Windows Update broken...

I've been having several PC problems over the last few weeks, which I have found out that some of them were due to Vundo/virtumonde and they have been removed (hopefully) but I goto Windows Update and I get this message:-

I can't activate the Automatic Updates as it says error 1058 "can't be started" when I try and start it. I tried to search for the Error number: 0x8DDD0018 but nothing comes up.

Now I get another error of Error number: 0x80070422 and some mentioned out of date Java?

Please help me as I'm going mad here

Also the menu in IE7 is gone (annoying but not important)

 

Hi Dansco

Ok when malware is cleaned does not mean there is no damge left so lets see if we can't fix it!

Download Dial-A-Fix (DAF)​

http://wiki.djlizard.net/Dial-a-fix#...C_and_articles​

Have XP CD available in case DAF needs a file.​

Check all boxes on the screen (clear any restrictions if it shows any)
Then click GO!​

When the entire page is finished click the HammerHead at bottom to go to the second DAF page.​

Here 1 at a time do the below​

Reinstall BITS
Reinstall Windows Firewall
Repair Permissions
Reset networking
Reset WMI/WBEM​

Watch for any File not found or other errors and make note as this may lead to the fix!​

Next:​

Clean and update Java​

Cleanup old Java and update to newest version this program will do it all for you.​

Download JavaRa http://prm753.bchea.org/JavaRa.html​

Unzip it, run it, cleanup old versions then use the update, chose Jucheck first and if you do not have Jucheck then chose Update using Sun and download Java. ​

Then click Additional tasks and check "remove Useless JRE files.​

Your ball!​

Mike ​

 

Firstly thanls for your help mate

Secondly there was an error and here's the log

Code:

--- Emptying temp folders ---
07:48:28 | Deleting D:\Documents and Settings\Dansco\Local Settings\Temp...
07:48:28 | D:\Documents and Settings\Dansco\Local Settings\Temp could not be completely emptied, please reboot and try again
07:48:28 | Deleting D:\WINDOWS\temp...
07:48:29 | D:\WINDOWS\temp could not be completely emptied, please reboot and try again
07:48:29 | Deleting D:\DOCUME~1\Dansco\LOCALS~1\Temp...
07:48:29 | D:\DOCUME~1\Dansco\LOCALS~1\Temp could not be completely emptied, please reboot and try again
--- MSI ---
07:48:41 | Registered: D:\WINDOWS\system32\msi.dll
--- Windows Update ---
--- Registration: Windows Update/Automatic Update DLLs ---
07:48:47 | Unregistered: D:\WINDOWS\system32\msxml.dll
07:48:47 | Registered: D:\WINDOWS\system32\msxml.dll
07:48:48 | Unregistered: D:\WINDOWS\system32\msxml2.dll
07:48:50 | Registered: D:\WINDOWS\system32\msxml2.dll
07:48:50 | Unregistered: D:\WINDOWS\system32\msxml3.dll
07:48:56 | Registered: D:\WINDOWS\system32\msxml3.dll
07:48:58 | Unregistered: D:\WINDOWS\system32\msxml4.dll
07:49:00 | Registered: D:\WINDOWS\system32\msxml4.dll
07:49:00 | Unregistered: D:\WINDOWS\system32\qmgr.dll
07:49:02 | Registered: D:\WINDOWS\system32\qmgr.dll
07:49:02 | Unregistered: D:\WINDOWS\system32\qmgrprxy.dll
07:49:02 | Registered: D:\WINDOWS\system32\qmgrprxy.dll
07:49:04 | Unregistered: D:\WINDOWS\system32\muweb.dll
07:49:04 | Registered: D:\WINDOWS\system32\muweb.dll
07:49:05 | Unregistered: D:\WINDOWS\system32\winhttp.dll
07:49:05 | Registered: D:\WINDOWS\system32\winhttp.dll
07:49:07 | Registered: D:\WINDOWS\system32\wuapi.dll
07:49:08 | Unregistered: D:\WINDOWS\system32\wuaueng.dll
07:49:11 | Error during registration of D:\WINDOWS\system32\wuaueng.dll - version: 7.0.6000.381. The error returned is: The specified service has been marked for deletion.
(-2147023824)
07:49:11 | Unregistered: D:\WINDOWS\system32\wuaueng1.dll
07:49:11 | Registered: D:\WINDOWS\system32\wuaueng1.dll
07:49:11 | Unregistered: D:\WINDOWS\system32\wucltui.dll
07:49:11 | Registered: D:\WINDOWS\system32\wucltui.dll
07:49:11 | Unregistered: D:\WINDOWS\system32\wups.dll
07:49:12 | Registered: D:\WINDOWS\system32\wups.dll
07:49:12 | Unregistered: D:\WINDOWS\system32\wups2.dll
07:49:14 | Registered: D:\WINDOWS\system32\wups2.dll
07:49:14 | Unregistered: D:\WINDOWS\system32\wuweb.dll
07:49:14 | Registered: D:\WINDOWS\system32\wuweb.dll
07:49:14 | Registered: D:\WINDOWS\system32\ole32.dll
--- SSL/HTTPS/Cryptography ---
07:49:22 | Executed 'cmd.exe /c rmdir /q /s D:\WINDOWS\system32\Catroot2'
--- Registration: SSL/HTTPS/Cryptography ---
07:49:25 | Unregistered: D:\WINDOWS\system32\cryptdlg.dll
07:49:25 | Registered: D:\WINDOWS\system32\cryptdlg.dll
07:49:25 | Unregistered: D:\WINDOWS\system32\cryptui.dll
07:49:25 | Registered: D:\WINDOWS\system32\cryptui.dll
07:49:27 | Unregistered: D:\WINDOWS\system32\cryptext.dll
07:49:29 | Registered: D:\WINDOWS\system32\cryptext.dll
07:49:29 | Unregistered: D:\WINDOWS\system32\dssenh.dll
07:49:29 | Registered: D:\WINDOWS\system32\dssenh.dll
07:49:29 | Unregistered: D:\WINDOWS\system32\gpkcsp.dll
07:49:29 | Registered: D:\WINDOWS\system32\gpkcsp.dll
07:49:32 | Unregistered: D:\WINDOWS\system32\initpki.dll
07:50:12 | Registered: D:\WINDOWS\system32\initpki.dll
07:50:13 | Unregistered: D:\WINDOWS\system32\licdll.dll
07:50:13 | Registered: D:\WINDOWS\system32\licdll.dll
07:50:13 | Unregistered: D:\WINDOWS\system32\mssign32.dll
07:50:13 | Registered: D:\WINDOWS\system32\mssign32.dll
07:50:13 | Unregistered: D:\WINDOWS\system32\mssip32.dll
07:50:15 | Registered: D:\WINDOWS\system32\mssip32.dll
07:50:17 | Unregistered: D:\WINDOWS\system32\scardssp.dll
07:50:17 | Registered: D:\WINDOWS\system32\scardssp.dll
07:50:18 | Unregistered: D:\WINDOWS\system32\sccbase.dll
07:50:18 | Registered: D:\WINDOWS\system32\sccbase.dll
07:50:18 | Unregistered: D:\WINDOWS\system32\scecli.dll
07:50:20 | Registered: D:\WINDOWS\system32\scecli.dll
07:50:20 | Unregistered: D:\WINDOWS\system32\softpub.dll
07:50:23 | Registered: D:\WINDOWS\system32\softpub.dll
07:50:24 | Unregistered: D:\WINDOWS\system32\slbcsp.dll
07:50:25 | Registered: D:\WINDOWS\system32\slbcsp.dll
07:50:25 | Unregistered: D:\WINDOWS\system32\regwizc.dll
07:50:25 | Registered: D:\WINDOWS\system32\regwizc.dll
07:50:25 | Unregistered: D:\WINDOWS\system32\rsaenh.dll
07:50:25 | Registered: D:\WINDOWS\system32\rsaenh.dll
07:50:26 | Unregistered: D:\WINDOWS\system32\winhttp.dll
07:50:26 | Registered: D:\WINDOWS\system32\winhttp.dll
07:50:26 | Unregistered: D:\WINDOWS\system32\wintrust.dll
07:50:33 | Registered: D:\WINDOWS\system32\wintrust.dll
--- Registration: ActiveX controls/codecs ---
07:50:34 | Registered: D:\WINDOWS\system32\acelpdec.ax
07:50:34 | Registered: D:\WINDOWS\system32\actxprxy.dll
07:50:34 | Registered: D:\WINDOWS\system32\asctrls.ocx
07:50:34 | Registered: D:\WINDOWS\system32\daxctle.ocx
07:50:34 | Registered: D:\WINDOWS\system32\hhctrl.ocx
07:50:34 | Registered: D:\WINDOWS\system32\l3codecx.ax
07:50:34 | Registered: D:\WINDOWS\system32\licmgr10.dll
07:50:34 | Registered: D:\WINDOWS\system32\mpg4ds32.ax
07:50:49 | Registered: D:\WINDOWS\system32\msdxm.ocx
07:50:49 | Registered: D:\WINDOWS\system32\proctexe.ocx
07:50:49 | Registered: D:\WINDOWS\system32\tdc.ocx
07:50:50 | Registered: D:\WINDOWS\system32\wshom.ocx
--- Registration: Control Panel applets ---
07:50:55 | DllInstalled: D:\WINDOWS\system32\inetcpl.cpl
07:50:55 | DllInstalled: D:\WINDOWS\system32\nusrmgr.cpl
07:50:55 | Registered: D:\WINDOWS\system32\nusrmgr.cpl
--- Registration: Direct[X|Draw|Show|Media] ---
07:50:56 | Registered: D:\WINDOWS\system32\quartz.dll
07:50:58 | Registered: D:\WINDOWS\system32\danim.dll
07:50:58 | Registered: D:\WINDOWS\system32\dmscript.dll
07:50:58 | Registered: D:\WINDOWS\system32\dmstyle.dll
07:50:58 | Registered: D:\WINDOWS\system32\dxmasf.dll
07:50:58 | Registered: D:\WINDOWS\system32\dxtmsft.dll
07:50:58 | Registered: D:\WINDOWS\system32\dxtrans.dll
07:50:58 | Registered: D:\WINDOWS\system32\sbe.dll
--- Registration: Programming cores/runtimes ---
07:50:59 | Registered: D:\WINDOWS\system32\atl.dll
07:50:59 | Registered: D:\WINDOWS\system32\corpol.dll
07:50:59 | Registered: D:\WINDOWS\system32\jscript.dll
07:50:59 | Registered: D:\WINDOWS\system32\dispex.dll
07:51:02 | Registered: D:\WINDOWS\system32\scrrun.dll
07:51:02 | Registered: D:\WINDOWS\system32\scrobj.dll
07:51:02 | Registered: D:\WINDOWS\system32\vbscript.dll
07:51:03 | Registered: D:\WINDOWS\system32\wshext.dll
--- Registration: Explorer/IE/OE/shell/WMP ---
07:51:03 | Registered: D:\WINDOWS\system32\activeds.dll
07:51:03 | Registered: D:\WINDOWS\system32\audiodev.dll
07:51:04 | Registered: D:\WINDOWS\system32\browsewm.dll
07:51:04 | Registered: D:\WINDOWS\system32\cabview.dll
07:51:07 | Registered: D:\WINDOWS\system32\cdfview.dll
07:51:07 | Registered: D:\WINDOWS\system32\clbcatex.dll
07:51:07 | Registered: D:\WINDOWS\system32\clbcatq.dll
07:51:07 | Registered: D:\WINDOWS\system32\comcat.dll
07:51:07 | Registered: D:\WINDOWS\system32\cscui.dll
07:51:07 | Registered: D:\WINDOWS\system32\credui.dll
07:51:07 | Registered: D:\WINDOWS\system32\datime.dll
07:51:08 | Registered: D:\WINDOWS\system32\devmgr.dll
07:51:08 | Registered: D:\WINDOWS\system32\dfsshlex.dll
07:51:08 | Registered: D:\WINDOWS\system32\dmdlgs.dll
07:51:08 | Registered: D:\WINDOWS\system32\dmdskmgr.dll
07:51:08 | Registered: D:\WINDOWS\system32\dmloader.dll
07:51:08 | Registered: D:\WINDOWS\system32\dmocx.dll
07:51:08 | Registered: D:\WINDOWS\system32\dmview.ocx
07:51:08 | DllInstalled: D:\WINDOWS\system32\dsuiext.dll
07:51:08 | Registered: D:\WINDOWS\system32\dsuiext.dll
07:51:08 | DllInstalled: D:\WINDOWS\system32\dsquery.dll
07:51:08 | Registered: D:\WINDOWS\system32\dsquery.dll
07:51:09 | Registered: D:\WINDOWS\system32\dskquoui.dll
07:51:09 | Registered: D:\WINDOWS\system32\els.dll
07:51:09 | Registered: D:\WINDOWS\system32\es.dll
07:51:09 | Registered: D:\WINDOWS\system32\fontext.dll
07:51:09 | Registered: D:\WINDOWS\system32\hlink.dll
07:51:10 | Registered: D:\WINDOWS\system32\hnetcfg.dll
07:51:10 | Registered: D:\WINDOWS\system32\iedkcs32.dll
07:51:10 | Registered: D:\WINDOWS\system32\iepeers.dll
07:51:11 | Registered: D:\WINDOWS\system32\ils.dll
07:51:11 | Registered: D:\WINDOWS\system32\inetcfg.dll
07:51:11 | Registered: D:\WINDOWS\system32\inetcomm.dll
07:51:11 | Registered: D:\WINDOWS\system32\laprxy.dll
07:51:15 | Registered: D:\WINDOWS\system32\lmrt.dll
07:51:15 | Registered: D:\WINDOWS\system32\mlang.dll
07:51:16 | Registered: D:\WINDOWS\system32\mmcndmgr.dll
07:51:16 | Registered: D:\WINDOWS\system32\mmcshext.dll
07:51:16 | Registered: D:\WINDOWS\system32\mscoree.dll
07:51:17 | Registered: D:\WINDOWS\system32\mshtmled.dll
07:51:17 | Registered: D:\WINDOWS\system32\msoeacct.dll
07:51:17 | Registered: D:\WINDOWS\system32\msr2c.dll
07:51:17 | DllInstalled: D:\WINDOWS\system32\mydocs.dll
07:51:18 | Registered: D:\WINDOWS\system32\mydocs.dll
07:51:18 | Registered: D:\WINDOWS\system32\mstime.dll
07:51:19 | Registered: D:\WINDOWS\system32\netcfgx.dll
07:51:19 | DllInstalled: D:\WINDOWS\system32\netplwiz.dll
07:51:20 | Registered: D:\WINDOWS\system32\netplwiz.dll
07:51:22 | Registered: D:\WINDOWS\system32\netman.dll
07:51:22 | Registered: D:\WINDOWS\system32\netshell.dll
07:51:22 | Registered: D:\WINDOWS\system32\ntmsevt.dll
07:51:22 | Registered: D:\WINDOWS\system32\ntmsmgr.dll
07:51:23 | DllInstalled: D:\WINDOWS\system32\ntmssvc.dll
07:51:23 | Registered: D:\WINDOWS\system32\ntmssvc.dll
07:51:23 | DllInstalled: D:\WINDOWS\system32\occache.dll
07:51:23 | Registered: D:\WINDOWS\system32\occache.dll
07:51:23 | Registered: D:\WINDOWS\system32\ole32.dll
07:51:25 | Registered: D:\WINDOWS\system32\oleaut32.dll
07:51:25 | Registered: D:\WINDOWS\system32\oleacc.dll
07:51:25 | Registered: D:\WINDOWS\system32\olepro32.dll
07:51:25 | DllInstalled: D:\WINDOWS\system32\photowiz.dll
07:51:25 | Registered: D:\WINDOWS\system32\photowiz.dll
07:51:25 | Registered: D:\WINDOWS\system32\remotepg.dll
07:51:25 | Registered: D:\WINDOWS\system32\rpcrt4.dll
07:51:25 | Registered: D:\WINDOWS\system32\rshx32.dll
07:51:26 | Registered: D:\WINDOWS\system32\sendmail.dll
07:51:26 | Registered: D:\WINDOWS\system32\slayerxp.dll
07:51:26 | Registered: D:\WINDOWS\system32\shell32.dll
07:51:29 | DllInstalled: D:\WINDOWS\system32\shell32.dll
07:51:29 | Registered: D:\WINDOWS\system32\shmedia.dll
07:51:29 | DllInstalled: D:\WINDOWS\system32\shimgvw.dll
07:51:29 | Registered: D:\WINDOWS\system32\shimgvw.dll
07:51:30 | DllInstalled: D:\WINDOWS\system32\shsvcs.dll
07:51:30 | Registered: D:\WINDOWS\system32\shsvcs.dll
07:51:30 | Registered: D:\WINDOWS\system32\srclient.dll
07:51:30 | Unregistered: D:\WINDOWS\system32\stobject.dll
07:51:30 | Registered: D:\WINDOWS\system32\stobject.dll
07:51:30 | Registered: D:\WINDOWS\system32\twext.dll
07:51:31 | DllInstalled: D:\WINDOWS\system32\urlmon.dll
07:51:31 | Registered: D:\WINDOWS\system32\urlmon.dll
07:51:31 | Registered: D:\WINDOWS\system32\userenv.dll
07:51:31 | Registered: D:\WINDOWS\system32\winhttp.dll
07:51:31 | DllInstalled: D:\WINDOWS\system32\wininet.dll
07:51:31 | Registered: D:\WINDOWS\system32\zipfldr.dll
07:51:31 | Registered: D:\Program Files\Common Files\system\Ole DB\msdadc.dll
07:51:31 | Registered: D:\Program Files\Common Files\system\Ole DB\msdaenum.dll
07:51:31 | Registered: D:\Program Files\Common Files\system\Ole DB\msdaer.dll
07:51:32 | Registered: D:\Program Files\Common Files\system\Ole DB\msdaipp.dll
07:51:32 | Registered: D:\Program Files\Common Files\system\Ole DB\msdaora.dll
07:51:33 | Registered: D:\Program Files\Common Files\system\Ole DB\msdaosp.dll
07:51:33 | Registered: D:\Program Files\Common Files\system\Ole DB\msdaps.dll
07:51:33 | Registered: D:\Program Files\Common Files\system\Ole DB\msdasc.dll
07:51:33 | Registered: D:\Program Files\Common Files\system\Ole DB\msdasql.dll
07:51:34 | Registered: D:\Program Files\Common Files\system\Ole DB\msdatt.dll
07:51:34 | Registered: D:\Program Files\Common Files\system\Ole DB\msdaurl.dll
07:51:35 | Registered: D:\Program Files\Common Files\system\Ole DB\msdmeng.dll
07:51:38 | Registered: D:\Program Files\Common Files\system\Ole DB\msdmine.dll
07:51:40 | Registered: D:\Program Files\Common Files\system\Ole DB\msmdcb80.dll
07:51:41 | Registered: D:\Program Files\Common Files\system\Ole DB\msmdgd80.dll
07:51:41 | Registered: D:\Program Files\Common Files\system\Ole DB\msolap80.dll
07:51:43 | Registered: D:\Program Files\Common Files\system\Ole DB\msolui80.dll
07:51:43 | Registered: D:\Program Files\Common Files\system\Ole DB\msxactps.dll
07:51:44 | Registered: D:\Program Files\Common Files\system\Ole DB\oledb32.dll
07:51:44 | Registered: D:\Program Files\Common Files\system\Ole DB\oledb32r.dll
07:51:46 | Registered: D:\Program Files\Common Files\system\Ole DB\sqloledb.dll
07:51:47 | Registered: D:\Program Files\Common Files\system\Ole DB\sqlxmlx.dll
--- Flush SoftwareDistribution ---

Here's the rest of the log:-

Code:

---- Reinstall Windows Firewall ---
--- Repair permissions ---
--- Repair permissions ---
--- Network interface reset ---
07:54:33 | --- Reset WMI/WBEM ---
07:54:34 | Registered: D:\WINDOWS\system32\wbem\cimwin32.dll
07:54:35 | Registered: D:\WINDOWS\system32\wbem\CmdEvTgProv.dll
07:54:35 | Registered: D:\WINDOWS\system32\wbem\dsprov.dll
07:54:35 | Registered: D:\WINDOWS\system32\wbem\esscli.dll
07:54:36 | Registered: D:\WINDOWS\system32\wbem\evntrprv.dll
07:54:36 | Registered: D:\WINDOWS\system32\wbem\fastprox.dll
07:54:36 | Registered: D:\WINDOWS\system32\wbem\fwdprov.dll
07:54:37 | Registered: D:\WINDOWS\system32\wbem\krnlprov.dll
07:54:37 | Registered: D:\WINDOWS\system32\wbem\mofd.dll
07:54:37 | Registered: D:\WINDOWS\system32\wbem\msiprov.dll
07:54:37 | Registered: D:\WINDOWS\system32\wbem\ncprov.dll
07:54:38 | Registered: D:\WINDOWS\system32\wbem\ntevt.dll
07:54:38 | Registered: D:\WINDOWS\system32\wbem\policman.dll
07:54:38 | Registered: D:\WINDOWS\system32\wbem\repdrvfs.dll
07:54:38 | Registered: D:\WINDOWS\system32\wbem\smtpcons.dll
07:54:39 | Registered: D:\WINDOWS\system32\wbem\stdprov.dll
07:54:39 | Registered: D:\WINDOWS\system32\wbem\tmplprov.dll
07:54:39 | Registered: D:\WINDOWS\system32\wbem\trnsprov.dll
07:54:39 | Registered: D:\WINDOWS\system32\wbem\updprov.dll
07:54:40 | Registered: D:\WINDOWS\system32\wbem\viewprov.dll
07:54:40 | Registered: D:\WINDOWS\system32\wbem\wbemads.dll
07:54:40 | Registered: D:\WINDOWS\system32\wbem\wbemcntl.dll
07:54:40 | Registered: D:\WINDOWS\system32\wbem\wbemcons.dll
07:54:41 | Registered: D:\WINDOWS\system32\wbem\wbemcore.dll
07:54:42 | Registered: D:\WINDOWS\system32\wbem\wbemdisp.dll
07:54:43 | Registered: D:\WINDOWS\system32\wbem\wbemess.dll
07:54:43 | Registered: D:\WINDOWS\system32\wbem\wbemperf.dll
07:54:43 | Registered: D:\WINDOWS\system32\wbem\wbemprox.dll
07:54:43 | Registered: D:\WINDOWS\system32\wbem\wbemsvc.dll
07:56:08 | Registered: D:\WINDOWS\system32\wbem\wbemupgd.dll
07:56:11 | Registered: D:\WINDOWS\system32\wbem\wmiaprpl.dll
07:56:12 | Registered: D:\WINDOWS\system32\wbem\wmicookr.dll
07:56:12 | Registered: D:\WINDOWS\system32\wbem\wmidcprv.dll
07:56:12 | Registered: D:\WINDOWS\system32\wbem\wmimsg.dll
07:56:13 | Registered: D:\WINDOWS\system32\wbem\wmipcima.dll
07:56:13 | Registered: D:\WINDOWS\system32\wbem\wmipdskq.dll
07:56:13 | Registered: D:\WINDOWS\system32\wbem\wmipiprt.dll
07:56:13 | Registered: D:\WINDOWS\system32\wbem\wmiprov.dll
07:56:14 | Registered: D:\WINDOWS\system32\wbem\wmipsess.dll
07:56:15 | Registered: D:\WINDOWS\system32\wbem\wmisvc.dll
07:56:15 | Registered: D:\WINDOWS\system32\wbem\wmitimep.dll
07:56:15 | Registered: D:\WINDOWS\system32\wbem\wmiutils.dll
07:56:29 | Started WinMgmt service

 

OK Dan

That should have fixed much but not all as I can see from the logs.

And your message reference JavaRa, did you or did you not do it?

And why no report on the general state of things after this?

Next:

Put your XP CD into the drive!

Run DAF again, select Hammer to go to 2nd DAF page.

Then run
SFC Purge
then run
SFC Scan

then reboot and run the entire DAF 1st page again.

Then get me the new logs and tell me about the state of the system.

After that if it works, I have just a few more steps to finish up1

Mike

 

Java thing done and v1.6.07 installed. SFC both done.

 

OK I understand you have done all! Thats good!

BUT! Are you afraid to tell me how the computer runs now!

WHAT REMAINS TO BE FIXED?!

Where is the DAF log from the last run?

Mike

 

Sorry mate I was watching football.

Done everything you said and the PC boots ok except for asking for a floppy disk with Explorer.exe during boot and still no menu in IE7

 

OK Good!

By menu in IE do you mean the "File Edit View etc "

If so have you rt clicked a blank spot in the Tan colered area and checked Menu? Then turn off Lock toolbars and lft click and pull down (stretch) the bottom of the IE header (double arrow)?

On the Explorer asking for a Floppy.. feed it one! Then let me know!

Mike

 

Both problems have been solved as once I'd done all this Vundo/Virtu hit me again by trying to load certain files so I replaced Windows by using option "L ".

Just ran JaraRa and got this log

Code:

JavaRa 1.11 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Aug 17 08:00:15 2008

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

------------------------------------

Finished reporting.

JavaRa 1.11 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Aug 17 08:01:20 2008

------------------------------------

Finished reporting.

JavaRa 1.11 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Mon Aug 18 09:08:58 2008

------------------------------------

Finished reporting.

I installed Java v1.6.07 yesterday and IE7 works ok and so does Windows Update. Thanx again for your help mate.

So know that I have the latest Java and removed Vundo, is my system fixed? What can I do to stop this happening again?

 

"L" Option, from where?

You mean you reinstalled windows? If so I hope you saved all your documents emails and other data.

Shame if you did reinstall as we had it fixed and all we needed to do was properly remove Vundo!

As for how try not to get infected again!

Geri lays it out here!
http://www.windowsbbs.com/malware-virus-removal/67958-ounce-prevention-worth-pound-cure.html

My comments on Geri's post for your case.
1. AVG8 is causing many issues I would not use it.

2. If you use a Router then the Windows Firewall is suffecient.

3. If your computer is connected directly to a Cable/DSL modem then use the COMODO Firewall and stay away fom Zone Alarm!

4. For sure get Malwarebytes, SpyBot, Adaware and SpywareBlaster and run each of them at least bi-weekly. Run 1 while eating a meal, another while watching TV etc they do not have to cut into your actual computing time if used properly.

5. Keep XClean_micro updated and run it as above.

I would not do #9 MVPHOSTS but do Hostman http://www.abelhadigital.com/2008/07/hostsman-3157-released.html
as it has the MVPHOSTS plus more.

Finally: Stay clean

Cleaners

D/L install and run ATF-Cleaner clear all except passwords in all browsers you have. Run repeatedly until no more found.​

http://www.majorgeeks.com/ATF_Cleaner_d4949.html​

-----------------------------------------------------------------------​

D/L and install CCleaner: Clean temps and registry. Run both (temp and registry) repeatedly until no more found.​

http://www.ccleaner.com/download/builds get Slim version​

Mike

 

Replaced mate - it deleted the install and replaced it with a new one. Had enough of all the problems and wanted my PC back.

Thanx for all your help and will follow your advice