Actually this is an old Topic-Windows Security Center

[bluerose14]

I have a Windows XP and was having Windows Security Center problems.
Evilfantasy send me help and I have the three logs done. As I was doing the Anti-Malware scan my computer shut-down and  I restarted.
The problem was no longer here. I ran the Anti-Malware scan again. And it has been doing find since. I completed all other instructions. Updated the Java, Ran the CCleaner, and then the HijackThis step. I am now attaching
the logs.

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Download Deckard's System Scanner (DSS) to your Desktop.
Note: You must be logged onto an account with administrator privileges.
Vista users Right click DSS and Run as Administrator.

• Close all applications and windows.
  
• Double-click on dss.exe to run it, and follow the prompts.
  
• When the scan is complete, two text files will open.
• main.txt <- this one will be maximized
  
• extra.txt <- this one will be minimized
• Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt and extra.txt in your reply.

[bluerose14]

OK, I Downloaded The Deckard's System Scanner  in the Administrator account. Closed all applications and Window, then doucle clicked on dss.exe and ran it. BUT, only main.txt came up and I can't get IT to copy
so I can put it in a reply. Any suggestions?

[evilfantasy]

Can you attach the logs instead?

You can find extra.txt in C:\Deckard\System Scanner\extra.txt

[bluerose14]

Thank You , hope I do this right.

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Go to add/remove programs and uninstall: Java(TM) 6 Update 5

----------

Now download The Avenger by Swandog46 and save it to your Desktop.

• Extract avenger.exe from the Zip file and save it to your desktop
• Run avenger.exe by double-clicking on it.
• Do not change any check box options!!
  
• Copy everything in the Code box below, and paste it into the Input script here window:

Code: [Select]

Comment:

Files to delete:
C:\WINDOWS\system32\.608fbd8d

Folders to delete:
C:\Documents and Settings\All Users\Application Data\WildTangent



Note: the above instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your system

• Now click the Execute button.
  
• Click Yes to the prompt to confirm you want to execute.
• Click Yes to the Reboot now? question that will appear when Avenger finishes running.
• Your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt and it will popup for you to view when you login after reboot.

[bluerose14]

You say" DO NOT follow these instructions if I am not this user."

The last instructions on the Deckard's System Scanner was to be run in
an account with' Administrator Privileges.'

Do I run these instructions also in the Administrators account? or can I run them in my usual account?

[evilfantasy]

Yes to question 1. Nobody but you should follow the instructions.

Question 2 run it from an account with administrator privileges.

[bluerose14]

Ok I'm going to try this again.

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Run this online scan. Requires Internet Explorer

Use the ESET Nod32 Online Scanner
1. Check the box next to YES, I accept the Terms of Use.
2. Click Start
3. When asked, allow the activex control to install
4. Click Start
5. Make sure that the option Remove found threats and the option Scan unwanted applications is check marked.
6. Click Scan
7. Wait for the scan to finish
8. Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
9. Add the C:\Program Files\EsetOnlineScanner\log.txt log into your next reply

[bluerose14]

Good afternoon, ESET log

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Download OTMoveIt2 by OldTimer OTMoveIt2.exe and place it on your desktop. (unless you already have it installed)

1. Double click OTMoveIt2.exe to launch it.
Vista users right click and choose Run As Administrator
2. Click on the CleanUp! button.
3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
5. Once complete exit out of OTMoveIt2

----------

Set a New Restore Point to prevent possible reinfection from an old one
Setting a new restore point AFTER cleaning your system will enable your computer to roll-back to a clean working state if needed.

• Go to Start > Programs > Accessories > System Tools and click System Restore
  
• Choose the radio button marked Create a Restore Point on the first screen then click Next Give the Restore Point a name then click Create.
  
• The new restore point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
• Next go to Start > Run and type Cleanmgr
  
• Click OK
  
• Click the More Options Tab.
  
• Click Clean Up in the System Restore section to remove all previous restore points except the newly created clean one.

.
----------

Use the Secunia Software Inspector to check for out of date software.

• Click Start Now
  
• Check the box next to Enable thorough system inspection.
  
• Click Start
  
• Allow the scan to finish and scroll down to see if any updates are needed.
• Update anything listed.

.
----------

Important: You Need to Update Windows and Internet Explorer regularly to protect your computer from the malware and other security threats that are on the Internet. Go to Microsoft Windows Update and get all critical updates.

If you are running any Microsoft Office version go to the Office Update site and make sure you have at least all the critical updates installed (Free) Microsoft Office Update.

----------

Make sure all of your security programs are up to date and run scans with them regularly. Once or twice a week minimum.

Here are some great FREE tools to help you keep from getting infected again. These tools use little or no resources so won't slow down your PC.

To prevent unknown applications from being installed on your computer install WinPatrol 2008
Using Winpatrol to protect your computer from malicious software

Another thing I would suggest installing SiteAdvisor. SiteAdvisor rates sites on business practices and spam.

SpywareBlaster - Secure your Internet Explorer to make it harder for these ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
*Using SpywareBlaster to protect your computer from Spyware and Malware
*If you don't know what ActiveX controls are, see here

Check out Keeping Yourself Safe On The Web for tips and free tools to keep you safe in the future.

Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

Stand Up and Be Counted ---> Malware Complaints  <--- where you can make difference!


How is everything now?

[bluerose14]

Dear Evil, There is NO radio button marked 'Create a Restore Point'.
All that is there is "To begin, select the task you want to perform:
Restore my computer to an earlier time" is marked and then there is a next button and a cancel button on bottom.  When I click on the Help button on the top right corner it also mentions a 'Create a Restore Point" but I can't find one. Now what?

[evilfantasy]

Try this method to turn off and then back on System Restore. http://support.microsoft.com/kb/310405

[bluerose14]

Ok There is no Running time and under Status/Currently Processing:
It says: There might be problems loading Java Applet in your browser.