Anti-virus updates blocked

Hello, I believe a virus is blocking me from downloading updates for AVG
8.0. I also cannot download spybot search and destroy or malwarebytes which
were recommended to me. I try to access antivirus web pages via Firefox,
e.g. www.avg.com or www.safernetworking.org, but it always says "server
unavailable" etc. Every other website works for me. My computer has been
very slow lately as well, other computers on my internet connection are
running o.k. I am running my cpu from safe mode w/ networking right now
because windows froze up on me last time I tried to restart (loaded all
desktop items but was frozen after that).

If anyone has a way to fix this type of problem please help! I am on
Windows XP pro sp3

is this link blocked?

http://www.microsoft.com/downloads/d...displaylang=en


Try this: go to c:\windows\system32\drivers\etc

look for a file called hosts.

rename it to hosts.bak

then retry your update operations.





"shoe591" <shoe591@discussions.microsoft.com> wrote in message news:B93C1541-06FD-4BBA-9AF2-565E3F253102@microsoft.com...
> Hello, I believe a virus is blocking me from downloading updates for AVG
> 8.0. I also cannot download spybot search and destroy or malwarebytes which
> were recommended to me. I try to access antivirus web pages via Firefox,
> e.g. www.avg.com or www.safernetworking.org, but it always says "server
> unavailable" etc. Every other website works for me. My computer has been
> very slow lately as well, other computers on my internet connection are
> running o.k. I am running my cpu from safe mode w/ networking right now
> because windows froze up on me last time I tried to restart (loaded all
> desktop items but was frozen after that).
>
> If anyone has a way to fix this type of problem please help! I am on
> Windows XP pro sp3


--

bill,

the link brought me to a microsoft page, but gave me the message "the page
you requested cannot be found". I will try to rename that file right now.



"Bill Sanderson" wrote:

> is this link blocked?
>
> http://www.microsoft.com/downloads/d...24ae0-e72d-4f5
> 4-9ab3-75b8eb148356&displaylang=en
>
>
> Try this: go to c:\windows\system32\drivers\etc
>
> look for a file called hosts.
>
> rename it to hosts.bak
>
> then retry your update operations.

sorry, I didn't copy the whole link. No, that link is not being blocked.
However, i just downloaded the malicious software removal tool through
microsoft updates.

I just rebooted into normal windows mode successfully (possibly due to the
registry scan i just did in safe mode? with ccleaner).

I renamed hosts to hosts.bak but AVG still won't update.

On Thu, 15 Jan 2009 18:25:01 -0800, shoe591 wrote:

> Hello, I believe a virus is blocking me from downloading updates for AVG
> 8.0. I also cannot download spybot search and destroy or malwarebytes which
> were recommended to me. I try to access antivirus web pages via Firefox,
> e.g. www.avg.com or www.safernetworking.org, but it always says "server
> unavailable" etc. Every other website works for me. My computer has been
> very slow lately as well, other computers on my internet connection are
> running o.k. I am running my cpu from safe mode w/ networking right now
> because windows froze up on me last time I tried to restart (loaded all
> desktop items but was frozen after that).
>
> If anyone has a way to fix this type of problem please help! I am on
> Windows XP pro sp3

You said: "Every other website works for me."

1.Clear the (IE) temporary Internet files and the history cache.
Click 'Start' and then click 'Run'... then type (or copy/paste)
"inetcpl.cpl" (w/out quotation marks) into the box, then click the 'OK'
button.
In Internet Properties panel 'General' tab, under 'Browsing history', click
'Delete...'button, in 'Delete Browsing History' panel, click the 'Delete
all...' button then place a checkmark into the box beside 'Also delete
files and settings stored by add-ons', Click 'Yes' and exit the Internet
Properties panel by clicking the 'OK' button.

2.Clean HDD
Click 'Start' and then click 'Run...' then type (or copy/paste) "cleanmgr"
(w/out quotation marks into the box, then click the 'OK' button. Select
your drive
(presumably WinXP (C:) and click OK.

3.Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en...ols/hijackthis

Please, do not post HJT logs to this newsgroup.
Fora where you can get expert advice for HiJack This! (HJT) logs.

http://www.thespykiller.co.uk/index.php?board=3.0
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.tomcoyote.org/index.php?showforum=27
http://www.bleepingcomputer.com/forums/forum22.html
http://www.malwarebytes.org/forums/i...hp?showforum=7
http://www.5starsupport.com/ipboard/...p?showforum=18
http://www.theeldergeek.com/forum/in...6&showforum=29

NOTE:
Registration is required in any of the above mentioned fora before posting
a HJT log and read the 'stickies' (instructions/guidelines) for the
respective HJT forum.

5.Routinely practice Safe-Hex.
http://www.claymania.com/safe-hex.html

Good luck :)

I will follow your steps and download HiJack This, thank you so much for your
help! I am concerned about HiJackThis being blocked for download like the
other programs (malwarebytes/spybot search and destroy). I will try though!

step 1, check.

step 2, check.

step3, no go. I cannot access the trendsecure site to download HJT. My
computer seems to be blocking only websites that have something to do with
virus removal. I can try to download using another PC and a flash drive, but
i tried that with spybot S&D as well as malwarebytes and I couldn't get it to
work.

"shoe591" <shoe591@discussions.microsoft.com> wrote in message
news:A1AE8CD3-832D-44BA-940E-3DFC22A97B07@microsoft.com...
> step 1, check.
>
> step 2, check.
>
> step3, no go. I cannot access the trendsecure site to download HJT.
> My
> computer seems to be blocking only websites that have something to do
> with
> virus removal. I can try to download using another PC and a flash
> drive, but
> i tried that with spybot S&D as well as malwarebytes and I couldn't
> get it to
> work.
>
>

Hello 'shoe591'

An on-line scanner will not, I fear, help you. Any malware 'worth its
salt' will hide and/or mis-direct the scanner.

May I suggest that you try Dr Web. Download here:
http://www.freedrweb.com/

Once you have downloaded, disconnect from the Internet and run the
programme 'off' line. Maybe do so in 'safe mode' for best results!

Good luck!

Dave

On Fri, 16 Jan 2009 01:23:00 -0800, shoe591 wrote:

> step 1, check.
>
> step 2, check.
>
> step3, no go. I cannot access the trendsecure site to download HJT. My
> computer seems to be blocking only websites that have something to do with
> virus removal. I can try to download using another PC and a flash drive, but
> i tried that with spybot S&D as well as malwarebytes and I couldn't get it to
> work.

Try this:
Kaspersky® Virus Removal Tool
http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/
http://www.kaspersky.com/support/vir...vptool?level=2

--and/or--

Sophos Anti-Virus (SAV32CLI), is a 32 bit free command line scanner used in
an emergency as a disinfection utility for Windows NT, Windows 2000,
Windows XP and Windows 2003.
To use the Sophos command line software follow the steps below:
1.Download SAV32CLI
http://downloads.sophos.com/tools/sav32sfx.exe
--and--
extract the contents by double clicking the file.
2.Add the latest IDE (virus definition) files to the folder.
These can be downloaded here
http://www.sophos.com/downloads/ide/
3) Read Scanning Options with SAV32CLI.
http://www.sophos.com/support/knowle...cle/13252.html
See removing malicious files with SAV32CLI for basic information on virus,
spyware, Trojan and worm removal with SAV32CLI.
http://www.sophos.com/support/knowle...cle/13251.html

After the software is updated, it is suggested scanning the system in Safe
Mode (this does not apply to MBAM).
"Malwarebytes actually performs better in Normal Mode" says Dustin Cook,
co-author of MBAM.

How do you boot to Safe Mode?
By pressing/tabbing F8 (or F5 on some keyboards) during re-boot.
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/default.aspx?scid=315222
Start your computer in safe mode (Vista)
http://windowshelp.microsoft.com/Win...904a11033.mspx
http://www.bleepingcomputer.com/tuto...utorial61.html

Alternatively:
Click Start==>Run... then type (or copy/paste) "msconfig" (without
quotation marks), click OK. Then click onto BOOT.INI tab and 'check'
/SAFEBOOT then OK and click Restart. To go back to Normal Mode, you must
access the System Configuration utility again and click the General tab
then click/check the radio button 'Normal Startup'- load all device drivers
and services'.

Good luck :)

Chances are that you're seeing the affects of a hijackware infection.

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run additional checks for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

shoe591 wrote:
> Hello, I believe a virus is blocking me from downloading updates for AVG
> 8.0. I also cannot download spybot search and destroy or malwarebytes
> which
> were recommended to me. I try to access antivirus web pages via Firefox,
> e.g. www.avg.com or www.safernetworking.org, but it always says "server
> unavailable" etc. Every other website works for me. My computer has been
> very slow lately as well, other computers on my internet connection are
> running o.k. I am running my cpu from safe mode w/ networking right now
> because windows froze up on me last time I tried to restart (loaded all
> desktop items but was frozen after that).
>
> If anyone has a way to fix this type of problem please help! I am on
> Windows XP pro sp3

On Fri, 16 Jan 2009 18:39:59 +0700, Kayman wrote:

> On Fri, 16 Jan 2009 01:23:00 -0800, shoe591 wrote:
>
>> step 1, check.
>>
>> step 2, check.
>>
>> step3, no go. I cannot access the trendsecure site to download HJT. My
>> computer seems to be blocking only websites that have something to do with
>> virus removal. I can try to download using another PC and a flash drive, but
>> i tried that with spybot S&D as well as malwarebytes and I couldn't get it to
>> work.
>
> Try this:
> Kaspersky® Virus Removal Tool
> http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/
> http://www.kaspersky.com/support/vir...vptool?level=2
>
> --and/or--
>
> Sophos Anti-Virus (SAV32CLI), is a 32 bit free command line scanner used in
> an emergency as a disinfection utility for Windows NT, Windows 2000,
> Windows XP and Windows 2003.
> To use the Sophos command line software follow the steps below:
> 1.Download SAV32CLI
> http://downloads.sophos.com/tools/sav32sfx.exe
> --and--
> extract the contents by double clicking the file.
> 2.Add the latest IDE (virus definition) files to the folder.
> These can be downloaded here
> http://www.sophos.com/downloads/ide/
> 3) Read Scanning Options with SAV32CLI.
> http://www.sophos.com/support/knowle...cle/13252.html
> See removing malicious files with SAV32CLI for basic information on virus,
> spyware, Trojan and worm removal with SAV32CLI.
> http://www.sophos.com/support/knowle...cle/13251.html
>
> After the software is updated, it is suggested scanning the system in Safe
> Mode (this does not apply to MBAM).
> "Malwarebytes actually performs better in Normal Mode" says Dustin Cook,
> co-author of MBAM.
>
> How do you boot to Safe Mode?
> By pressing/tabbing F8 (or F5 on some keyboards) during re-boot.
> A description of the Safe Mode Boot options in Windows XP
> http://support.microsoft.com/default.aspx?scid=315222
> Start your computer in safe mode (Vista)
> http://windowshelp.microsoft.com/Win...904a11033.mspx
> http://www.bleepingcomputer.com/tuto...utorial61.html
>
> Alternatively:
> Click Start==>Run... then type (or copy/paste) "msconfig" (without
> quotation marks), click OK. Then click onto BOOT.INI tab and 'check'
> /SAFEBOOT then OK and click Restart. To go back to Normal Mode, you must
> access the System Configuration utility again and click the General tab
> then click/check the radio button 'Normal Startup'- load all device drivers
> and services'.

Still not successful?

Go to Avira and download the rescue cd
http://www.free-av.com/en/tools/12/a...ue_system.html

Exit the program, when you do, it'll ask if you'd like to save the iso, say
yes. Choose a good name and location. you can use your own cd burning
software to make the disc.

Reboot the machine from the aforementioned disk, let it rename all things
it cant clean; You can find the setting under configuration.

Follow up with :

Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
--and--
SuperAntispyware - Free
http://www.superantispyware.com/down...NTISPYWAREFREE