Had a rundll error, was infected, cleaned, attached HJT, still no IE

[evilfantasy]

Scan with Panda ActiveScan 2.0

This scanner requires Internet Explorer

• Once you are on the Panda site click the Scan your PC now button
  
• A new window will open...click the Check Now button
  
• Enter your Country
  
• Enter your State/Province
  
• Enter your e-mail address and click send
  
• Select either Home User or Company
  
• Select the appropriate Yes or No to receiving marketing information
• Click the Free Online Scan button
  
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  
• When download is complete, click on My Computer to start the scan
  
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

.
Post the contents of the ActiveScan report in your next reply.

[CJG]

Ran the Panda scan and attached the log

[attachment deleted by admin]

[CJG]

I forgot to mention that Panda says that it can disinfect it for me, but I have not clicked the box yet.

[evilfantasy]

You have to buy Panda for it to disinfect and that isn't necessary.

* Download Qoofix to your Desktop or any other convient location
* Unzip the files from Qoofix.zip to a convenient location such as C:\Qoofix.
* Navigate to the folder you unzipped the files to and double click on the file named Qoofix.exe.
* Finally, select Begin Removal and the removal process will commence. A reboot may be necessary if an infection is found.

----------

Locate and delete this file:

c:\windows\system32\csuninstall.exe

----------

Download OTMoveIt3 by OldTimer OTMoveIt3.exe and place it on your desktop. (unless you already have it installed)

1. Double click OTMoveIt3.exe to launch it.
Vista users right click and choose Run As Administrator
2. Click on the CleanUp! button.
3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
5. Once complete exit out of OTMoveIt3

----------

Set a New Restore Point to prevent possible reinfection from an old one
Setting a new restore point AFTER cleaning your system will enable your computer to roll-back to a clean working state if needed.

• Go to Start > Programs > Accessories > System Tools and click System Restore
  
• Choose the radio button marked Create a Restore Point on the first screen then click Next Give the Restore Point a name then click Create.
  
• The new restore point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
• Next go to Start > Run and type Cleanmgr
  
• Click OK
  
• Click the More Options Tab.
  
• Click Clean Up in the System Restore section to remove all previous restore points except the newly created clean one.

You can find instructions on how to enable and re-enable system restore here:

Windows XP System Restore Guide or Windows Vista System Restore Guide
.
----------

Use the Secunia Software Inspector to check for out of date software.

• Click Start Now
  
• Check the box next to Enable thorough system inspection.
  
• Click Start
  
• Allow the scan to finish and scroll down to see if any updates are needed.
• Update anything listed.

.
----------

Go to Microsoft Windows Update and get all critical updates.

----------

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

SpywareBlaster - Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

[CJG]

I can not get past step one - Qoofix:  http://majorgeeks.com/download.php?det=5175 (there is nothing on this page to download - at least nothing appears on my screen).

[evilfantasy]

Try here: http://www.besttechie.net/forums/index.php?showtopic=9051

[CJG]

This java issue keeps coming back to haunt me .  .  . secunia also requires java to work (keep in mind I have the latest version of it, but it doesn't work).

I see that there are two "important" windows updates for me to download:

Windows Vista:
Important:  Microsoft .NET Framework 3.5 Service Pack1 and .NET Framework 3.5 Family Update
Optional:  Group Policy Preference Client Side Extensions for Windows Vista
Optional:  Windows PowerShell 1.0 for Windows Vista

Office Live Add-in
Optional:  Office LIve add-in

SQL Server 2005:
Important:  Microsoft SQL Server 2005 Express Edition Service Pack 3

When I attempt to perform these updates I get an error message (screen shot attached).  I attempted to research the error codes.  They tell me to be sure that the firewall will allow microsoft access etc... and turn off the antivirus software (well I did and they still will not download).  For some reason I feel that this is the  reason JAVA doesn't work - and therefore I cannot run the additional software programs you've recommended.

Also, I am pretty maxed out on my hard drive and I am wondering if that is also playing a role in this.  I have about 3 Gigs free.

Again, I really appreciate your patience with me and your help.

[attachment deleted by admin]

[evilfantasy]

Anything that is Important or critical are just the.

Optional is optional...

[CJG]

finally got Java to enable properly so I ran the Kscan . . . file attached - as it was on your oringinal list of things to do (nothing detected).  Still no luck in downloading those windows updates.  Will try some things this afternoon.

Thanks for all of your help,
Crispin

[attachment deleted by admin]

[evilfantasy]

Close all browser windows. Right click IE and choose 'Run as Administrator' and then get the updates.

[KingPincer]

What is K Scan evil fantasy is it an online scanner?

[CJG]

Kaspersky Lab Online Scanner

http://www.kaspersky.com/virusscanner

[CJG]

Close all browser windows. Right click IE and choose 'Run as Administrator' and then get the updates.

I did exactly that, but still no beans . . . I am perplexed.  I feel great that my original issue has been solved, but I don't know what to think regarding the lack of ability to perform "windows updates".  Should a start a new thread?

evilfantasy you have been a great help, my wife and I thank you!

[evilfantasy]

I am not sure why that wouldn't work.

[KingPincer]

Ah by the way I'm using Kaspersky anti virus 2009 right now and this anti virus for me is the best. Well 2nd for me is NOD 32. Well it's good that you have already fixed the problem. Remember the last tip that i gave you that was just said to me by my friend he is a computer technician. Well it's good you have solved your problem.