Change the Navigate sub-frames across different domains to Prompt
• When all these settings have been made, click on the OK button
• If it prompts you as to whether or not you want to save the settings, press the Yes button.
• Next press the Apply button and then the OK to exit the Internet Properties page.

Additional Security Measures

Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

SpywareBlaster- SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

You should have a good anti spyware program - We recommend MalwareBytes Anti-Malware and SUPERAntiSpyware

MVPS Hosts file The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer

Winpatrol Download and install the free version of Winpatrol. WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge.

Spring Cleaning

TFC - Temp File Cleaner by OldTimer - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders

Auslogics Disc Defrag or JKDefrag - Two good disc defragmenters for you to choose from.

Also, please read this great article by Tony Klein So How Did I Get Infected In First Place


Post back and let me know how you get on.

[chamber]

When you say that you can't run them do they not start?

OK for the programmes that don't want to play please do the following

Download this programme

Drag each of the exe files that you are unable to run into Inherit.exe.

Then wait for it to say "OK"

If that doesn't work I would suggest a reinstall, it should hopefully clear up any issues with them.

Now for the good news.

Congratulations your logs appear clean!!

Clean up

Follow these steps to uninstall Combofix and tools used in the removal of malware

• Click START then RUN
• Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
  

• Download OTC to your desktop and run it
• Click Yes to beginning the Cleanup process and remove these components, including this application.
• You will be asked to reboot the machine to finish the Cleanup process. Choose Yes.

Browsers

Just because your computer came loaded with Internet Explorer doesn't mean that you have to use it, there are other free alternatives, FIREFOX and OPERA, both are free to use and are more secure than IE.

If you are using firefox you can stay more secure by adding NoScript and WOT (Web Of Trust)

NoScript stops Java scripts from starting on a web page unless you give permission for them, and WOT (Web Of Trust) has a comprehensive list of ratings for different websites allowing you to easily see if a website that you are about to go to has a bad reputation; in fact it will warn you to check if you are sure that you want to continue to a bad website.

• Make your Internet Explorer more secure - This can be done by following these simple instructions:
• From within Internet Explorer click on the Tools menu and then click on Options.
• Click once on the Security tab
• Click once on the Internet icon so it becomes highlighted.
• Click once on the Custom Level button.
• Change the Download signed ActiveX controls to Prompt
• Change the Download unsigned ActiveX controls to Disable
• Change the Initialize and script ActiveX controls not marked as safe to Disable
• Change the Installation of desktop items to Prompt
• Change the Launching programs and files in an IFRAME to Prompt
• Change the Navigate sub-frames across different domains to Prompt
• When all these settings have been made, click on the OK button
• If it prompts you as to whether or not you want to save the settings, press the Yes button.
• Next press the Apply button and then the OK to exit the Internet Properties page.

Additional Security Measures

Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

SpywareBlaster- SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

You should have a good anti spyware program - We recommend MalwareBytes Anti-Malware and SUPERAntiSpyware

MVPS Hosts file The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer

Winpatrol Download and install the free version of Winpatrol. WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge.

Spring Cleaning

TFC - Temp File Cleaner by OldTimer - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders

Auslogics Disc Defrag or JKDefrag - Two good disc defragmenters for you to choose from.

Also, please read this great article by Tony Klein So How Did I Get Infected In First Place


Post back and let me know how you get on.

[icywhite2008]

Ok sorry for the delay!

The exe fixer corrected my System Mechanic program but not my Avast so I reinstalled that. I removed all of the tools we used during this process. I only have one issue that I know of remaining now. I have Windows updates set to download automatically now and for some reason it's giving me this message when it attempts to auto install the updates. I am running service pack 3, Windows XP home edition if that helps.

Microsoft .NET Framework 1.1 Service Pack 1 Security Update for Windows 2000, Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 (KB953297)
Windows Malicious Software Removal Tool - October 2009 (KB890830)

These are not installing, and it won't install from Windows Update site either.

I never ever use IE. If I didn't need it to check our web designs across all browsers before sending it to a client I would never even open it. I do use Firefox with No Script and Google Chrome when FF is running super slow. I run Avast and MalwareBytes on my computer and have for over 2 years now. Another person in our house got infected and we share the same wireless network so I'm not sure if I got it thru there or some other way.

Everything is working very well and the only issue now is the Windows updates not being able to install

Thanks so much for your help again! Hope you had a great weekend

[chamber]

So you can't get the MRT update from HERE then either?

Not sure what could be causing this? Are all other updates applying ok apart from the 3 you mentioned?

[icywhite2008]

It won't install from my automatic updates on my computer or from the MRT website either. I'll list what it's trying to install below and the error that I get directly on the MRT site.

Trying to install:
Microsoft .NET Framework 1.1 Service Pack 1 Security Update for Windows 2000, Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 (KB953297)
Cumulative Security Update for Internet Explorer 8 for Windows XP (KB974455)
Cumulative Security Update for ActiveX Killbits for Windows XP (KB973525)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB969059)


It successfully installed the Windows Malicious Software Removal Tool but none of the others. It gives the error message: Error Code: 0x80070005
... but I can't find this error message anywhere on MRT at all no clue

I found some answers in google about downloading the SubInACL tool to reset permissions back to default and install the updates but that didn't work either..... so now I'm lost on what to do to fix it

[chamber]

Lets try resetting your windows updates,

Download THIS programme.

Run it and see if that solves the problem.

[icywhite2008]

Well I tried to download it in FF, Safari, and Chrome and it lets me enter the captcha, takes me to the timer page, goes thru the timer, lets me click to download and then I get the msg that the download should have started immediately but it never does. I've tried in all 3 browsers twice..... it's definitely Monday

[chamber]

Ok then.



Lets give this one a whirl.

http://java.cms.livj...20Fix/WUFix.bat

[icywhite2008]

Well the page opens and I see a ton of code. Do I copy it and paste it into a notepad file or something? Or is it supposed to prompt a download?

[chamber]

Copy and paste it into notepad and save it as WUFIX.bat, double click it to run.

[icywhite2008]

Ok I ran it, and it installed some of the smaller files that needed to update, but it's still not installing the .NET Framework1.1.... so I googled the error code and came up with this http://support.microsoft.com/kb/923100

argggggg I guess I'll be doing that the rest of the day Monday, Monday, Monday

[chamber]

Is that the only update that it has left to do? I'll take a look through it and see what I can find. I don't think that it's related to Malware though, I would try the things suggested in the article for now.

I would also give your system a good defrag and perhaps run chkdsk to make sure that nothing was corrupted with all the malware on there.

[icywhite2008]

Whew! No I could tell from googling that it wasn't related to the Malware because so many people have had this same issue lately. I actually found a suggestion that worked so all is well YAY! I'll post below what worked for me just in case you come across anyone else having the same problem. There are a ton of solutions out there for this and not everything works for everyone so it might help or it might not

Thanks sooooooo much for your patience and help Chamber! You're an angel

What I did that finally fixed it:

Hello,

I've had the same problem. It just would not update. I tried the easiest way
possible without opening any command prompts.

In my add/remove programs I did show Microsoft .NET Framework 1.1 but I
couldn't remove it, so I downloaded it again which is Microsoft .NET
Framework Version 1.1 Redistributable Package. After that I downloaded the
service pack 1.

I went back to Microsoft Update and it(KB953297) installed successfully.

1.
http://www.microsoft...;displaylang=en

2.
http://www.microsoft...;displaylang=en

I hope this helps you and anyone else that ran into this problem.

[chamber]

Thank you very much for posting your solution.

And you're very welcome. Are you happy enough for me to close this then?

[icywhite2008]

Absolutely Chamber, you've been a huge help! Thanks so much and take care