Solved cant download fixes from microsoft

[xelateg]

I am using windows7 home premium on a HP Compaq Presario cq61 notebook pc.I recently had to get rid of a virus called trojanhorse generic 29ajge.(using a cd of rkill.com malwarebytes and super anti virus from an uninfected computer).This seems to have got rid of the virus but I still cant turn on windows security centre service.(it also doesn't show on my services panel). if I try to use the Microsoft,s website,s fixit button my computer wont download the fix I get a message saying it contains a virus and couldn't be downloaded,some one suggested I did a sfc/scannow I did this and it gets to 59% then shows this message windows resources protection could not perform the requested operation c:/windows\system32> Any help would be appreciated Danny

 

[VistaKing]

xelateg welcome to SevenForums

   Warning

You will need a USB FLASH DRIVE

   Tip

Download the Tool from a non infected PC

Download Farbar Recovery Scan Tool

Choose one that goes with your OS bit version . Save the file to a USB Flash drive

32-bit Version OS :ar: Farbar Recovery Scan Tool

64-Bit Version OS :ar: Farbar Recovery Scan Tool x64

   Note

Click the rb: button and right-click Computer .Select Properties . Look for System Type: which will say 32-bit Operating System or 64-bit Operating System

Plug the flash drive into the infected PC.

Enter System Recovery Options.

:ar: To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select Repair Your Computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

:ar: To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

:ar: On the System Recovery Options menu you will get the following options:

• Startup Repair

• System Restore

• Windows Complete PC Restore

• Windows Memory Diagnostic Tool

• Command Prompt

Select Command Prompt

In the command window type X:\FRST.exe (for x64 bit version type X:\FRST64.exe) and press Enter

   Note

Replace letter X with the drive letter of your flash drive.

   Tip

Type the commands below to see what your letter is for the USB drive and press ENTER after each command

Diskpart
List volume

The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file
Please copy and paste both logs in your reply.(FRST.txt and Addition.txt)

 

[Kaktussoft]

I am using windows7 home premium on a HP Compaq Presario cq61 notebook pc.I recently had to get rid of a virus called trojanhorse generic 29ajge.(using a cd of rkill.com malwarebytes and super anti virus from an uninfected computer).This seems to have got rid of the virus but I still cant turn on windows security centre service.(it also doesn't show on my services panel). if I try to use the Microsoft,s website,s fixit button my computer wont download the fix I get a message saying it contains a virus and couldn't be downloaded,some one suggested I did a sfc/scannow I did this and it gets to 59% then shows this message windows resources protection could not perform the requested operation c:/windows\system32> Any help would be appreciated Danny

Copy file %windir%\Logs\CBS\CBS.log to your desktop. Zip that file and post here

 

[VistaKing]

Kaktussoft

It sounds like xelateg has a ZeroAccess I believe . Don't think that will help

 

[Kaktussoft]

ZERO ACCESS virus?

I. Download the ESETSirfefCleaner tool

Click the link below to download the ESETSirefefCleaner tool. Save the file to your Desktop and continue to part II.

• ESETSirefefCleaner

II. Run the ESETSirefefCleaner tool

1. From your Desktop, double-click ESETSirefefCleaner, which you downloaded in part I.
2. If security notifications appear, click Continue or Run.
3. The message "Win32/Sirefef.EV found in your system" will be displayed If an infection is found. Press Y on your keyboard to remove the infection.
4. Once the tool has run, you will be prompted to restore system services after you restart your computer. Press Y on your keyboard to restore system services and restart your computer.
5. Once your computer has restarted, if you are presented with a security notification click Yes or Allow.
6. Click Yes at the ESET Services Repair tool window.
7. Once the ESET Services Repair process is complete, you will again be prompted to restart your computer, to do so click Yes.

 

[Kaktussoft]

Kaktussoft

It sounds like xelateg has a ZeroAccess I believe . Don't think that will help

Vistaking: Read this http://www.sevenforums.com/system-security/290614-sfc-warning.html#post2404138

That's why I want to see CBS.log

 

[VistaKing]

xelateg

Run Farbar Service Scanner

Click here :ar: Farbar Service Scanner to DOWNLOAD

Place file into your desktop

Place a check mark next to the following options

• Internet Services
• Windows Firewall
• System Restore
• Security Center
• Windows Update
• Windows Defender

Press the Scan button

Farbar Service Scanner will create a log, called FSS.txt, on the Desktop. Upload the FSS.txt with your reply

 

[xelateg]

Thanks for the welcome Vista King and Kaktussoft, I have only found this forum after googling stuff I,m not very clued up with computers .I will buy a usb flash drive tomorrow and download the tools suggested from a non infected computer thanks again and I will let you know how it works out tomorrow
xelateg

 

[xelateg]

Sorry guys forgot to ask what size of USB flash drive will I need ? I,m off to bed now but Up early tomorrow so aware of the time differences have a good day or night Thanks for your advice

 

[VistaKing]

It's up to you what size you want to get . If you want you could get a 16GB . You could then later use it for Windows 7 installation if you need to and other things .

For now you only need the flash drive for the FRST tool . The FSS tool you would need to run that inside Windows .

 

[Kaktussoft]

Your working on infected machine now? If so download ESETSirefefCleaner and run it. As explained in post #5. It's only 313kB! Maybe the tools VISTAKING told about aren't needed in this case(?)

 

[cottonball]

Kaktussoft,

No offense intended, but, there are different methods of removing malware.

You can do so in the blind, and have programs remove whatever, or you can do so with one-to-one support.

One-to-one support is what VistaKing is providing, specifically identifying what has gone amiss, and then repairing it.

The tools VK requested xelateg to use will readily identify what is present in the system, and, from there, will take appropriate action.

 

[VistaKing]

Download BOTH programs on a working PC so you could run both of the programs on the non working PC

64-Bit Version OS :ar: Farbar Recovery Scan Tool x64

and 64-Bit Version OS and 32-Bit Version OS :ar: Farbar Service Scanner

Save both onto a USB Flash drive

You should have FRST64.exe and FSS.exe on your USB Flash drive

:ar: To run FRST64.exe

• Place file onto your desktop by dragging it from the USB flash drive to your desktop
• Right-click on FRST64.exe choose
  
• When the tool opens click Yes to disclaimer.
• Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file and creates another file called Addition.txt
FRST.txt and Addition.txt will be on the desktop
Upload FRST.txt and Addition.txt with your reply

:ar: To run FSS.exe
Place file onto your desktop by dragging it from the USB flash drive to your desktop
Right-click on FSS.exe choose

Place a check next to the following options

• Internet Services
• Windows Firewall
• System Restore
• Security Center
• Windows Update
• Windows Defender

Press: Scan

Farbar Service Scanner will create a log, called FSS.txt, on the Desktop. Upload the FSS.txt with your reply

:ar: How to Upload a file

Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .

 

[xelateg]

Hi Guys,I followed Kaktussoft suggestion from 01.47 am this morning before I went to work. this has cleared the problem and windows security centre is back and turned on also I am able to download windows updates etc I,ve ran it a few times since I came home and my computer is working great now .so a big Thank you Kaktussoft .Also Vista King I have bought a 16gb usb flash drive and will download the programmes you suggested big Thanks to you as well .
Really appreciate the effort you guys put in here
Xelateg

 

[VistaKing]

Download those two programs onto the desktop .

 

[xelateg]

Hi Vista King this is the results of the farbar recovery scan .I had only downloaded that today before I seen your other post to download another link.I downloaded this from another non infected computer earlier today at work,would it be alright to download the other link from my laptop as it seems to be working ok or will I wait until I go to work and download it tomorrow
Xelateg

 

[VistaKing]

Uninstall both of the Delta toolbars .

Restart the PC

Then run these programs

• AdwCleaner
• Junkware Removal Tool

Click here AdwCleaner

:ar: Click on Download Now button

:ar: Save to the Desktop

:ar: Right-click on AdwCleaner.exe and choose Run as administrator

:ar: Click the Search button

:ar: Upload the AdwCleaner[Rn].txt in your reply.

   Note

The log file is at C:\AdwCleaner[Rn].txt

Download Junkware Removal Tool

Drag JRT.exe to your Desktop
Right-click JRT.exe and click on

Upload the JRT.txt log with your reply

 

[xelateg]

Hope I have done this correctly and uploaded the right logs

 

[VistaKing]

Good job

Now run AdwCleaner once more


Run the Delete

:ar: Close all open programs.

:ar: To run the program, right-click AdwCleaner.exe and select Run as administrator

:ar: Click on Delete and confirm the prompt.

:ar: After it finishes, the computer is restarted.

Upload the log saved at C:\AdwCleaner[S1].txt

 

[xelateg]

Vista King when I ran adw delete my avg saw it as a virus and deleted it will I download and run it again and tell avg to allow it
Xelateg