1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved windows update downloads but will not install

Discussion in 'Malware and Virus Removal Archive' started by fantauk, 2010/08/22.

Page 3 of 4
  1. 2010/09/09
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    Kaperski is on 99% and still going. I am off to work. I will leave it to my partner to save the log file and post it :cool:
     
    fantauk,
    #41
  2. 2010/09/09
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    I have got back from work and it is still at 99% still seems to be on the same file. It seems to be frozen. It is doing my E drive (photo's and video) Shall I just view report?
     
    fantauk,
    #42


  3. to hide this advert.

  4. 2010/09/09
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You can stop it and see, if any report has been produced.

    Also...

    Please run a free online scan with the ESET Online Scanner

    • Disable your antivirus program
    • Tick the box next to YES, I accept the Terms of Use
    • IMPORTANT! UN-check Remove found threats
    • Click Start
    • Accept any security warnings from your browser.
    • Check Scan archives
    • Click Start
    • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    • When the scan completes, push List of found threats
    • Push Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
     
    broni,
    #43
  5. 2010/09/10
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    I did not get a report. It said I had to stop my pop up blocker to see virus encycolpedia website but I did not have pop up blocker on. I have tried to run it 3 times now. The second time it got to about 26% and after about 4 hours it still said it had only been running for 2 hours 40 mins. I tried it a 3rd time and started it at 18.25 and at 22.21 it is still saying it has been running 2hours 20 mins and seems to be stuck on 1 file and 14%. Please advise what I am doing wrong. I am going to bed now early start tomorrow.
     
    fantauk,
    #44
  6. 2010/09/10
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Try another one...

    Please run a BitDefender Online Scan

    • Disable your antivirus program.
    • Click Start Scanner button.
    • Click Start scan button
    • Allow browser plug-in to be installed when prompted.
    • Click I Agree to agree to the EULA.
    • Please refrain from using the computer until the scan is finished.
    • When the scan is finished, click on View log.
    • Notepad will open with scan results.
    • Save the report to your desktop and post its content in your next reply.
     
    broni,
    #45
  7. 2010/09/12
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    BitDefender Online Scanner



    Scan report generated at: Sun, Sep 12, 2010 - 01:46:45





    Scan path: A:\;C:\;D:\;E:\;







    Statistics

    Time
    04:27:42

    Files
    549122

    Folders
    20132

    Boot Sectors
    0

    Archives
    18194

    Packed Files
    28229




    Results

    Identified Viruses
    7

    Infected Files
    20

    Suspect Files
    0

    Warnings
    0

    Disinfected
    3

    Deleted Files
    17




    Engines Info

    Virus Definitions
    6366429

    Engine build
    AVCORE v2.1 Windows/i386 11.0.0.33 (Jun 18 2010)

    Scan plugins
    18

    Archive plugins
    44

    Unpack plugins
    10

    E-mail plugins
    6

    System plugins
    4




    Scan Settings

    First Action
    Disinfect

    Second Action
    Delete

    Heuristics
    Yes

    Enable Warnings
    Yes

    Scanned Extensions
    *;

    Exclude Extensions


    Scan Emails
    Yes

    Scan Archives
    Yes

    Scan Packed
    Yes

    Scan Files
    Yes

    Scan Boot
    Yes




    Scanned File
    Status

    C:\Documents and Settings\franco\utils\antispy utilities\registry-clean-expert 3.3.exe
    Infected with: Trojan.Generic.69358

    C:\Documents and Settings\franco\utils\antispy utilities\registry-clean-expert 3.3.exe
    Deleted

    C:\Documents and Settings\franco\utils\antispy utilities\registry-clean-expert.exe
    Infected with: Trojan.Generic.69358

    C:\Documents and Settings\franco\utils\antispy utilities\registry-clean-expert.exe
    Deleted

    C:\Program Files\Incomplete\T-3545427-so long dashboard.mp3
    Infected with: Trojan.Wimad.Gen.1

    C:\Program Files\Incomplete\T-3545427-so long dashboard.mp3
    Disinfected

    C:\Program Files\Incomplete\T-4620425-bang ladyhawke [256k quality].mp3
    Infected with: Trojan.Wimad.Gen.1

    C:\Program Files\Incomplete\T-4620425-bang ladyhawke [256k quality].mp3
    Disinfected

    C:\Program Files\Incomplete\T-5995321-this little light of mine new single.mp3
    Infected with: Trojan.Wimad.Gen.1

    C:\Program Files\Incomplete\T-5995321-this little light of mine new single.mp3
    Disinfected

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{0BF41F17-01D4-4D7F-B091-71D623448941}.DLL=>{0BF41F17-01D4-4D7F-B091-71D623448941}.DLL
    Detected with: Adware.Mywebsearch.AL

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{0BF41F17-01D4-4D7F-B091-71D623448941}.DLL=>{0BF41F17-01D4-4D7F-B091-71D623448941}.DLL
    Deleted

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{0BF41F17-01D4-4D7F-B091-71D623448941}.DLL
    Updated

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{5D8D35FC-EFDA-45CB-8480-CAF2A5BFBF0F}.DLL=>{5D8D35FC-EFDA-45CB-8480-CAF2A5BFBF0F}.DLL
    Detected with: Adware.Mywebsearch.C

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{5D8D35FC-EFDA-45CB-8480-CAF2A5BFBF0F}.DLL=>{5D8D35FC-EFDA-45CB-8480-CAF2A5BFBF0F}.DLL
    Deleted

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{5D8D35FC-EFDA-45CB-8480-CAF2A5BFBF0F}.DLL
    Updated

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{6BE58312-B699-47D1-B577-80138D9D5422}.DLL=>{6BE58312-B699-47D1-B577-80138D9D5422}.DLL
    Detected with: Adware.Mywebsearch.AL

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{6BE58312-B699-47D1-B577-80138D9D5422}.DLL=>{6BE58312-B699-47D1-B577-80138D9D5422}.DLL
    Deleted

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{6BE58312-B699-47D1-B577-80138D9D5422}.DLL
    Updated

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{7D589496-B5F8-4964-9634-775BF35ED7B9}.DLL=>{7D589496-B5F8-4964-9634-775BF35ED7B9}.DLL
    Infected with: Virtool.4282

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{7D589496-B5F8-4964-9634-775BF35ED7B9}.DLL=>{7D589496-B5F8-4964-9634-775BF35ED7B9}.DLL
    Deleted

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{7D589496-B5F8-4964-9634-775BF35ED7B9}.DLL
    Updated

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{80A3179A-F726-4F1A-896A-76527F67577D}.DLL=>{80A3179A-F726-4F1A-896A-76527F67577D}.DLL
    Detected with: Application.Tool.1068

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{80A3179A-F726-4F1A-896A-76527F67577D}.DLL=>{80A3179A-F726-4F1A-896A-76527F67577D}.DLL
    Disinfection failed

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{80A3179A-F726-4F1A-896A-76527F67577D}.DLL=>{80A3179A-F726-4F1A-896A-76527F67577D}.DLL
    Deleted

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{80A3179A-F726-4F1A-896A-76527F67577D}.DLL
    Updated

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{F7DF9D1E-4DB7-4200-99BC-0D579FF12E2E}.DLL=>{F7DF9D1E-4DB7-4200-99BC-0D579FF12E2E}.DLL
    Detected with: Adware.Mywebsearch.AL

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{F7DF9D1E-4DB7-4200-99BC-0D579FF12E2E}.DLL=>{F7DF9D1E-4DB7-4200-99BC-0D579FF12E2E}.DLL
    Deleted

    C:\Program Files\iolo\System Mechanic Professional 6\Undo\Sched\{810E20A7-B94F-427F-A8D0-5E15E33DD26E}\{F7DF9D1E-4DB7-4200-99BC-0D579FF12E2E}.DLL
    Updated

    C:\Program Files\LimeWire\08 - Silence (Hi_tack Remix).wma
    Infected with: Trojan.Generic.IS.574696

    C:\Program Files\LimeWire\08 - Silence (Hi_tack Remix).wma
    Deleted

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366838.exe
    Infected with: Trojan.Generic.69358

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366838.exe
    Deleted

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366839.exe
    Infected with: Trojan.Generic.69358

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366839.exe
    Deleted

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366952.DLL=>{0BF41F17-01D4-4D7F-B091-71D623448941}.DLL
    Detected with: Adware.Mywebsearch.AL

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366952.DLL=>{0BF41F17-01D4-4D7F-B091-71D623448941}.DLL
    Deleted

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366952.DLL
    Updated

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366953.DLL=>{5D8D35FC-EFDA-45CB-8480-CAF2A5BFBF0F}.DLL
    Detected with: Adware.Mywebsearch.C

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366953.DLL=>{5D8D35FC-EFDA-45CB-8480-CAF2A5BFBF0F}.DLL
    Deleted

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366953.DLL
    Updated

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366954.DLL=>{6BE58312-B699-47D1-B577-80138D9D5422}.DLL
    Detected with: Adware.Mywebsearch.AL

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366954.DLL=>{6BE58312-B699-47D1-B577-80138D9D5422}.DLL
    Deleted

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366954.DLL
    Updated

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366955.DLL=>{7D589496-B5F8-4964-9634-775BF35ED7B9}.DLL
    Infected with: Virtool.4282

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366955.DLL=>{7D589496-B5F8-4964-9634-775BF35ED7B9}.DLL
    Deleted

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366955.DLL
    Updated

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366956.DLL=>{80A3179A-F726-4F1A-896A-76527F67577D}.DLL
    Detected with: Application.Tool.1068

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366956.DLL=>{80A3179A-F726-4F1A-896A-76527F67577D}.DLL
    Disinfection failed

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366956.DLL=>{80A3179A-F726-4F1A-896A-76527F67577D}.DLL
    Deleted

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366956.DLL
    Updated

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366957.DLL=>{F7DF9D1E-4DB7-4200-99BC-0D579FF12E2E}.DLL
    Detected with: Adware.Mywebsearch.AL

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366957.DLL=>{F7DF9D1E-4DB7-4200-99BC-0D579FF12E2E}.DLL
    Deleted

    C:\System Volume Information\_restore{91BAE573-9752-4CCE-B0E0-48140DCE464F}\RP666\A0366957.DLL
    Updated
     
    fantauk,
    #46
  8. 2010/09/12
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Good :)

    Your computer is clean :)

    1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll create fresh, clean restore point.

    Run OTL

    • Under the Custom Scans/Fixes box at the bottom, paste in the following:

    Code:
    :OTL
:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[Reboot]
    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot the PC when it is done
    • Post resulting log.

    2. Now, we'll remove all tools, we used during our cleaning process

    Clean up with OTL:

    • Double-click OTL.exe to start the program.
    • Close all other programs apart from OTL as this step will require a reboot
    • On the OTL main screen, press the CLEANUP button
    • Say Yes to the prompt and then allow the program to reboot your computer.

    If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.

    3. Make sure, Windows Updates are current.

    4. If any Trojan was listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

    5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

    6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

    7. Run Temporary File Cleaner (TFC) weekly.

    8. Download and install Secunia Personal Software Inspector (PSI): http://secunia.com/vulnerability_scanning/personal/. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

    9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
    The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

    10. Run defrag at your convenience.

    11. Read How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html

    12. Please, let me know, how is your computer doing.
     
    broni,
    #47
  9. 2010/09/12
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    All processes killed
    ========== OTL ==========
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: A New Sims Admin
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->FireFox cache emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Administrator.KIDS-N57OCNO0TC
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes

    User: All Users.WINDOWS

    User: All Usersold

    User: Default User.WINDOWS
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes

    User: Francesca.KIDS-N57OCNO0TC
    ->Temp folder emptied: 7921 bytes
    ->Temporary Internet Files folder emptied: 211587197 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 0 bytes
    ->Flash cache emptied: 1003 bytes

    User: franco
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Java cache emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: home video

    User: Jacquie
    ->Temp folder emptied: 109546440 bytes
    ->Temporary Internet Files folder emptied: 306604609 bytes
    ->Java cache emptied: 256194 bytes
    ->FireFox cache emptied: 0 bytes
    ->Google Chrome cache emptied: 0 bytes
    ->Flash cache emptied: 19090 bytes

    User: LocalService.NT AUTHORITY
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes
    ->Flash cache emptied: 0 bytes

    User: NetworkService.NT AUTHORITY
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes
    ->FireFox cache emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: new administrator
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->FireFox cache emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Paolo
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->FireFox cache emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Ricci
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Java cache emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Ricci's area1

    User: sims utils

    User: Stefano.KIDS-N57OCNO0TC
    ->Temp folder emptied: 65536 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32\dllcache .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 46408 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 599.00 mb


    [EMPTYFLASH]

    User: A New Sims Admin
    ->Flash cache emptied: 0 bytes

    User: Administrator.KIDS-N57OCNO0TC

    User: All Users.WINDOWS

    User: All Usersold

    User: Default User.WINDOWS

    User: Francesca.KIDS-N57OCNO0TC
    ->Flash cache emptied: 0 bytes

    User: franco
    ->Flash cache emptied: 0 bytes

    User: home video

    User: Jacquie
    ->Flash cache emptied: 0 bytes

    User: LocalService.NT AUTHORITY
    ->Flash cache emptied: 0 bytes

    User: NetworkService.NT AUTHORITY
    ->Flash cache emptied: 0 bytes

    User: new administrator
    ->Flash cache emptied: 0 bytes

    User: Paolo
    ->Flash cache emptied: 0 bytes

    User: Ricci
    ->Flash cache emptied: 0 bytes

    User: Ricci's area1

    User: sims utils

    User: Stefano.KIDS-N57OCNO0TC
    ->Flash cache emptied: 0 bytes

    Total Flash Files Cleaned = 0.00 mb

    Restore points cleared and new OTL Restore Point set!

    OTL by OldTimer - Version 3.2.10.0 log created on 09122010_065537

    Files\Folders moved on Reboot...
    C:\Documents and Settings\Jacquie\Local Settings\Temporary Internet Files\Content.IE5\WTD3FTQR\94737-active-windows-update-downloads-but-will-not-install-4[2].html moved successfully.
    C:\Documents and Settings\Jacquie\Local Settings\Temporary Internet Files\Content.IE5\LIX3WBV1\p-01-0VIaSjnOLg[1].gif moved successfully.
    C:\Documents and Settings\Jacquie\Local Settings\Temporary Internet Files\Content.IE5\HS2ZFQ9M\adsCAE9WUXI.htm moved successfully.
    C:\Documents and Settings\Jacquie\Local Settings\Temporary Internet Files\Content.IE5\HS2ZFQ9M\iframescript[4].htm moved successfully.
    C:\Documents and Settings\Jacquie\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
    File move failed. C:\Documents and Settings\Stefano.KIDS-N57OCNO0TC\Local Settings\Temp\hsperfdata_Stefano\2316 scheduled to be moved on reboot.

    Registry entries deleted on Reboot...
     
    fantauk,
    #48
  10. 2010/09/12
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Keep going...
     
    broni,
    #49
  11. 2010/09/12
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    That was it. I then ran the clean up on OTL
     
    fantauk,
    #50
  12. 2010/09/12
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Final word about your computer?
     
    broni,
    #51
  13. 2010/09/12
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    I will try to run windows update again after I get back from work. That was my original problem it would download but not install all updates. It kept getting stuck on some updates.
    I think my computer was clean from Malware though dont you think?:p
    Thank you very much for your assistance
     
    fantauk,
    #52
  14. 2010/09/12
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Well, Combofix removed quite a bit, including couple of trojans.
    Let me know about updates.
    Try to install them one at a time, if any trouble.

    Bed time here :)
     
    broni,
    #53
  15. 2010/09/12
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    You probably saw what I missed :eek:
    work time here
    Thanks again
    I will let you know how it goes
     
    fantauk,
    #54
  16. 2010/09/12
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Ok :)
     
    broni,
    #55
  17. 2010/09/17
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    The issue seems to be resolved.
     
    broni,
    #56
  18. 2010/09/19
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    sorry I did not get back to you earlier but I have been having fun and games downloading the updates....or trying to. I had to keep downloading in custom method sometimes it failed but eventually I managed to get it down from 20 to just 3.
    Microsoft .NET Framework 1.1 SP1 Security Update for Windows 2000 and Windows XP (KB979906) (update 1 of 4)... failed! but this always fails
    Security Update for Windows XP (KB981852) and Security Update for Microsoft Office 2003 (KB2288613) and
    Security Update for Microsoft Office Outlook 2003 (KB2293428)
    keep hanging my computer and the only way out is to reboot.
    This is much the same as before and I thought I would try the detect and repair option on Office 2003. nothing happened.
     
    fantauk,
    #57
  19. 2010/09/19
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Try to install them one a time.
    You can also try to download individual files from MS site and install them that way.
     
    broni,
    #58
  20. 2010/09/19
    fantauk

    fantauk Inactive Thread Starter

    Joined:
    2010/08/02
    Messages:
    59
    Likes Received:
    0
    I did try that but they still hang the system. I went to the MS site but keep getting pushed to the "download Office 2010" pages. I will try to locate just those 2 downloads on their own by searching them only. I think when this is resolved I will switch to automatic downloads from microsoft :D
     
    fantauk,
    #59
  21. 2010/09/19
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Just Google KB number and you'll find them.
    You can also try to install those updates from safe mode.
     
    broni,
    #60
Page 3 of 4

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...