Re: I have several spyware programs that I use but now I cannot do

chrisc,
Instead of trying ALL the scanners under the sun to see which ones fixes
your spyware problem, you are MUCH better off posting your Hijackthis log to
one of these forums.
The qualified helpers there will know exactly what tools to use to fix your
problem.
It is unnecessary to download many scanners and filling your pc with
programs that may not fix the problem.
You have to wait at least 3 days to get a reply, unless an expert see
something unusual in your logfile like a new variant.

http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://www.atribune.org/forums/
http://www.bleepingcomputer.com/forums/forum22.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.spywareinfo.com/index.php?showforum=18


"David H. Lipman" wrote:

From: "chrisc" <chrisc@xxxxxxxxxxxxxxxxxxxxxxxxx>

| I am running windows xp home with sp2 I believe that the last update I got
| was on 9/14. I also have window defender beta 2 (Windows Defender Version:
| 1.1.1347.0
| Engine Version: 1.1.1560.0, Definition Version: 1.14.1674.6), spybot search
| and destroy (ver1.4), Ad-Aware SEpersonal (build 1.06r, def: SE1R125
| 06.10.2006), Tenebril spycatcher (version 4.0.4, build 4, fingerprint
| 10.9.06) and SBC Yahoo Anti-spy. I can no longer do manual or automatic
| updates for windows or get new definitions for windows defender. When I do
| the windows update I get "Windows Update - error 0x800A0046" The
| recommendation is to enable data persistence but it is already enabled.
| Other suggestions for this error does not seem to fit my situation ( the 3
| recommendations: I do not have the same start menu list, I do not want to
| delete my main user id, and I am reluctant to try the command line solution
| since I do not know what it will do.) When I try to get system information
| from start>accessories>system tools>system information it tells me that
| cannot access the windows management instrumentation software. Windows
| management files may be moved or missing. When trying to update the Windows
| defender definitions manually, I get an error (Windows Defender unable to
| complete the update 0x80070005 access denied ). I'm not sure if one of my
| spyware programs has deleted or blocked programs from running. I also had
| problems with IE so I tried the IE 7 beta. When that locked up I did an
| uninstall and it restored IE to (ver 6.0.2900.2180.xpsp_sp2_gdr.050301-1519IC
| cipher strength 128 bit, product ID 55277-OEM-0011903-00110 update ver sp2).
| It wouldn't work unless I disabled saving the forms. So maybe the install
| and uninstall could have caused the problems. Right now I believe that
| there is a critical security update that I cannot access. What should I try
| next?
| --
| chrisc



If you are using any version of Sun Java that is prior to JRE Version 5.0 update 9,
then you are strongly urged to remove any/all versions.
There are vulnerabilities in them and they are actively being exploited.

It is highly suggested that you update to the latest version which is Sun Java JRE/JSE
Version 5.0 Update 9

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version.

Such as...
C:\Program Files\Java\jre1.5.0_09

http://java.sun.com/javase/downloads/index.jsp

FYI:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1


For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
http://www.lavasoft.de/ms/index.htm

* SpyBot Search and Destroy v1.4
http://security.kolla.de/
http://www.safer-networking.org/microsoft.en.html

* SuperAntiSpyware
http://www.superantispyware.com/superantispywarefreevspro.html

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



.

Relevant Pages

  • Re: Trouble with virus!
    ... i have a trouble with some client windows xp in a domain ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.security.virus)
  • Re: Upgrade.exe using 90-100% CPU even after clean install of Win 2K P
    ... The Windows update logs ... Download MULTI_AV.EXE from the URL -- ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.windowsupdate)
  • Re: Trojon.vundo
    ... | being used, namely windows. ... You can choose to go to each menu item and just download the needed files or you can ... needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.security.virus)
  • Re: hta file
    ... | that says Windows cannot open Windows Update.hta file. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.windowsupdate)
  • Re: No java?
    ... Java Installer: "The server has not found anything matching the requested ... Can't Sun get it right? ... >>download a Java runtime thing first. ... I thought Windows XP was pretty ...
    (microsoft.public.windowsxp.general)
Quantcast