📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Internet works but will not allow programs to updates

guy999
guy999 Posts: 325 Forumite
in Techie Stuff
Hi
Think this pc is full of something nasty from a speedway forum used by my dad.
Have tried downloading free virus guards but each one once downloaded then has to connect to net to load properly or get updates for some reason something is stopping it.
Used to have norton which is now gone? But still has Norton firewall, guesing it was this stopping it but wont even let its self do any updates
Any ideas
Cheers
A shadowy flight into the dangerous world of a man who does not exist.

A young loner on a crusade to champion the cause of the innocent,
the helpless, the powerless, in a world of criminals who operate above the law.
«1

Comments

  • Lil306
    Lil306 Posts: 1,692
    Part of the Furniture 1,000 Posts Name Dropper Combo Breaker
    Forumite
    First download the Norton Removal Tool and remove any sign of Norton

    Then download and run Spybot S+D and Malware Bytes, clearing anything they find. Then do it once more to be safe.

    That should clear any gremlins left.

    Re: free AV, I prefer Avast and Comodo (For firewall), they did have issues with Conflicts, if so you can use Comod Internet Security (is firewall + a.v) plus it's free
    Owner of andrewhope.co.uk, hate cars and love them

    Working towards DFD

    HSBC Credit Card - £2700 / £7500
    AA Loans - (cleared £9700)
  • guy999
    guy999 Posts: 325 Forumite
    Do have Malwarebytes antimalware installed, and from a quick scan gives this.
    Malwarebytes' Anti-Malware 1.42
    Database version: 3289
    Windows 5.1.2600 Service Pack 1
    Internet Explorer 6.0.2800.1106
    13/01/2010 23:15:31
    mbam-log-2010-01-13 (23-15-26).txt
    Scan type: Quick Scan
    Objects scanned: 103108
    Time elapsed: 9 minute(s), 21 second(s)
    Memory Processes Infected: 3
    Memory Modules Infected: 1
    Registry Keys Infected: 2
    Registry Values Infected: 7
    Registry Data Items Infected: 11
    Folders Infected: 9
    Files Infected: 26
    Memory Processes Infected:
    C:\WINDOWS\system32\photo_id.exe (Backdoor.HareBot) -> No action taken.
    C:\Documents and Settings\Owner\photo_id.exe (Backdoor.HareBot) -> No action taken.
    C:\WINDOWS\system32\twex.exe (Backdoor.Bot) -> No action taken.
    Memory Modules Infected:
    C:\WINDOWS\system32\cfgbken.dll (Trojan.Agent) -> No action taken.
    Registry Keys Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8d0952a2-709b-4bbd-b9f2-13dc4824d0c6} (Trojan.BHO.H) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{8d0952a2-709b-4bbd-b9f2-13dc4824d0c6} (Trojan.BHO.H) -> No action taken.
    Registry Values Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\t0cg4i8f (Trojan.FakeAlert.H) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\photo_id (Trojan.FakeAlert.H) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\t0cg4i8f (Trojan.FakeAlert.H) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\photo_id (Trojan.FakeAlert.H) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rundll32.exe (Trojan.Agent) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\regedit32 (Trojan.Agent) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wab (Trojan.Dropper) -> No action taken.
    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Backdoor.Bot) -> Data: c:\windows\system32\twex.exe -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Backdoor.Bot) -> Data: system32\twex.exe -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\aux1 (Hijack.Sound) -> Bad: (C:\DOCUME~1\Owner\APPLIC~1\MACROM~1\Common\82cee0361.dll) Good: (wdmaud.drv) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\aux2 (Hijack.Sound) -> Bad: (C:\DOCUME~1\Owner\APPLIC~1\MACROM~1\Common\82cee0361.dll) Good: (wdmaud.drv) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\midi1 (Hijack.Sound) -> Bad: (C:\DOCUME~1\Owner\APPLIC~1\MACROM~1\Common\82cee0361.dll) Good: (wdmaud.drv) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\midi2 (Hijack.Sound) -> Bad: (C:\DOCUME~1\Owner\APPLIC~1\MACROM~1\Common\82cee0361.dll) Good: (wdmaud.drv) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\mixer1 (Hijack.Sound) -> Bad: (C:\DOCUME~1\Owner\APPLIC~1\MACROM~1\Common\82cee0361.dll) Good: (wdmaud.drv) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\mixer2 (Hijack.Sound) -> Bad: (C:\DOCUME~1\Owner\APPLIC~1\MACROM~1\Common\82cee0361.dll) Good: (wdmaud.drv) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\wave1 (Hijack.Sound) -> Bad: (C:\DOCUME~1\Owner\APPLIC~1\MACROM~1\Common\82cee0361.dll) Good: (wdmaud.drv) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\wave2 (Hijack.Sound) -> Bad: (C:\DOCUME~1\Owner\APPLIC~1\MACROM~1\Common\82cee0361.dll) Good: (wdmaud.drv) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\System32\twex.exe,) Good: (Userinit.exe) -> No action taken.
    Folders Infected:
    C:\Documents and Settings\All Users\Application Data\02783929 (Rogue.Multiple) -> No action taken.
    C:\Documents and Settings\All Users\Application Data\12779531 (Rogue.Multiple) -> No action taken.
    C:\Documents and Settings\All Users\Application Data\16663904 (Rogue.Multiple) -> No action taken.
    C:\Documents and Settings\LocalService\Application Data\twain_32 (Trojan.Zbot) -> No action taken.
    C:\Documents and Settings\NetworkService\Application Data\twain_32 (Trojan.Zbot) -> No action taken.
    C:\Program Files\Internet Antivirus Pro (Rogue.InternetAntiVirus) -> No action taken.
    C:\Program Files\Internet Antivirus Pro\db (Rogue.InternetAntiVirus) -> No action taken.
    C:\Program Files\Internet Antivirus Pro\Languages (Rogue.InternetAntiVirus) -> No action taken.
    C:\WINDOWS\system32\twain32 (Backdoor.Bot) -> No action taken.
    Files Infected:
    C:\WINDOWS\system32\cfgbken.dll (Trojan.BHO.H) -> No action taken.
    C:\WINDOWS\system32\t0cg4i8f.exe (Trojan.FakeAlert.H) -> No action taken.
    C:\Documents and Settings\Owner\photo_id.exe (Trojan.FakeAlert.H) -> No action taken.
    C:\WINDOWS\system32\photo_id.exe (Trojan.FakeAlert.H) -> No action taken.
    C:\Documents and Settings\All Users\Application Data\16663904\16663904 (Rogue.Multiple) -> No action taken.
    C:\Documents and Settings\LocalService\Application Data\twain_32\user.ds (Trojan.Zbot) -> No action taken.
    C:\Documents and Settings\NetworkService\Application Data\twain_32\user.ds (Trojan.Zbot) -> No action taken.
    C:\WINDOWS\system32\twain32\local.ds (Backdoor.Bot) -> No action taken.
    C:\WINDOWS\system32\twain32\user.ds (Backdoor.Bot) -> No action taken.
    C:\Documents and Settings\Default User\Desktop\Security Tool.LNK (Rogue.SecurityTool) -> No action taken.
    C:\Documents and Settings\Default User\Start Menu\Programs\Security Tool.LNK (Rogue.SecurityTool) -> No action taken.
    C:\Documents and Settings\Owner\Application Data\Macromedia\Common\82cee0361.dll (Hijack.Sound) -> No action taken.
    C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareXP2009.lnk (Rogue.AntiSpyware) -> No action taken.
    C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareXP2009.lnk (Rogue.AntiSpyware) -> No action taken.
    C:\WINDOWS\system32\twex.exe (Backdoor.Bot) -> No action taken.
    C:\Documents and Settings\LocalService\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> No action taken.
    C:\Documents and Settings\Owner\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> No action taken.
    C:\WINDOWS\msacm32.drv (Trojan.Agent) -> No action taken.
    C:\WINDOWS\wuasirvy.dll (Trojan.Banker) -> No action taken.
    C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png (Trojan.FakeAlert) -> No action taken.
    C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png (Trojan.FakeAlert) -> No action taken.
    C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png (Trojan.FakeAlert) -> No action taken.
    C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png (Trojan.FakeAlert) -> No action taken.
    C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png (Trojan.FakeAlert) -> No action taken.
    C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png (Trojan.FakeAlert) -> No action taken.
    C:\Documents and Settings\Owner\Application Data\Macromedia\Common\82cee03619.exe (Trojan.Dropper) -> No action taken.
    A shadowy flight into the dangerous world of a man who does not exist.

    A young loner on a crusade to champion the cause of the innocent,
    the helpless, the powerless, in a world of criminals who operate above the law.
  • Lil306
    Lil306 Posts: 1,692
    Part of the Furniture 1,000 Posts Name Dropper Combo Breaker
    Forumite
    Your Malware Bytes doesn't seem to be doing much. Is it running the latest updates?

    Download Spybot S/D, it can run on boot-up so it can clear anything which is in memory which would help
    Owner of andrewhope.co.uk, hate cars and love them

    Working towards DFD

    HSBC Credit Card - £2700 / £7500
    AA Loans - (cleared £9700)
  • guy999
    guy999 Posts: 325 Forumite
    Malware will scan, but when try to fix then appears to connect to net and hangs. Updates will not work either.
    But will it tonight trying to fix problems
    Will download spybot now
    A shadowy flight into the dangerous world of a man who does not exist.

    A young loner on a crusade to champion the cause of the innocent,
    the helpless, the powerless, in a world of criminals who operate above the law.
  • guy999
    guy999 Posts: 325 Forumite
    Unfortunately wont work as pc runs out of memory
    Norton now uninstalled, but still unable to get any updates or fix programs that malware finds as it appears to want to connect to net and is being blocked.
    Even skype wont install properly
    Any ideas anyone
    Cheers
    A shadowy flight into the dangerous world of a man who does not exist.

    A young loner on a crusade to champion the cause of the innocent,
    the helpless, the powerless, in a world of criminals who operate above the law.
  • macman
    macman Posts: 53,129
    Part of the Furniture 10,000 Posts Name Dropper
    Forumite
    OP, why on earth is your PC still running SP1? I don't know if it's XP or Vista, but either way your Windows Updates are way out of date (it it's XP, about 6 years out of date!) Once you've cleared the infection you should update as a priority.
    If you are running XP on SP1, then you system is wide open, as you've found, and a lot of AV programs won't even run properly on SP1. And nor will many other programs.
    No free lunch, and no free laptop ;)
  • davb
    davb Posts: 1,293
    Part of the Furniture Combo Breaker
    Forumite
    Download the latest MalwareBytes
    If it won't run in normal mode, try rebooting into safe mode (F8 on boot) and installing/scanning/fixing, which will hopefully clear what is causing the problem. Try a quick scan first, then reboot into normal mode and run a full scan. As before, post the logs here, then we can look at what ibest to do next.
  • guy999
    guy999 Posts: 325 Forumite
    edited 14 January 2010 at 10:24PM
    Thanks but have updates turned on, and when come to run them whether manually or automatically, pc always runs out of memory.
    NOt sure what to do
    A shadowy flight into the dangerous world of a man who does not exist.

    A young loner on a crusade to champion the cause of the innocent,
    the helpless, the powerless, in a world of criminals who operate above the law.
  • guy999
    guy999 Posts: 325 Forumite
    downloading malware now
    A shadowy flight into the dangerous world of a man who does not exist.

    A young loner on a crusade to champion the cause of the innocent,
    the helpless, the powerless, in a world of criminals who operate above the law.
  • macman
    macman Posts: 53,129
    Part of the Furniture 10,000 Posts Name Dropper
    Forumite
    Basics please. Which OS are you running? How much RAM installed? And how much disk space do you have left?
    When you say, 'running out of memory', do you mean 'out of disk space'?
    If you are running XP SP1, then your updates and security are years out of date-XP SP2 was released mid-2004!
    No free lunch, and no free laptop ;)
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 355.9K Banking & Borrowing
  • 255K Reduce Debt & Boost Income
  • 456.2K Spending & Discounts
  • 248.4K Work, Benefits & Business
  • 606.1K Mortgages, Homes & Bills
  • 179K Life & Family
  • 263.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture