Unable to update

[jimmybomb]

Hi This is a repost of a subject I put in the incorrect forum, Sorry.

I have seen that various logs should be attached to the post, but

I am having trouble loading an upto date version of Malware onto my laptop,

so I thought I should start with trying to sort that first.

I have the windows xp removal virus on my laptop.

Have followed the instructions but am having some issues.

On my laptop the desktop is just a blank screen with no icons on it.

The first time I downloaded the malware program it updated & scanned ok.

When I restarted the laptop the virus was still there. But as I had no

desktop or "programs" I couldn't find the malware program to start it.

So I ran the installer again. I had to change the folder it installs to

as I kept getting an error message. Anyway ran again & virus still there.

As before no desktop or "programs" so installed the program again but this time

it will not update, I get the massage 12007, 0, winhttpsendrequest.

I have uninstalled malware & tried re installing it but I still get the update problem.

I have since worked out how to get the "programs" back into the start menu but still no

desktop.

So I still have this virus & I can't update Malwarebytes to run it.

Can anyone help?

[Elise]

Hello and

We need to see some information about what is happening in your machine. Please perform the following scan:

• Download DDS by sUBs from one of the following links. Save it to your desktop.
  • DDS.scr
    
  • DDS.pif
    

  [*]Double click on the DDS icon, allow it to run.

  [*]A small box will open, with an explaination about the tool. No input is needed, the scan is running.

  [*]Notepad will open with the results.

  [*]Follow the instructions that pop up for posting the results.

  [*]Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

[jimmybomb]

Hi Elise

Sorry for the delay in responding I have been away from my computer for a few days, when I opened my

enquiry I did so with some ignorance, somewhat waiting for a tech wizkid ( or wizgirl )

so solve my problem for me.

I should know better as I am a member of several different forums

& I know that one of the things that members hate most is people posting "can you just" without looking

around for themselves for basic information.

Anyway after posting the problem I quickly realised the error of my ways and spent 3-4 hours

looking round at different members topics & solutions. I was able to update malwarebytes after taking

the unprecedented step of turning my wireless switch to the on position!!!!OMG (I had turned it

off as I thought the virus might connect to internet by itself & systematically take over my life)

Right after this I ran rkill, then a full scan with malware, & finally a full scan with my

sophos anti virus. This removed the virus from the computer thank god.

After I ran the unhide.exe & another from somewhere else can't remember where,

but I am still having a couple of issues which I can't find the answer to.

Firstly after running the unhide program I did get all my files back but alot of them

seem to be empty. For instance if I click start-all programs almost all the programs that are in

there say empty when you hover over them. Itunes, Skype to name but two, if you click on

them nothing happens. Also in the accessories window if you hover over system tools it also

says it is empty, no defrag, scan disk anything.

Have I lost these totally?

Secondly is there anyway to check that I have really got rid of this virus, I am worried it

is hiding in the depths of my hard drive waiting for my guard to drop so it can come out

& kick my ass again.

Thanks for reading my inane ramblings & I hope you can help

James

di

[Elise]

Hi James, did you use a temp file cleaner at any point? If so, you have permanently lost these files unfortunately.

Please run DDS as instructed in my first post so I can have a look at what might be still wrong with your computer.

[jimmybomb]

Hi Elise

Thanks for your reply.

Not sure if I have run a temp file cleaner or not. Here are the

files from the dds scan you asked me to do.

Thanks

James

attach.zip

dds.txt

[Elise]

Please download a new copy of unhide.exe from here: http://download.bleepingcomputer.com/grinler/unhide.exe

Run it and let me know if it restores your files.

Only after doing that, do the following.

COMBOFIX

---------------

Please download ComboFix from one of these locations:

• 
  

Bleepingcomputer
ForoSpyware

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. (Click on this link to see a list of programs that should be disabled. The list is not all inclusive.)
  
• Double click on Combofix.exe and follow the prompts.
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
  

**Please note: If the Microsoft Windows Recovery Console is already installed, or if you are running Vista, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\Combofix.txt in your next reply.

[jimmybomb]

Elise

I ran the first un hide program but it didnt work still missing files.

Ran the combofix program but at stage 25 of the malware search there a BSOD

that the computer had suffered a serious problem it restarted.

I have turned off on access anti virus scanning for my sophos program & I don't

have a spyware program installed. During the first stages of the combofix

program sophos did report that it had quaratined something. Would this have

caused this problem? There is no "turn off sophos" option I can only turn off

"on access" scanning in the option screen.

James

[Elise]

Hi James, can you try to rerun Combofix from Safe Mode?

[jimmybomb]

Hello Elise

When the computer restarted after the BSOD I checked & none of my

files were back. I turned off the laptop last night I upon

starting the rascal this morning all my files have returned.

Thanks so much for your help, I appreciate it.

I am not going to run combofix again & will delete it, as I have read

it can be pretty dangerous in the wrong hands(mine).

Thanks again

Take care

James xx

[Elise]

Running Combofix under guidance is okay. If you don't want to continue with it, no problem, but I recommend to run it to make sure all malware is gone.

[screen317]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!