Cannot receive any Window Updates

[Jacee]

Uninstall corel videostudio pro

Delete c:\users\ron\documents\corel videostudio pro <--folder
keygen.rar <--- delete this file.

Reboot.

• Download http://oldtimer.geekstogo.com/OTL.exe to your desktop.
• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• When the window appears, underneath Output at the top change it to Minimal Output.
• Check the boxes beside LOP Check and Purity Check.
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
    Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.

 

[zarnic]

Uninstall corel videostudio pro

Delete c:\users\ron\documents\corel videostudio pro <--folder
keygen.rar <--- delete this file.

OK, Jacee, have deleted the first file and the folder is gone however I don't have the keygen.rar file.

ran OTL and its' logs are attached ( or I can post the full contents if preferred).

I notice the name SteelWerx and its' SWXCACLS.exe . What is this? Is it a threat? :huh:

 

[Jacee]

SteelWerx and its' SWXCACLS.exe is okay.

Run OTL
Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 93.188.166.105 93.188.161.105 1.2.3.4
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found

:Services

:Reg

:Files
ipconfig /flushdns /c

:Commands
[purity]
[emptytemp]
[Reboot]

Then click the Run Fix button at the top
Let the program run unhindered, reboot the PC when it is done

Copy and paste the log back here.
Also, please post the content of C:\qoobox\ComboFix.txt

 

[zarnic]

...
Also, please post the content of C:\qoobox\ComboFix.txt

Good Morning!
- I neither have the quoted directory nor fileto post.
- As for the rest of your instructions, done and attached... next?

Oh, and have a Good Day!

 

[Jacee]

The OTL Extras.txt is incomplete .... what did you take out of it?

 

[Layback Bear]

I sure I'm waiting for the answer to that question.

 

[zarnic]

The OTL Extras.txt is incomplete .... what did you take out of it?

Nothing... want me to run OTL again?

 

[Jacee]

I just want to see the entire Extras.txt

 

[zarnic]

Jacee, I just noticed that I have two OTL-generated Extra files but different sizes so I'll attach them both and if you want me to run OTL again I will.

Here they are: (those two files should be yr 2011 not 2001)

 

[Jacee]

I'd like you to scan your machine with ESET OnlineScan

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the
   
   button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on
      
      to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the
      
      icon on your desktop.
4. Check
   
5. Click the
   
   button.
6. Accept any security warnings from your browser.
7. Check
   
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
    
11. Push
    
    , and save the file to your desktop using a unique name, such as ESETScan. Include the entire contents of this report in your next reply.
12. Push the
    
    button.
13. Push
    

 

[zarnic]

I'd like you to scan your machine with ESET OnlineScan ....

Can't access the link with either IE8, Firefox (get the msg "Firefox can't establish a connection to the server at eset.com"), or Google Chrome.

Plan B?

 

[Jacee]

Plan B .... Clean install!

 

[zarnic]

Plan B .... Clean install!

Well... so much for Plan B. Using a Dell disk, I reloaded the Win 7 OS ( which puts everything to factory level ) got back here... went to that link again, and my IE8 gives me "Internet Explorer cannot display the webpage".

Do you still want the file ComboFix.txt (?)... cus I have a directory, now, labeled Qoobox with that file included.


Perhaps I should first try to fix my IE8. Perhaps I should just forget about windows Updates and go on with my life. The sun is out, perhaps I should just go outside.

 

[Layback Bear]

Just a thought. Some how some bad thing is hanging in there. If it was my computer and I went through what all you folks have I would wipe my drive with one of many 3rd party programs like Drive Scrubber at least 4 times Remove anything that is plugged into the computer that you don't need to do a clean install. For sure the printer because some of them have memory. Notice I did not tell you to save anything. Do a clean install with a legal Windows 7 disc. Once everything is working properly check to make sure it's activated with Microsoft. Then don't install all those p2p and torrents ect. They are probably where you got what ever this thing is you got. I don't care what security is on a computer if the owner/operator let those types of things by the security this whole mess starts again. There is more than enough information on the net to keep a person reading for days about the bad things that happen with p2p and torrents.

 

[techmonkey74]

Adding to what Layback Bear said could something be hiding on the partition? Like myself Zarnic has a OEM Installed OS and like most OEM OS's the Operation system is on a Partition in my case it's the "D" drive. I did not even get any OS discs with my system HP includes a tool that lets you burn a set of your own. CAN a virus creep on to the partition?

 

[zarnic]

Thank You All for your thoughts and suggestions. It may very well be that P2P and torrents are the culprit. However, where I got it really means little, how to get rid of whatever-it-is means more.

Perhaps I misunderstood what is ment by a 'clean' install... isn't a manufacturers' disc, an OEM Win 7 OS disc, considered 'clean'? If not then I need educating.

Jacee has spent a lot of her spare time trying to work this out and to her I owe a lot.

I think that after so many years of being infection-free it is probably fitting that now I'm not. Sort of a payback thing.

 

[zarnic]

Reset Router and re-installed.
Malwarebytes updated , finally. Yay!
DNSChanger gone. Yay!
Windows updated, first time in year-and-a-half... yay, Yay!! And on a Monday, too.

Thank You, Jacee... I owe ya!

 

[Jacee]

w00t!!

 

[techmonkey74]

Just curious for my own education HOW was the router affected?

 

[Jacee]

See here! DNSCHANGER
http://www.sevenforums.com/system-security/160353-dnschanger.html