Solved Win7 x64 Sp1 (have sfc log) crashes and errors after updates-malware?

[circumvent]

.....However, I am still getting the error message at the beginning (after logging on as administrator), that I do not have elevated rights and if I want to restart to enable...when I click yes, computer doesn't restart, I think it's just the explorer shell that restarts.

Can you take a screenshot of this?

Will try to remeber to do that Andrew...and Jacee, I uninstalled combofix...and I'm running eset again just to be reaaalllly sure I found all of the coal...

 

[circumvent]

.....However, I am still getting the error message at the beginning (after logging on as administrator), that I do not have elevated rights and if I want to restart to enable...when I click yes, computer doesn't restart, I think it's just the explorer shell that restarts.

Can you take a screenshot of this?

Will try to remeber to do that Andrew...and Jacee, I uninstalled combofix...and I'm running eset again just to be reaaalllly sure I found all of the coal...

Andrew, here is the screen shot...and yes the desktop appears cluttered but only because I was moving stuff from folders for deletion lol...anyway I am finally at home and going to run all scans I can and post the logs...any interpretation of the sfc log my learned and wise gurus? *burning incense at your altars*

 

[Jacee]

Let me just say this about your desktop ....

 

[andrew129260]

Hello circumvent, quite a few icons there

Follow this tutorial to figure out what program is accessing/bringing up that message.

http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html


Haha Jacee

 

[circumvent]

Hello circumvent, quite a few icons there

Follow this tutorial to figure out what program is accessing/bringing up that message.

http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html


Haha Jacee

:busted: C'mon guys...I was just saving stuff to the desktop for copying to flash drives when problems started, because folders kept not responding and freezing the computer lol...

will go through the clean start up troubleshooter, and here's the mbam full scan log, though really want to do the full eset scan in safe mode...I'm scan happy lol

 

[Jacee]

In previous versions of Windows, many users used the built-in Administrator account on a regular basis.
This account has full control over everything on the computer.
When you install Vista/Windows 7, you may be surprised to learn that the Administrator account is disabled by default.
That's to encourage you to follow best practices and create your own administrative account.
It also makes it a little harder for hackers; they all knew that the account named Administrator
existed and so had half of what they needed (the account name) to log on with it.

You can enable the built-in Administrator account if you really want to, by running the Command Prompt as administrator
(right click its icon and select Run as Administrator; click Continue at the UAC prompt) and typing the following:

net user administrator /active:yes

This causes the Administrator account to appear on the Welcome screen.

***Note that it does not have a password set by default; the first thing you should do is
set a strong password for it.

Have you done this?

 

[circumvent]

Yes Master Yoda...resulted in 2 logon accounts it did, but fixed the problem it did not...ok Yoda speak is hard...but I didn't have any problem using the default admin account but logged on as myself and same error so went back to default settings

 

[Jacee]

So the problem is, you as yourself is the 'default' admin, but not the hidden admin that you want to be?

 

[Jacee]

Click on the control panel and tell me if you see these two settings

 

[circumvent]

So the problem is, you as yourself is the 'default' admin, but not the hidden admin that you want to be?

Ok, umm...when you put it like that yes, even I'm confused...Ok..I'm the Admin on this laptop with password...the user account type is administrator and it's name is my own. e.g. "Smith"

I have never encountered that "error" in my thumbnail jpg before all of this malware/nightmare on laptop street, started.

When I did the original suggestion, when it rebooted and it was time to logon, instead of just "smith" and "enter password", there was a new option to logon as "administrator" with no password.

so that was not a fix, because I logged on as this "administrator" and no error message, but when I logged off and logged back on as "smith" with password, same original error pop up.

Hoping that clarifies what I meant.

Btw, Jacee and Andrew...ran eset with everything checked and scanned archives, ran it in safemode with networking, and no malware detected. Same with mbam and msessentials full scans.

So now only this administrator rights issue to fix...

And no Jacee...only "user accounts" not the other icon in control panel...I have never seen that icon before about alternate admin.

Hope you guys had a great weekend.

 

[circumvent]

ok, I hope these screenshots help concerning my admin account in conjunction with the error about rights message I keep getting...zipped for some privacy

 

[Jacee]

Photo viewer can't open your screen shots.

I can get into my account, 'alternate' admin without a password ... but, my 'real' Administrator account has password protection.

 

[circumvent]

Ok, I hope this helps Jacee, I just uploaded jpegs...your account looks pretty much like mines...and honestly, from what I can ascertain my Guru, none of my settings are obviously altered to give me the "error" about elevated rights...that only started at the beginning of my malware nightmare which thanks to you and Andrew, seems to have been resolved...even the dllhost file is behaving itself and not hogging memory.

So far, today I've used the laptop like I normally would and no freezing or forced restarts...and ran scans left and right (I'm paranoid now lol) and none found

and if I do the alternate admin using the elevated command line, I get the admin "no password account" and my personal password admin account.

 

[Jacee]

You should be good to go!

Uninstall Combofix:

• Click START Search
• Now type ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the / it needs to be there.

You can delete all other 'desktop' scans that we used, except TFC by by Old Timer. Use this at least once a week or more!

Please create a new/clean restore point: http://www.sevenforums.com/tutorials/336-system-protection-restore-points-delete.html

Malware preventive tips

http://malwareremova...=557960#p557960

Please navigate to Microsoft Windows Updates and download all the "Critical Updates" for Windows.


Firefox 3
The award-winning Web browser is now faster, more secure, and fully customizable to your online life. With Firefox 3, added powerful new features that make your online experience even better. It has more features and is a lot more secure than IE. It is a very easy and painless download and install, it will no way interfere with IE, you can use them both.
*NoScript - Addon for Firefox that stops all scripts from running on websites. Stops malicious software from invading via flash, java, javascript, and many other entry points.

How to prevent Malware: Created by Miekiemoes

Here are some additional utilities that will further enhance your safety.
# http://www.trillian.cc → Trillian or http://www.miranda-im.com → Miranda-IM - These are Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN)

Scan your computer regularly for malware
Scan on a regular basis to keep your computer clean, free software such as Malwarebytes Anti-Malware (MBAM) and SUPERAntiSpyware-
Please note that these products can also be run as free without a license as a scan on demand scanner.

Backup regularly

You never know when your PC will become unstable or become so infected that you can't recover it. Follow this Microsoft article to learn how to backup. Follow this article by Microsoft to restore your backups.

Alternatively, you can use 3rd-party programs to back up your data. One example can be found at Bleeping Computer.

Avoid P2P

P2P may be a great way to get lots of stuffs, but it is a great way to get infected as well. There's no way to tell if the file being shared is infected. Worse still, some worms spread via P2P networks, infecting you as well. If you do need to use them, use them sparingly. Check this list of clean and infected P2P programs if you need to use one.




Please read these short reports on the dangers of peer-2-peer programs and file sharing.

• FBI Cyber Education Letter
  File sharing infects 500,000 computers
  USAToday
  infoworld

*********************************************
Please read the following safe computing articles..

Secure My Computer: A Layered Approach

Strong passwords: How to create and use them
Then consider a password keeper, to keep all your passwords safe.

Free Antivirus-AntiSpyware-Firewall Software

Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.

Slow Computer May Not Be Malware Related, Help! My computer is slow!
http://users.telenet...owcomputer.html


PC Safety and Security--What Do I Need?
http://www.techsuppo...-do-i-need.html
http://www.techsuppo...-do-i-need.html

Stand Up and Be Counted ---> Malware Complaints <--- where you can make difference!
This site offers people who have been (or are) victims of malware the opportunity to document their story.

How did I get infected in the first place? by TonyKlein
http://www.geekstogo...he-first-place/


Extra note:
Make sure your programs are up to date - because older versions may contain Security Leaks. To find out what programs need to be updated, please run the Secunia Software Inspector Scan. http://secunia.com/software_inspector/

 

[circumvent]

You should be good to go!

Uninstall Combofix:

• Click START Search
• Now type ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the / it needs to be there.

You can delete all other 'desktop' scans that we used, except TFC by by Old Timer. Use this at least once a week or more!

Please create a new/clean restore point: http://www.sevenforums.com/tutorials/336-system-protection-restore-points-delete.html

Malware preventive tips

http://malwareremova...=557960#p557960

Please navigate to Microsoft Windows Updates and download all the "Critical Updates" for Windows.


Firefox 3
The award-winning Web browser is now faster, more secure, and fully customizable to your online life. With Firefox 3, added powerful new features that make your online experience even better. It has more features and is a lot more secure than IE. It is a very easy and painless download and install, it will no way interfere with IE, you can use them both.
*NoScript - Addon for Firefox that stops all scripts from running on websites. Stops malicious software from invading via flash, java, javascript, and many other entry points.

How to prevent Malware: Created by Miekiemoes

Here are some additional utilities that will further enhance your safety.
# http://www.trillian.cc → Trillian or http://www.miranda-im.com → Miranda-IM - These are Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN)

Scan your computer regularly for malware
Scan on a regular basis to keep your computer clean, free software such as Malwarebytes Anti-Malware (MBAM) and SUPERAntiSpyware-
Please note that these products can also be run as free without a license as a scan on demand scanner.

Backup regularly

You never know when your PC will become unstable or become so infected that you can't recover it. Follow this Microsoft article to learn how to backup. Follow this article by Microsoft to restore your backups.

Alternatively, you can use 3rd-party programs to back up your data. One example can be found at Bleeping Computer.

Avoid P2P

P2P may be a great way to get lots of stuffs, but it is a great way to get infected as well. There's no way to tell if the file being shared is infected. Worse still, some worms spread via P2P networks, infecting you as well. If you do need to use them, use them sparingly. Check this list of clean and infected P2P programs if you need to use one.




Please read these short reports on the dangers of peer-2-peer programs and file sharing.

• FBI Cyber Education Letter
  File sharing infects 500,000 computers
  USAToday
  infoworld

*********************************************
Please read the following safe computing articles..

Secure My Computer: A Layered Approach

Strong passwords: How to create and use them
Then consider a password keeper, to keep all your passwords safe.

Free Antivirus-AntiSpyware-Firewall Software

Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.

Slow Computer May Not Be Malware Related, Help! My computer is slow!
http://users.telenet...owcomputer.html


PC Safety and Security--What Do I Need?
http://www.techsuppo...-do-i-need.html
http://www.techsuppo...-do-i-need.html

Stand Up and Be Counted ---> Malware Complaints <--- where you can make difference!
This site offers people who have been (or are) victims of malware the opportunity to document their story.

How did I get infected in the first place? by TonyKlein
http://www.geekstogo...he-first-place/


Extra note:
Make sure your programs are up to date - because older versions may contain Security Leaks. To find out what programs need to be updated, please run the Secunia Software Inspector Scan. http://secunia.com/software_inspector/

Wow, Jacee...I am being taken back to school... good thing I'm an academic so reading all this is gonna be fun....however, before I put a resolved on this, wanna do one more series of scans...and thank you and Andrew for all the help throughout..and patience...already uninstalled the combofix...

will let you know how it goes later, because I have one final problem, downloaded IE explorer for Windows 7 x64 based systems using windows update but it didn't install, but the other updates went perfectly...so have to read up on the error Code 9C47...

Until then Master Jedi...

 

[circumvent]

Oh, Jacee...Andrew...need to get a torrent downloader...what do you suggest?

Also, I may have fixed the error message about elevated rights on the start screen...didn't see it this morning...it was a last minute tweak I did last night before I left using computer admin tools...if I restart again today and don't see it, I'll try to post what I did and hopefully it can help someone else as a possible fix.

 

[Jacee]

I see you have Internet Explorer 10.0.9200.16736. Are you trying to install IE 11, or just update IE 10?

 

[circumvent]

I see you have Internet Explorer 10.0.9200.16736. Are you trying to install IE 11, or just update IE 10?

Hi Jacee...not really intent on doing either since I use firefox...but it came up as an "important update" in windows update, so downloaded it and voila, error in installing and the error code.

Not even really sure I want to update it or need it...advice? and about the torrent client? any suggestions?

 

[Jacee]

What's the kb#? Open up Programs and Features, click on 'view installed updates' and tell me what failed... hopefully it will show.

 

[Jacee]

Oh, Jacee...Andrew...need to get a torrent downloader...what do you suggest?

There is no way to be sure that what you are downloading from a torrent file is safe!