Forum Home
Press F1
 
Thread ID: 117168 2011-04-05 10:41:00 Is this a fake virus Alert? It has me worried. Billy T (70) Press F1
Post ID Timestamp Content User
1192262 2011-04-06 05:33:00 The first screenshot is the rogue program program isnt it? If it is, it'll tell you that anything and everything is infected Speedy Gonzales (78)
1192263 2011-04-06 05:38:00 It's not a legit scan, those files *aren't* actually infected, don't go deleting them!

Compare his:
pressf1.co.nz
With my screenshot:
www.c2s.co.nz

What do you notice? Just the name has changed! (And the theme / OS)

So, just so we're clear: That is a 100% rogue application, but the infections it's claiming you have are *not* infected.
Chilling_Silence (9)
1192264 2011-04-06 10:04:00 Get teamviewer and I'll have a look

OK, I'll do that tomorrow if if I get my work finished. Customers are waiting.

May be a silly question, but where is the best place to get teamviewer?

Can you PM your phone number please so I can get to you easier?

Cheers

Billy 8-{)
Billy T (70)
1192265 2011-04-06 10:16:00 The first screenshot is the rogue program program isnt it? If it is, it'll tell you that anything and everything is infected

Screen shots are from the rogue program and MSE, all except the last one which is from CCleaner as stated. And no Plod, I don't download music from iTunes or any other site, in fact I download mainly business-related data. I simply don't have time to stray to the dark side.

Closest I've got was yesterday looking for a YouTube video grabber to get some musical performance video for my son and that was clearly my downfall. In 15 years this is the only malware infection I've ever had.

What really confused me was the reference to the EICAR test virus, I though that disappeared many years ago. I used to use it to check my AV function from time to time. and the name (not the file) is still buried in some archives on this computer.

Cheers

Billy 8-{(
Billy T (70)
1192266 2011-04-06 10:25:00 OK, I'll do that tomorrow if if I get my work finished. Customers are waiting.

May be a silly question, but where is the best place to get teamviewer?

Can you PM your phone number please so I can get to you easier?

Cheers

Billy 8-{)

Here, the main site (www.teamviewer.com)
Speedy Gonzales (78)
1192267 2011-04-06 10:49:00 Screen shots are from the rogue program and MSE, all except the last one which is from CCleaner as stated. And no Plod, I don't download music from iTunes or any other site, in fact I download mainly business-related data. I simply don't have time to stray to the dark side.

Closest I've got was yesterday looking for a YouTube video grabber to get some musical performance video for my son and that was clearly my downfall. In 15 years this is the only malware infection I've ever had.

What really confused me was the reference to the EICAR test virus, I though that disappeared many years ago. I used to use it to check my AV function from time to time. and the name (not the file) is still buried in some archives on this computer.

Cheers

Billy 8-{(

On the youtube download thing, if you can live with using safari as a browser you don't need any other software to download you tube videos
plod (107)
1192268 2011-04-07 05:57:00 Well we fixed it. The Automatic updates service was one of the main probs, it was missing. To fix it, I typed this in a command prompt

%SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection AutoUpdate132 %SystemRoot%\inf\au.inf (Or go to windows/inf folder. Right mouse on au.inf / install)

This will reinstall it. You have to point it either the windows CD, or the I386 folder on the hdd. Probably the 2nd option. Since it'll have later versions of whatever thats needed

It looks like something had put a security entry on the Auto updates service in the registry. So was blocking it (from appearing in services). Deleted it then rebooted, it appeared again

And the BITS service was there but it wouldnt start. I managed to find a zipped file called WinXP_BITS_Fix_v1.6 on the net. Unzipped it ran the .bat file. Voila it was back in services and I could get into it.

And now MSSE updates. Took a while but we got there :banana
Speedy Gonzales (78)
1192269 2011-04-07 06:18:00 Echoing Speedy, yes it is fixed, but he seriously understates the effort and the extent of his experience and knowledge that was required. My mouth was hanging open as I watched him work. The damage was quite extensive with several functions disabled in the registry and they were far from simple to fix.

As the final step I uninstalled MSE and reloaded from the PCW DvD, which left me still unable to load updates, then I ran Windows Update twice (once was not enough) and Bingo, the updates came through on cue and all is well at last.

Thanks again to Speedy, and that is the last time I ever download anything for my son using my computer. I should have known better. :mad:

Cheers

Billy 8-{) :)
Billy T (70)
1192270 2011-04-07 06:29:00 No worries BT.

If that Error 0x8024400A pops up again, check this out (support.microsoft.com)

That prob may have been temporary as the above site says.

I cant remember if I saw teatimer running at the time, but I would disable it. It looks like (according to a post on the Spybot forum), that this can somehow block updating as well
Speedy Gonzales (78)
1192271 2011-04-08 01:23:00 I cant remember if I saw teatimer running at the time, but I would disable it . It looks like (according to a post on the Spybot forum), that this can somehow block updating as well

Teatimer is permanently off, I had taken note of your previous advice to others and disabled it immediately after installation of Spybot . I'm not sure how much that affects Spybot's functions but that was the program that picked and dealt to some malware and let me get started on the repair .

I am one happy chappie today, but Mrs T can't understand why some silly 'hiccup' took nearly two days to fix completely . :badpc:

There was no point in trying to explain! :crying

Cheers

Billy 8-{)
Billy T (70)
1 2 3 4 5