Solved Windows update and speakers fail

[sdms96825]

Morning Bironi,

Attached are the results of the Kaspersky scan.

 

[Broni]

1. Empty Thunderbird "Sent" folder.
2. Do you have anything important in:
- C:\Users\DMS\Documents\My Backups\mybackup.zip
- C:\Users\DMS\Documents\My Data Files\Backups\Outlook Express Backup\Adoptions.dbx

 

[sdms96825]

1. Empty Thunderbird "Sent" folder.

I direct all of my sent emails to local folders like "2009 Sent" and "2010 Sent" so do not use the "Sent" folder

2. Do you have anything important in:
- C:\Users\DMS\Documents\My Backups\mybackup.zip
- C:\Users\DMS\Documents\My Data Files\Backups\Outlook Express Backup\Adoptions.dbx

No - I can live without these

 

[Broni]

Delete mybackup.zip file and Adoptions.dbx folder.
Empty Recycle Bin.

======================================================================

Your computer is clean

1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll create fresh, clean restore point.

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following:

:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done

2. OTL Clean-Up
Clean up with OTL:

• Double-click OTL.exe to start the program.
• Close all other programs apart from OTL as this step will require a reboot
• On the OTL main screen, press the CLEANUP button
• Say Yes to the prompt and then allow the program to reboot your computer.

If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.

3. Make sure, Windows Updates are current (including SP2)

4. If any Trojan was listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

7. Run Temporary File Cleaner (TFC) weekly.

8. Download and install Secunia Personal Software Inspector (PSI): https://www.techspot.com/downloads/4898-secunia-personal-software-inspector-psi.html. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

10. Run defrag at your convenience.

11. Read How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html

12. Please, let me know, how is your computer doing.

 

[sdms96825]

Bironi,

Again, thank you for all of this. I have run the two OTL procedures, and now I have some questions:

1. TFC forces me to reboot. CCleaner does not. I would prefer to use CCleaner for this reason, but I will defer to your expertise. Does it matter which one I use? Could I use CCleaner every week and TFC every month?

2. I have a readyboost flash drive, several other flash drives, and three other backup hard disks -- including a new one from Toshiba that I got last month and which made a mirror of my computer. How do I check these devices? Can I just delete the mirror? I am scared to plug anything in at this time.

3. I had avast! professional, spy sweeper, and spybot (with tea timer). I do not visit porn sites. HTF did all of this fail to protect me?

4. What software do you suggest that I replace the above?

 

[sdms96825]

I forgot number 5.

5. My Windows Update shows only one update missing -- a new Windows Defender. Yet, the earlier scan showed SP2 missing. How do I rectify this contradiction?

 

[Broni]

1. It reboots, because some garbage files can be removed only on reboot (while not in use).
CCleaner is a fine tool, as long, as you don't touch registry part <---- one of the reasons, I prefer TFC.

2.
a. To protect your computer from USB infection....
Download, and run Flash Disinfector, and save it to your desktop.

*Please disable any AV / ScriptBlockers as they might detect Flash Disinfector to be malicious and block it. Hence, the failure in executing. You can enable them back after the cleaning process*

• Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
• The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
• Hold down the Shift key when inserting the drive until Windows detects it to keep autorun.inf from executing if it is present.
• Wait until it has finished scanning and then exit the program.
• Reboot your computer when done.

Note: As part of its routine, Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that was plugged in when you ran it. Do not delete this folder...it will help protect your drives from future infection by keeping the autorun file from being installed on the root drive and running other malicious files.

b. Now, you're safe to plug on those devices in and scan them with your AV program

c. I'd definitely delete current hard drive image and I'd create new one; it's clean now.

3. I simply don't know. There is no way/tool to find out, where the infection came from.

4. Avast and Spy Sweeper are fine. Now, you also have MBAM, definitely the best tool on the market. Spybot is rather a tool of the past and you won't miss it, if you uninstall it.


Good luck and stay safe

 

[sdms96825]

I forgot number 5.

5. My Windows Update shows only one update missing -- a new Windows Defender. Yet, the earlier scan showed SP2 missing. How do I rectify this contradiction?

 

[Broni]

Go Start and in "Start search" type in:
winver
Press Enter.

Does the pop-up windows show SP2 installed?

 

[sdms96825]

No. It says
Version6.0 Build 6001 Service Pack 1

So, how do I install SP2 again?

 

[Broni]

Standalone download: http://www.microsoft.com/downloads/...d5-f907-4406-9012-a5c3199ea2b3&displaylang=en

 

[sdms96825]

I'll have to do this update overnight as I see it will take almost 15 hours at my speed!

I will let you know when it is finished.

Now, should I post in another forum to see why my speakers are not working? I don't even get the Windows beeps.

 

[Broni]

should I post in another forum to see why my speakers are not working? I don't even get the Windows beeps.

That's probably better, so you'll get more attention.
In this forum, it's just you and me

 

[sdms96825]

Broni,

I finally got the SP2 downloaded. Then I could not install it until I separately removed each of the language packs that I had installed (I think I did this when I was using Outlook and it could not handle emails from China). Then, after I got SP2 installed, a bunch of other updates showed up. I guess they were waiting for SP2!

Anyway, everything seems to be working fine (except for my speakers -- another topic).

I just wanted to thank you again for all of your time and effort. For you to be able to know this subject so well convinces me that we live in parallel universes! I don't know how you do it, but I'm glad you do.

 

[Broni]

I's my pleasure to use my knowledge to help other people

I'm glad to hear good news