OK, I tried the updates at the links you so kindly suggested. No luck.
the message I get is
"Wupdate cannot check for updates because
the service is not running. Please restart."
Well. Already did that. Sigh.
Last edited by jtkm; 31 Mar 2013 at 17:07. Reason: clarity
Scan for any missing, modified or corrupted protected Windows files with:
I do not have a 'scan as administrator' option although I am, as far as i can tell, logged in as the admin.
I followed the updating instructions. Installation failed:
"The specified service does not exist as an installed service. 0x80070424"
Please download the Farbar Service Scanner from
http://www.bleepingcomputer.com/download/farbar-service-scanner/
Right-click on the saved file and select 'Run as Administrator', and tick all the options, then click on the Scan button - copy and paste the report to your response.
You have had a ZeroAccess infection!
Are you sure that it's been cleaned fully??
The following services have gone AWOL....
MPSSVC
BFE
BITS
WUAUSERV
WINDEFEND
SHAREDACCESS
IPHLPSVC
If we're lucky, this will fix them....
Please download http://kb.eset-la.com/library/ESET/KB%20Team%20Only/Malware/ServicesRepair.exe and save it to your desktop.
Double-click ServicesRepair.exe
If security notifications appear, click
Continue or Run and then click Yes when asked if you want to proceed.
Once the tool has finished, you will be prompted to restart your computer.
Click Yes to restart.
Then run the FarBar scanner again, and post the new results
Here it is:
Farbar Service Scanner Version: 03-03-2013
Ran by BuddhaT00 (administrator) on 03-04-2013 at 07:12:53
Running from "C:\Users\BuddhaT00\Downloads"
Windows 7 Starter Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Attempt to access Yahoo IP returned error. Yahoo IP is offline
Yahoo.com is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Disabled Policy:
========================
Action Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Windows Defender:
==============
Other Services:
==============
File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
**** End of log ****
Great - with any luck things should be working again -
check Windows Update first - does it scan for updates OK?
Does it find any?
UNtick all but the oldest update found, and try installing that one.
what happens?
Quote