Windows 7 - service.msc

Asked By Jan on 08-Aug-09 02:14 PM
How do I keep Automated updates enabled. I click on Automatic, then apply,
then start - okay but keeps going to disabled.
--
Have a great day
Jan




Ǝиçεl replied on 08-Aug-09 02:44 PM
Hello Jan,

It seems possible that your Windows installation has
been deliberately damaged by a trojan
(Vundo, along any uninvited guests.
(SDBot and ZLOB, all protected by a rootkit.)) so as to prevent you updating
your system or
removing the trojan.


Scan your computer now online and clean it for free!


A very good antimalware app are SUPERAntiSpyware (SAS)
and MalwareBytes Anti-Malware (MBAM) .

There is a free version (on demand scanning only:
-=-
MalwareBytes Anti-Malware (MBAM) Same as above.
-=-



Unexplained computer behavior may be caused by deceptive software
-=-


-=-


Please follow the above sugestions

Please report back so it may assist others who have the same p??oblem as you.



I hope this post is helpful.

Let us know how it works ??ut.

Good luck


????????l
-=-
Shenan Stanley replied on 08-Aug-09 02:45 PM
Suggestion:
Disinfect/infest your machine and cleanup/update your Windows Update
Components.

Would tell you a list of things to help you do that, but, you left out vital
information...

What is the operating system you are currently running and what service pack
level is that operating system currently?

How do you find out?

Start button --> RUN
(no "RUN"?  Press the "Windows Key" + R on your keyboard) --> type in:
winver
--> Click OK.

The picture at the top of the window that opens will give you the general
(Operating System name) while the line starting with the word "version" will
give you the rest of the story.

Post *_both_* in full in response to this message verbatim.  ;-)

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html
Jan replied on 08-Aug-09 06:45 PM
Hi
When MacAfee ran it normal scan, it quarantined a trojan "vundo"
My system is
Windows XP
Version 5.1 (Build2600.xpsp_sp3_gdr.090206-1234 Service Pack 3)

How do I get rid of vundo?
Thanks for any help
--
Have a great day
Jan
Shenan Stanley replied on 08-Aug-09 07:01 PM
The picture at the top *did not* say "Windows XP", it said "Windows XP Home
Edition" or "Windows XP Professional" or something along those lines.

Anyway - time to cleanup, eh?

If at anytime you have question about what you are about to do, do not do
it..  Come and ask for clarification if you need to or if you know someone
good with computers - have them help you.  If not  take it to a
professional.

I hope your backups are up to date - if not - you might as well get an
external media of some sort and at least get your files (documents, emails,
contacts, pictures, music, email, internet favorites/bookmarks, installation
executables, installation product keys/serial numbers, etc) backed up.

Download, install, run, update and perform a full scan (separately) with the
following two applications (freeware versions are the ones to use for this):

SuperAntiSpyware
http://www.superantispyware.com/

MalwareBytes
http://www.malwarebytes.com/

After performing a full scan with one and then the other and removing
whatever they both find completely, you may uninstall these products,
if you wish.

Download and run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

Reboot.

Fix your file/registry permissions...

Ignore the title and follow the sub-section under "Advanced Troubleshooting"
titled, "Method 1: Reset the registry and the file permissions"
http://support.microsoft.com/kb/949377
*will take time
(Ignore the 6th step!)

Reboot and ...

Search your registry for %fystem and replace the "f" with an "s".  May be
three or four matches, may be none.  You may even have to take ownership
(even after doing the above) of the keys in order to make the change.

Reboot.

Download/install this:
http://support.microsoft.com/kb/290301

After installing, do the following:

Start button --> RUN --> type in:
--> Click OK.

(The quotation marks and percentage signs and spacing should be exact.)

Reboot.
PA Bear [MS MVP] replied on 09-Aug-09 01:19 AM
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, do not waste your time with any of the below: Format & reinstall
Windows.  A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan!  You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this is not your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
www.banthecheck.com
Jan replied on 15-Aug-09 09:26 PM
Hi
I would just like to say thank you for all the help.  I did have Vundo trojan.
I have McAfee but it did not get rid of it.  I then tried RegCure it helped,
then I was informed by people here of SuperantiSpyware. I worked with all
three and great success. Vundo gone. Already had McAFee, RegCure $50.00 used
the free AntiSpyware then saw how great it was purchased it for $9.99. So for
$60.00 a year of protection and alot of experience was well worth it. Learned
you need more than McAfee or Norton now.
Thank you all so much
--
Have a great day
Jan
Shenan Stanley replied on 15-Aug-09 09:35 PM
IMO - RegCure is worthless.

Opinions may vary.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html
PA Bear [MS MVP] replied on 16-Aug-09 02:01 AM
If you think your Registry needs to be "cleaned" or "repaired," read
http://aumha.net/viewtopic.php?t=28099 and draw your own conclusions.