Malware- Office- 2014-08-05

When the computer was turned on, on 2014 August 3rd, the following message appeared on a blue screen.

“Stop: c0000218 {Registry File Failure} The registry cannot load the hive (file): \SystemRoot\System32\Config\SOFTWARE or its log or alternate”

I followed the steps given in the web page http://support.microsoft.com/kb/307545 to repair the system but could not proceed as the following message appeared:

C:\System Volume Information is not accessible. Access is denied. {even after following the steps in the web page “309531 How to gain access to the System Volume Information folder”}

Therefore as the Operating System could not be recovered, it was re-installed.

Thereafter, I ran READ & RUN ME FIRST. Malware Removal Guide Procedure, to check whether there were any threats.

The logs are attached herewith.


Also, the following message appears for Symantec Antivirus Corporate Edition, Programme Version: 8.00.9374, Scan engine: 4.1.0.15 when the Computer is turned on.

“The virus definition file used is more than 30 days old. Updating to a new virus definition file will help catch the most recent viruses.”

However, when LiveUpdate was run it shows the following message.

“All of the Symantec products installed on your computer are currently up-to-date. Remember to check for new updates frequently.

LiveUpdate session is complete.”

Please advice.

Dr. K.D.J.H. Manilka Jayawardena,
Medical Officer,
National Tuberculosis Reference Laboratory (NTRL/Central Laboratory of NPTCCD),
Chest Hospital Premises,
Welisara.
Proud to be a Sri Lankan

 

Thank You for your express reply. The requested logs are attached herewith.

When I installed McAfee VirusScan v8.0 instead of Symantec Antivirus Corporate Edition, the following message appeared.

"McAfee
Activation can’t continue.

We’re sorry, but we’re having trouble activating McAfee products. You can begin using your products now, but you won’t receive automatic product updates.

Don’t worry, we’ll ask you to continue activating McAfee products once the problem is fixed. For more help with this problem, please contact McAfee Support. subscriptions@mcafee.com"

 

You’re reply seems to arrive faster than I can attend to the problem.

A success message about adding the entries to the registry was received.

However, I had the following problems:

1. In the “How to Protect yourself from malware!” thread, when you go to the link “Windows Update” to get your updates or check to see if you need any, the following message appears:
Server Error
404 - File or directory not found.
The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.

2. USB Drive is not indicated in My Computer, even though it is indicated in the system tray.

3. As the Computer does not Shut down when the Turn off is clicked, it has to be turned off by pressing the power button of the CPU.

After I installed Windows Service Pack 3 (downloaded from http://www.microsoft.com/en-us/download/details.aspx?id=24 ), all the above issues were resolved.

I have attached the logs of SuperAntiSpyware & Malwarebytes which were run again as per my weekly Malware Scanning Schedule.

Dr. K.D.J.H. Manilka Jayawardena,
Medical Officer,
National Tuberculosis Reference Laboratory (NTRL/Central Laboratory of NPTCCD),
Chest Hospital Premises,
Welisara.
Proud to be a Sri Lankan

 

Is it necessary to Disable the AutoRuns Feature used to spread Malware by the following procedure?

1.1.1. Click Start, click Run, type %SystemRoot%\system32\restore\rstrui.exe, and then click OK.
1.1.2. On the Welcome to System Restore page, click Create a restore point, and then click Next.
1.1.3. On the Create a Restore Point page, type a name for the restore point and then click Create
1.1.4. After the restore point has been created, click Close.
1.1.5. install WindowsXP-KB950582-x86-ENU.exe now
1.1.6. After installing the patch, reboot your PC even if it does not ask you to do so.
1.2. Save AutoRunDisable.reg to your desktop. Be sure the "Save as" type is set to "all files".
1.3. Once you have saved it double click it and allow it to merge with the registry. You need to make sure that you receive a success message about adding the above to the registry. If you do not get a success message, it definitely did not work and you will have to inform someone in our forum about your problem.
1.4. Reboot your PC again after applying the above registry patch.

Dr. K.D.J.H. Manilka Jayawardena,
Medical Officer,
National Tuberculosis Reference Laboratory (NTRL/Central Laboratory of NPTCCD),
Chest Hospital Premises,
Welisara.
Proud to be a Sri Lankan

 

Thank You for your reply.

This concludes all the problems related to the Computer "Office".

Best Regards to Dr. Moriarity & Company.

"As Education, there is no end to Malware either. Go get them!"


Senior Member
Dr. K.D.J.H. Manilka Jayawardena,
Medical Officer,
National Tuberculosis Reference Laboratory (NTRL/Central Laboratory of NPTCCD),
Chest Hospital Premises,
Welisara.
Proud to be a Sri Lankan