Unable to do Windows Update.

[Pantz]

Hello Again, well when i tab on my browsers they are more responsive and my folders now open up without any lag, i will do another scan later today just to make sure every thing has been removed. then i can do a system Image,

I would like to thanks everyone that has helped me, this it the first time in Years i have caught a serious malware problem, i am usually very careful in what i download, this one must of snuck past me. only took 2 days to irradiate this issue,

once again thanks for all the help.

 

[Pantz]

Hello Again, well i think i have cleared up my Mal-aware issues .

 

[andrew129260]

I'm not a trained malware expert.

Hello Again, well i think i have cleared up my Mal-aware issues .

But your logs look good to me.
My only note is in hijack this log at the end it lists some services that are missing files.
You might want to go into your services list and see if those services are indeed listed. A Google search should tell you what they are.

But you look good.

 

[Jacee]

@Andrew129260 .... HJT has problems reading files in services on X64 machines, so it just declares them as 'missing'

@Pantz ... I can see you're using Agnitum firewall, but I don't see an active anti-virus program running. Before you do a system image, let's make sure you're cleaned up and ready for it!!


I'd like you to scan your machine with ESET OnlineScan

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the
   
   button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on
      
      to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the
      
      icon on your desktop.
4. Check
   
5. Click the
   
   button.
6. Accept any security warnings from your browser.
7. Check
   
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
    
11. Push
    
    , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Push the
    
    button.
13. Push
    

 

[andrew129260]

Thanks jacee, didn't know that

 

[Pantz]

Hello Again, i have installed AVG 2013 Anti Virus, i thought " outpost " was a anti virus package ?. i also did a before and after scan, i think i may have finally removed all instances of the malware.

Once again thanks for everyone that helped.

 

[Jacee]

Can you copy and paste the .txt logs? Your .zip files are using Windows Photo ... which won't open the text I need to see.

 

[Pantz]

Hello Again, sowwy . here are the Before Scans

 

[Pantz]

Hello again, and here is the After Scans


# AdwCleaner v3.001 - Report created 29/08/2013 at 09:56:27
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : David_764 - DAVID764
# Running from : C:\Users\David_764\Downloads\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found C:\Users\David_764\AppData\Roaming\Wondershare

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Mozilla Firefox v23.0.1 (en-US)

[ File : C:\Users\David_764\AppData\Roaming\Mozilla\Firefox\Profiles\xvq2uv9d.default\prefs.js ]

Line Found : user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"[email protected]\":{\"descriptor\":\"D:\\\\PROGRAMS\\\\ADOBE ACROBAT\\\\Acrobat\\\\Browser\\\\W[...]

-\\ Google Chrome v

[ File : C:\Users\David_764\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [9907 octets] - [27/08/2013 15:27:21]
AdwCleaner[R1].txt - [9967 octets] - [27/08/2013 15:32:45]
AdwCleaner[R2].txt - [10086 octets] - [27/08/2013 17:05:29]
AdwCleaner[R3].txt - [9947 octets] - [27/08/2013 19:16:11]
AdwCleaner[R4].txt - [10066 octets] - [27/08/2013 20:35:14]
AdwCleaner[R5].txt - [10128 octets] - [27/08/2013 23:45:27]
AdwCleaner[R6].txt - [1786 octets] - [28/08/2013 15:50:47]
AdwCleaner[R7].txt - [1469 octets] - [29/08/2013 09:56:27]
AdwCleaner[S0].txt - [311 octets] - [27/08/2013 15:33:26]
AdwCleaner[S1].txt - [311 octets] - [27/08/2013 18:03:55]
AdwCleaner[S2].txt - [348 octets] - [27/08/2013 19:24:56]
AdwCleaner[S3].txt - [9965 octets] - [27/08/2013 23:46:27]

########## EOF - C:\AdwCleaner\AdwCleaner[R7].txt - [1766 octets] ##########

 

[Jacee]

Download Security Check by screen317 from here http://screen317.spywareinfoforum.org/SecurityCheck.exe or here http://screen317.spywareinfoforum.org/
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt.
Please post the contents of that document.

 

[Pantz]

Hello again, here is the results from the security Check, And i do have a SSD


Results of screen317's Security Check version 0.99.73
Windows 7 Service Pack 1 x64 (UAC is disabled!)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
AVG AntiVirus Free Edition 2013
Outpost Security Suite
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
Java 7 Update 17
Java version out of Date!
Adobe Flash Player 11.8.800.94
Adobe Reader XI
Mozilla Firefox (23.0.1)
Google Chrome 29.0.1547.57
Google Chrome 29.0.1547.62
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
AVG avgwdsvc.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 11% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````

 

[Jacee]

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.


Update Java:

• Download the latest version of Java Runtime Environment (JRE) 7u25.
  Java SE Downloads
• Scroll over to the right (JRE)
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement".
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  [*]Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  [*]Click the Remove or Change/Remove button.
  [*]Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-7u25-windows-i586-p.exe to install the newest version.

Now, download TFC by Old Timer http://www.geekstogo.com/forum/TFC-Temp-File-Cleaner-OldTimer-file187.html and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

Tell me if you are able to download Windows Updates now. Try with only two at a time, to make make sure.

 

[Pantz]

Hello again, i have been able to do my update since this post,.

My system now seems to be responding as it should.

I have updated my JAVA and ran Temp Cleaner

Hello again, i have now been able to update my Windows 7 OS, but still having issues with my Folders

Hello Again, after doing several hours of research i found out that i have Malware on my PC . after doing a System restore to a week ago , i was now able to access Microsoft web site, but i was still having some issues like, unable to move from tab to tab on my browser ( Firefox ), and when i click on a folder to open it, there was a significant delay in opening the folder.

i then ran malaware bytes which found the PUP.Optional.Tarma.A. plus some other malware.

The question is now is how do i remove all the instances ? any suggestions are welcomed.

Thanks in advance

Results of screen317's Security Check version 0.99.73
Windows 7 Service Pack 1 x64 (UAC is disabled!)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
AVG AntiVirus Free Edition 2013
Outpost Security Suite
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
Java 7 Update 25
Adobe Flash Player 11.8.800.94
Adobe Reader XI
Mozilla Firefox (23.0.1)
Google Chrome 29.0.1547.57
Google Chrome 29.0.1547.62
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
AVG avgwdsvc.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 10%
````````````````````End of Log``````````````````````

 

[andrew129260]

Your log shows UAC is off.
I would enable UAC immediately. Without that on, the security of windows 7 is not much better than XP. I would suggest setting UAC to the highest setting for maximum protection. Otherwise the default is fine. True it is one more click to get things done, but its worth it. It has actually saved me a few times from threats/malware. http://www.sevenforums.com/tutorials/299-user-account-control-uac-change-notification-settings.html

 

[Jacee]

Hang onto TFC.... it's a good temp file cleaner as you can see by the results!

Set a "Clean" system restore point now:

Right click Computer, choose properties. On the left side pane, click "System Protection". Click on the the 'configure button'.
Now check "Turn off system protection"
Restart your computer

Now follow the above instructions, but uncheck "Turn off System Protection"

 

[Pantz]

Hello Again, i have turned back on my UAC and set it to the highest setting.

and i have followed Jacee's instructions

Set a "Clean" system restore point now:

Right click Computer, choose properties. On the left side pane, click "System Protection". Click on the the 'configure button'.
Now check "Turn off system protection"
Restart your computer

Now follow the above instructions, but uncheck "Turn off System Protection"

Results of screen317's Security Check version 0.99.73
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
AVG AntiVirus Free Edition 2013
Outpost Security Suite
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
Java 7 Update 25
Adobe Flash Player 11.8.800.94
Adobe Reader XI
Mozilla Firefox (23.0.1)
Google Chrome 29.0.1547.57
Google Chrome 29.0.1547.62
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
AVG avgwdsvc.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 11% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````

 

[andrew129260]

Great job Pantz. I would also suggest doing a http://www.sevenforums.com/tutorials/11733-disk-defragmenter-open-use.html as you are showing you need a defrag done. This will help improve performance in your system.

I also suggest reading more about UAC here so you understand what it does and how to respond to the prompts in the future.

http://en.wikipedia.org/wiki/User_Account_Control

 

[Pantz]

Hello again, Thanks Andrew, I will Read up on UAC. I have a SSD , according to the manufactures site, i should not do a DEFRAG on a SSD Drive,

 

[derekimo]

I have a SSD , according to the manufactures site, i should not do a DEFRAG on a SSD Drive,

That is correct, also why the report stated it as well,

(Do NOT defrag if SSD!)