Problems with Antivirus Updates

imafrey · Mar 12, 2013

Hello,

First I would like to apologize for posting this problem in the wrong forum. Also this may a bit of a long post because I will attempt to cover all of the steps I have taken since the problem began. If there is more information you need that I have not included in this post, please let me know. While I have used tools from majorgeeks before, I only joined the website a few days ago.

Facts:
1. My internet provider includes a subscription to Macfee Security Suite, which I had used successfully for years.
2. My computer’s Operating System is Windows XP Media Center and always has been. I have kept it up to date through Microsoft update, including custom updates that apply to my hardware & software. I use internet explorer 8 because my XP OS cannot use IE9.
3. My laptop is a Toshiba Satellite P105-S6014, which I have put the max of 4GB of RAM. Its hard drive is 160 GB, with 75.2 GB of free space. It came with a trial version of Norton Antivirus which I removed because I wanted to use the antivirus I was already paying for with my internet provider.
4. This last fall or late summer, the exact time escapes me, Macfee had a major update & that is when my problems started. The update would begin to load but it would then stop and a screen would come up about conflicting software. The conflicting software was something similar to BT Yahoo! Online. I contacted my internet provider who wanted to sell me their antivirus protection (I can’t remember what it was called); I turned them down on the grounds that they were already getting my money to provide this service. I also felt cranky about the issue since my internet provider is linked with Yahoo and I felt trying to take advantage. I then used both my computer’s program add/remove & Revo Uninstaller to try & get rid of BT Yahoo! Online. I could not locate it in either my programs or anywhere on my computer when I searched for it. Finally not being able to fix the problem, I then removed Macfee’s entire Security Suite. I believe I had to use Revo Uninstaller to try to get all of its remnants removed from my computer.
5. Since I know it is foolish to be without antivirus I then took advantage of a free trial of AVG, since it has had a good reputation. At the end of the free trial though I had found Microsoft Security Essentials. So again I removed AVG using Revo Uninstaller to be sure to try and get all of it.
6. I then installed & have been successfully using Microsoft Security Essentials for several months and thought I had taken care of my antivirus problems. Until approximately the end of February, Microsoft Security Essentials had an update. The update would fail each time I tried to install it.
7. At this point a friend suggested I check into malware being a problem. Since I have successfully used majorgeeks.com to find out how to fix problems in the past I followed the steps in your Malware Removal Forum. I am attaching the log texts produce by the scans & I did not have any of the programs “fix” anything.
8. Since I am currently without antivirus protection, I did try once more after running the scans to install Microsoft Security Essentials by saving it to my desktop & then running. It still would not install so I deleted it from my desktop & have run Ccleaner.
9. I also called Toshiba who responded by wanting to sell me either a onetime fix service or a year of protection. They also told me if I didn’t have them fix the problem that my operating system would continue to deteriorate, and that eventually I would not be able to use the internet & that my computer might not even start. While I understand they are a business & need to be compensated for their work, I do not have the funds.
10. I have backed up my computer using a simple tech back up drive, and have also saved all of files in a folder on the drive. I used Ccleaner to create a list of programs so I could go back to use it to reload all of the programs that I use.
11. When I have income again I will upgrade to a new computer as soon as I have the funds.

I think I have covered all of the facts of the problem. So I have some questions.
1. Should I just run the malware programs or a particular one to remove malware? I have not done this because of your instructions & because I have read that sometimes they can cause registry problems. *I don’t need any more problems than I already have.
2. I do have my factory discs that came with my computer I could use them to wipe the computer & start fresh, but having done that on another laptop I know it is very time consuming. Even though I would rather not have to go back to factory settings would that be the best choice to cure the problem?
3. Both my brother & a friend of mine each tried/completed upgrades from XP OS to OS 7 on their computers. They both advised me to save the money toward getting a new computer instead of wasting time & money to try upgrading the OS. Is upgrading to OS 7 on a machine built to run XP advisable or are they correct in telling me to just get a new computer?

I appreciate your time & efforts to help me with these problems.
Sincerely,
D

chaslang · Mar 16, 2013

Welcome to Major Geeks!

imafrey said: ↑

I am attaching the log texts produce by the scans & I did not have any of the programs “fix” anything.
Click to expand...

That was not the correct thing to do! At least not for Malwarebytes which in our instructions we specifically stated to fix what it finds. We did say when running Hitman Pro and RogueKiller to only scan and not fix.

So now, do the below. And make sure to only do what is requested and nothing else. Do not make any other changes to your PC unless we request it.

Rerun Malwarbytes and fix everything it finds. Then immediately reboot your PC.

After reboot, run a new scan with Malwarebytes and attach the new log.

Now rerun Hitman Pro and allow it to fix the Malware remnants and all the Potential Unwanted Programs junk that you have.

Now immediately reboot again and after reboot run a new scan with Hitman Pro and attach the new log.

You will have more to do but we need to get the above out of the way first and analyse the new logs before continuing.

In addition, we will run a new scan and get a new log from MGtools below. So move right on to the below after attaching the above two new logs from Malwarebytes and Hitman.

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.

The tool will open and start scanning your system.

Note: That JRT may reset your home page to a google default so you will need to restore your home page setting if this happens.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Attach JRT.txt to your next message.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

the JRT.txt log

C:\MGlogs.zip

With regards to upgrading this PC to Win 7, no! It is too old and too slow to properly run Win 7. You would not like the performance.

imafrey · Mar 16, 2013

Ok here are the Malwarebyts & Hitman Pro new logs.

chaslang · Mar 16, 2013

You did not have Hitman fix what it found before getting the new log. Please see my last instructions. Also please run the rest of the instructions too.

imafrey · Mar 16, 2013

I hope I got it all this time.:-o

chaslang · Mar 16, 2013

Better but still some items remain. Run Hitman Pro again and fix the below if the show up

Code:

Potential Unwanted Programs _________________________________________________

Code:


[LEFT]  C:\WINDOWS\Tasks\BrowserProtect.job (Claro)
[LEFT]  HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}\ (Yontoo)
  HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}\ (Yontoo)
  HKLM\SOFTWARE\Classes\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}\ (Yontoo)
  HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}\ (Yontoo)
  HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44b0-A826-84C829536E93}\ (Yontoo)
  HKU\S-1-5-21-3254491005-2856985424-4217582480-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}\ (Babylon)
  HKU\S-1-5-21-3254491005-2856985424-4217582480-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}\ (Babylon)[/LEFT]

Then reboot and run a new scan and attach the new log.

Now uninstall the below programs:
Java(TM) 6 Update 33
Viewpoint Media Player

Also make sure to tell me how things are running now!

[/LEFT]

imafrey · Mar 17, 2013

Ok, here is my new hitman log. I uninstalled the two programs you listed. I have noticed is that my cursor sometimes jumps, as if it has a twitch. I also still have not tried installing any antivirus. Thank you for your patients. Provided I could get anitvirus that would load, update, & run, I would think everything is fine.

I know I told you about the BT Yahoo! conflict with Macfee, but I don't think I told you about Microsoft Securtiy Essentials completely. I could not get the up date to install & run. At some point there was a notice that the reason was that it could not locate something called epp. (something that I can't remember at this point).

So with one of them something is blocking that I could not find & remove & the other could not find a location on my computer (as if it was missing).

I hope this helps.

chaslang · Mar 17, 2013

You're welcome. You should be good to go now.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

Go back to step 4 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.

If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If you are running Win 7, Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 6 of the READ ME
for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

imafrey · Mar 18, 2013

I finished following the steps you listed. I then tried to install Microsoft Security Essentials back onto my computer. I am attaching a screen shot of what happens. I cannot get it to install. Do you have any other suggestions?:confused
Should I just try a different antivirus program? Or is there something deeply wrong with my computer.
Thank you again for working with me to correct this problem.
D

imafrey · Mar 18, 2013

Hmm, my screen shot did not attach to my post. I am trying to attach it again.

chaslang · Mar 20, 2013

See if the solution proposed by DragosVelicanu in the below works for you.

http://answers.microsoft.com/en-us/protect/forum/mse-protect_start/the-feature-you-are-trying-to-use-is-in-a-network/80d4be22-aab6-47f0-a7dc-8a3131fc8df0

Log in or Sign up

Problems with Antivirus Updates

imafrey Private E-2

Attached Files:

HitmanPro_20130310_1559.log

MBAM-log-2013-03-10 (15-27-27).txt

MGlogs.zip

RKreport[1]_S_03102013_02d0511.txt

TDSSKiller.2.8.16.0_10.03.2013_15.32.23_log.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

imafrey Private E-2

Attached Files:

mbam-log-2013-03-15 (20-44-49).txt

HitmanPro_20130315_2315.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

imafrey Private E-2

Attached Files:

HitmanPro_20130316_0236.log

JRT.txt

MGlogs.zip

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

imafrey Private E-2

Attached Files:

HitmanPro_20130317_0613.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

imafrey Private E-2

imafrey Private E-2

Attached Files:

Screen Shot MSE.jpg

chaslang MajorGeeks Admin - Master Malware Expert Staff Member