Jump to content
Johnnyh

Please help need to Remove VIRUS EPIC IT keeps coming back, ???

Recommended Posts

Without  spending more time on this, at this point it looks like it's best to probably do the following reinstall.

Reinstall Windows 7 without losing programs and files (Repair install)
https://ogri.me/en/hard-soft/1087-reinstall-windows-7-without-losing-programs-and-files-repair-install

That should correct most odd, strange, etc. issues with Windows 7

If that does not correct it then it's probably best create a clone image, then do a fresh install of Windows 7 and install, update, configure what you need to run it.

But, I've seen the reinstall like this fix some really messed up systems.

 

Share this post


Link to post
Share on other sites

thanks for the info

on the virtual PC will try what you say ??

 

the times and date's were the same even though the images were snapped differently

 

 

do i need to cleanup any more on the machine ???

 

Thank you

Regards

 

 

 

 

 

1977049118_realtimezone2020-04-30_01-52-38.thumb.jpg.d43a8ef9c94dd8c51b88993be8647134.jpg1032873510_virtualtimezone2020-04-30_01-51-18.jpg.2b5b2508eccbfd73a71268f1b65633fc.jpg

Share this post


Link to post
Share on other sites

No, on the Virtual Machine go ahead and do the reinstall of Windows.

Once that is done then let me know if Windows Defender is working now.

Then get me some new FRST logs and we'll review any left over issues.

For now, the main Physical computer leave alone since the VM is running on it we can't do reboots and fixes until the virtual is completed.

 

Share this post


Link to post
Share on other sites

OK thank you

 

I have the win 7 ISO mapped from my server to the virtual CD on virtual window 7

but when I restart the virtual it load in to windows as normal ? and then gives me a windows CD when inside the virtual windows 7

how can I boot from that CD iso image so a I can upgrade the win 7 virtual image

 

Thanks

 

Regards

Share this post


Link to post
Share on other sites

It all most as I'm looking for a bios boot order setting in VMware ???

 

regards

Share this post


Link to post
Share on other sites

ok just found it thank you

BOOT TO FIRMWARE 

 

regards

 

 

 

Share this post


Link to post
Share on other sites

Hello

 

wow VMware ESXi seems a beast from what you are saying

 

Yes I am slowly getting my head around VMware workstation 15.5 and I must say the more I see the more I am impressed with it

I'm still new to VMware, but enjoying the more I lean and use Virtual Images and thank you to you!

for helping me improve the security and performance of the VMware and my Real PC's, It is very very much appreciated

not sure if we are 100% there with the Virtual windows 7, but the reinstall of windows went well, I now can do and sfc /scannow and it did find a corruption but since the re install was able to repair it and a second SFC passes fine.

update still seem a little hit and miss, when I follow the update and try to install what seems like internet explorer update it fails ??

 

I have sent you new log files after the re install on windows 7 on the virtual pc

 

I must say I am very very impressed with your knowledge and assistance, and appreciate it very much.

 

Thank you, need to get some rest now, but will be in touch again later

 

Kind Regards

 

 

 

 

 

 

 

Capture.2JPG.JPG

Capture.JPG

Addition.txt FRST.txt

Share this post


Link to post
Share on other sites

This is listed as an XP fix not for Windows 7 but it might apply. Please give it a try.
https://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/error-code-0x8050800c/44ea3e6f-5512-43d5-a707-8715b67e95f2

If that does not help we'll do a few more fixes related to this.

Next run the following

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

I'm going to go get some sleep and will be back a bit later.

 

Share this post


Link to post
Share on other sites

hello again

 

thank you for the reply

 

Ok tried the xp fix but there was an registry entry for every profile path, so did not do anything to the registry

run your fix 

did a scf /scannow it found a corruption and repaired it

 

I notice defender service is not installed if I try to run / enable defender, I'm not bothered to be hones as I always like to disable defender in windows 7 ?

 

the virtual pc win 7 seems to be running ok,maybe no quite a snappy as it once was, but that may be because system restore is enabled

 

Once again I appreciate you help

 

regards

 

 

 

 

 

 

Capture.JPG

Addition.txt FRST.txt

Share this post


Link to post
Share on other sites

hello

 

not sure if have another infection ???

but both virtual and real pc are running horrible, slow sluggy clicky ???

not really sure waht is going on

but they were both running better than they feel at the moment

 

 

Regards

 

Share this post


Link to post
Share on other sites

It may be from poor network connection maybe or a Windows Update going on in the back ground?

I'm not too concerned with Windows Defender but I would like to correct the Windows Update issue if possible.  Again, personally I'm not aware of any issue having System Protection enabled. If you have a documented link from a reliable source confirming that please share. I've managed thousands of computers in my career and have not had an issue with using it (aside from it not always working in some cases) 😅

I'm working on another fix at the moment. Testing and checking something, Be back soon

 

 

Share this post


Link to post
Share on other sites

Please run the following fix on the Windows 7 virtual PC.  DO NOT run it on the Windows 10 box as you could mess up Windows 10 with this script.

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

After the reboot please open Control Panel, System & Security, Windows Updates, Check for Updates

 

Share this post


Link to post
Share on other sites

I would recommend you set IE to default at least temporarily so you can add this update check on the Windows 7 virtual PC

image.png

 

image.png

 

 

Share this post


Link to post
Share on other sites

Help!!!

 

 

thank for all the info, but hitting my head with MS..!!!

 

I'm losing the plot with WINDOWS, MICROSOFT AND UPDATES

 

has MS broke the windows 7 / server 2008r2 updates ??, every help MS page I go to has removed any FIX ?, just loads of spill about various files .mum MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed. bla bla bla

 

I am really getting frustrated with Microsoft   ????

 

these updates issues seem to be related to SHA2 ???? I have no idea??

 

but the many help pages I keep going to are just sending me round in circles with no FIX

https://support.microsoft.com/en-us/help/4474419/sha-2-code-signing-support-update

 

WHY has MS taken away all the fixes , they use to have 100s of little fix.exe files

 

Have microsoft lost the plot ??? there is just load of text and NO fixes, they got rid of every fix, that use to repair all there bugs and errors

now they just leave you with all the bugs with no fixes

 

I have been trying to install WINS server as a role on my N40L micro server 2008 R2, its having none of it, get to the end of installing as says fatal error 0x80070643

another major bug from MS tied up with updates ?? done all the suggested fixes turning off services etc nothing works, tries 20 times in the last day to install wins role but no luck ?? so server 2008 r2 is broke ??

so was going to try server 2012 instead on the N40L but it gets as far a install and selecting the drive and then says can not create or find partition, the partition  is there the drive is there ??? so given up with that ?? guess its a bios issue with the N40L and windows server 2012

 

back to the virtual machine sorry I think I deleted the fix text oops

 

should I run it again to see if I can gen new logs for you ?

 

Sorry having a bad night, servers in bits not working cos I can not get wins server installed ,

can't install wins server in 2008r2 (basically its the same as windows 7) so would not surprise me if the update that MS have broken everywhere is the same issues as windows 7 update

are having ?? my windows 2008r2 0x80070643 error is most probably tied up with  SHA2 and all the faulty windows 7 updates

thank you for sending the links to try and fix these updates but not having any joy, just jumping from page to page getting confused with what Microsoftt are saying and what they have broken re updates

 

so not sure what to do  re updates ??

 

appreciate you help thank you

 

 

 

 

 

 

 

 

 

 

 

 

 

Share this post


Link to post
Share on other sites

Hi

 

the links say you need this patch, but I can see any patches ???

I keep scrolling through pages, am i missing something 

 

Regards

 

Running Windows 7 or Server 2008? You will need this patch!

by Martin Brinkmann on November 20, 2018 in Windows - Last Update: March 14, 2019 - 25 comments

Microsoft plans to release an update early next year for the company's Windows 7 and Windows Server 2008 operating systems that add support for SHA-2 update handling to them.

Updates are delivered using SHA-1 and SHA-2 currently. SHA-1 is a  hashing algorithm with known weaknesses and Microsoft plans to do away with SHA-1 support in April 2019 to use SHA-2, an improved hashing algorithm, exclusively going forward.

While that is no problem for Windows 8.1, Windows 10, or the server equivalents, it is one for devices running Windows 7 or Windows Server 2008. The reason is simple: SHA-2 is not supported by these operating systems when it comes to updates.

Any update that is delivered as SHA-2 exclusively, better, signed using SHA-2, can't be verified on Windows 7 or Windows Server 2008 devices. Means, these updates don't get installed on devices running these versions of Windows anymore unless the SHA-2 update patch is installed first.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.