Windows XP Automatic Updates 'Disabled'- every time after reboot!!

[Can't_Stand_Hackers]

Hello! My computer got some malware recently, I ran my anti-virus software,
got id of i (took several times to make sure the system was clean), however
the problem persist. It's as if the virus has gone but left destruction
behind. My Automatic Updates is turned off ever time I switch on the
computer, even though reregistering it through Start--> Run helped first
time. I looked at other threads, went to download this AU Reset tool from
http://www.codeplex.com/aureset/Rele...eleaseId=13656

How long does take to download??Because my installation got to 'Installing
KB842773 for Windows XP AKA BITS 2.0....' and it's not progressing anywhere
for a while now...Shoud Icancel and start again?

[Can''t_Stand_Hackers]

Sorry, my keyboard wasn't working properly, some letters simply refused to be
typed. I meant to say 'I got rid of it (the virus)' and some other typos were
accidental because of my keyboard, sorry! I also wanted to add that I am
having problems loading most websites, on top of my Automatic Updates being
turned off.
If the virus is not there anymore, why do these problems persist? Thanks!!


"Can't_Stand_Hackers" wrote:

> Hello! My computer got some malware recently, I ran my anti-virus software,
> got id of i (took several times to make sure the system was clean), however
> the problem persist. It's as if the virus has gone but left destruction
> behind. My Automatic Updates is turned off ever time I switch on the
> computer, even though reregistering it through Start--> Run helped first
> time. I looked at other threads, went to download this AU Reset tool from
> http://www.codeplex.com/aureset/Rele...eleaseId=13656
>
> How long does take to download??Because my installation got to 'Installing
> KB842773 for Windows XP AKA BITS 2.0....' and it's not progressing anywhere
> for a while now...Shoud Icancel and start again?

[Engel]

The only way to clean a compromised system is to flatten and rebuild. That’s
right. If you have a system that has been completely compromised, the only
thing you can do is to flatten the system (reformat the system disk) and
rebuild it from scratch (reinstall Windows and your applications).
Source:
<http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx>

Interesting and appropriate article

Good luck
-=-


"Can't_Stand_Hackers" wrote:

> Hello! My computer got some malware recently, I ran my anti-virus software,
> got id of i (took several times to make sure the system was clean), however
> the problem persist. It's as if the virus has gone but left destruction
> behind. My Automatic Updates is turned off ever time I switch on the
> computer, even though reregistering it through Start--> Run helped first
> time. I looked at other threads, went to download this AU Reset tool from
> http://www.codeplex.com/aureset/Rele...eleaseId=13656
>
> How long does take to download??Because my installation got to 'Installing
> KB842773 for Windows XP AKA BITS 2.0....' and it's not progressing anywhere
> for a while now...Shoud Icancel and start again?

[PA Bear [MS MVP]]

Judging from similar posts here in the past month or so, the behavior may be
due to a Vundo-ZLOB-SDBot infection, all of which is protected by a rootkit.

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a thorough check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

==========================================

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


Can't_Stand_Hackers wrote:
> Hello! My computer got some malware recently, I ran my anti-virus
> software,
> got id of i (took several times to make sure the system was clean),
> however
> the problem persist. It's as if the virus has gone but left destruction
> behind. My Automatic Updates is turned off ever time I switch on the
> computer, even though reregistering it through Start--> Run helped first
> time. I looked at other threads, went to download this AU Reset tool from
> http://www.codeplex.com/aureset/Rele...eleaseId=13656
>
> How long does take to download??Because my installation got to
> 'Installing
> KB842773 for Windows XP AKA BITS 2.0....' and it's not progressing
> anywhere
> for a while now...Shoud Icancel and start again?

[Can''t_Stand_Hackers]

Thanks for your reply! What's the difference between the programsyou
suggested and Spybot? Because I downloaded it, it got rid of everything just
fine. Only, as I wrote in my other post 'What IS this site?', some websites
still appear and the updates are still disabled. How can that be if the
malware has been destroyed?

"PA Bear [MS MVP]" wrote:

> Judging from similar posts here in the past month or so, the behavior may be
> due to a Vundo-ZLOB-SDBot infection, all of which is protected by a rootkit.
>
> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a thorough check for hijackware, including posting your hijackthis log
> to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_R...:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
> conjuction with some other utilities). HijackThis will NOT fix anything on
> its own, but it will help you to both identify and remove any
> hijackware/spyware with assistance from an expert. **Post your log to
> http://aumha.net/viewforum.php?f=30,
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://castlecops.com/forum67.html, or other appropriate forums for review
> by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>
> ==========================================
>
> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/de...spx?gprid=6527
>
> Support for Windows Update:
> http://support.microsoft.com/gp/wusupport
>
> For home users, no-charge support is available by calling 1-866-PCSAFETY in
> the United States and in Canada or by contacting your local Microsoft
> subsidiary. There is no-charge for support calls that are associated with
> security updates.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> Can't_Stand_Hackers wrote:
> > Hello! My computer got some malware recently, I ran my anti-virus
> > software,
> > got id of i (took several times to make sure the system was clean),
> > however
> > the problem persist. It's as if the virus has gone but left destruction
> > behind. My Automatic Updates is turned off ever time I switch on the
> > computer, even though reregistering it through Start--> Run helped first
> > time. I looked at other threads, went to download this AU Reset tool from
> > http://www.codeplex.com/aureset/Rele...eleaseId=13656
> >
> > How long does take to download??Because my installation got to
> > 'Installing
> > KB842773 for Windows XP AKA BITS 2.0....' and it's not progressing
> > anywhere
> > for a while now...Shoud Icancel and start again?
>
>

[PA Bear [MS MVP]]

Spybot is only one of many anti-spyware utilities used to detect & remove
issues (and provide real-time protection, depending on your settings).

HijackThis is not one of these utilities. Logs from this application and
others (e.g., Deckard's System Scanner) are used by experts in such matters
to diagnose problems.

I can assure you that if you have a Vundo-ZLOB-SDBot infection, all
protected by a rootkit, no one application or combination of applications
will do the job: You will need expert assistance to get the machine cleaned
up.


Can''t_Stand_Hackers wrote:
> Thanks for your reply! What's the difference between the programsyou
> suggested and Spybot? Because I downloaded it, it got rid of everything
> just
> fine. Only, as I wrote in my other post 'What IS this site?', some
> websites
> still appear and the updates are still disabled. How can that be if the
> malware has been destroyed?
>
> "PA Bear [MS MVP]" wrote:
>
>> Judging from similar posts here in the past month or so, the behavior may
>> be due to a Vundo-ZLOB-SDBot infection, all of which is protected by a
>> rootkit.
>>
>> Unexplained computer behavior may be caused by deceptive software
>> http://support.microsoft.com/kb/827315
>>
>> Run a thorough check for hijackware, including posting your hijackthis
>> log
>> to an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://wiki.castlecops.com/Malware_R...:_Introduction
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine2.blogspot.com/
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> When all else fails, HijackThis v2.0.2
>> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use
>> (in conjuction with some other utilities). HijackThis will NOT fix
>> anything on its own, but it will help you to both identify and remove any
>> hijackware/spyware with assistance from an expert. **Post your log to
>> http://aumha.net/viewforum.php?f=30,
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://castlecops.com/forum67.html, or other appropriate forums for
>> review
>> by an expert in such matters, not here.**
>>
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>>
>> ==========================================
>>
>> Start a free Windows Update support incident request:
>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>
>> Support for Windows Update:
>> http://support.microsoft.com/gp/wusupport
>>
>> For home users, no-charge support is available by calling 1-866-PCSAFETY
>> in
>> the United States and in Canada or by contacting your local Microsoft
>> subsidiary. There is no-charge for support calls that are associated
>> with
>> security updates.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>>
>> Can't_Stand_Hackers wrote:
>>> Hello! My computer got some malware recently, I ran my anti-virus
>>> software,
>>> got id of i (took several times to make sure the system was clean),
>>> however
>>> the problem persist. It's as if the virus has gone but left destruction
>>> behind. My Automatic Updates is turned off ever time I switch on the
>>> computer, even though reregistering it through Start--> Run helped first
>>> time. I looked at other threads, went to download this AU Reset tool
>>> from
>>> http://www.codeplex.com/aureset/Rele...eleaseId=13656
>>>
>>> How long does take to download??Because my installation got to
>>> 'Installing
>>> KB842773 for Windows XP AKA BITS 2.0....' and it's not progressing
>>> anywhere
>>> for a while now...Shoud Icancel and start again?

[Can''t_Stand_Hackers]

Thank you, I followed yur advice and posted a HIijackThis log in one of the
forums. Is there any way to prevent such horrible system invasions? I mean, I
am always so careful, delete suspicious attachments, don't open dodgy
websites....It's taking two days and an enormous amount of patience and
effort to clean up my computer, would ove to know if there's a setting or
some way to protect against future attacks..I have avast anti-virus updated,
and the firewal working...now got spybot too...

"PA Bear [MS MVP]" wrote:

> Spybot is only one of many anti-spyware utilities used to detect & remove
> issues (and provide real-time protection, depending on your settings).
>
> HijackThis is not one of these utilities. Logs from this application and
> others (e.g., Deckard's System Scanner) are used by experts in such matters
> to diagnose problems.
>
> I can assure you that if you have a Vundo-ZLOB-SDBot infection, all
> protected by a rootkit, no one application or combination of applications
> will do the job: You will need expert assistance to get the machine cleaned
> up.
>
>
> Can''t_Stand_Hackers wrote:
> > Thanks for your reply! What's the difference between the programsyou
> > suggested and Spybot? Because I downloaded it, it got rid of everything
> > just
> > fine. Only, as I wrote in my other post 'What IS this site?', some
> > websites
> > still appear and the updates are still disabled. How can that be if the
> > malware has been destroyed?
> >
> > "PA Bear [MS MVP]" wrote:
> >
> >> Judging from similar posts here in the past month or so, the behavior may
> >> be due to a Vundo-ZLOB-SDBot infection, all of which is protected by a
> >> rootkit.
> >>
> >> Unexplained computer behavior may be caused by deceptive software
> >> http://support.microsoft.com/kb/827315
> >>
> >> Run a thorough check for hijackware, including posting your hijackthis
> >> log
> >> to an appropriate forum.
> >>
> >> Checking for/Help with Hijackware
> >> http://aumha.org/a/parasite.htm
> >> http://aumha.org/a/quickfix.htm
> >> http://aumha.net/viewtopic.php?t=5878
> >> http://wiki.castlecops.com/Malware_R...:_Introduction
> >> http://mvps.org/winhelp2002/unwanted.htm
> >> http://inetexplorer.mvps.org/data/prevention.htm
> >> http://inetexplorer.mvps.org/tshoot.html
> >> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> >> http://defendingyourmachine2.blogspot.com/
> >> http://www.elephantboycomputers.com/...moving_Malware
> >>
> >> When all else fails, HijackThis v2.0.2
> >> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use
> >> (in conjuction with some other utilities). HijackThis will NOT fix
> >> anything on its own, but it will help you to both identify and remove any
> >> hijackware/spyware with assistance from an expert. **Post your log to
> >> http://aumha.net/viewforum.php?f=30,
> >> http://forums.spybot.info/forumdisplay.php?f=22,
> >> http://castlecops.com/forum67.html, or other appropriate forums for
> >> review
> >> by an expert in such matters, not here.**
> >>
> >> If the procedures look too complex - and there is no shame in admitting
> >> this isn't your cup of tea - take the machine to a local, reputable and
> >> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> >>
> >> ==========================================
> >>
> >> Start a free Windows Update support incident request:
> >> https://support.microsoft.com/oas/de...spx?gprid=6527
> >>
> >> Support for Windows Update:
> >> http://support.microsoft.com/gp/wusupport
> >>
> >> For home users, no-charge support is available by calling 1-866-PCSAFETY
> >> in
> >> the United States and in Canada or by contacting your local Microsoft
> >> subsidiary. There is no-charge for support calls that are associated
> >> with
> >> security updates.
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> >> AumHa VSOP & Admin http://aumha.net
> >> DTS-L http://dts-l.net/
> >>
> >>
> >> Can't_Stand_Hackers wrote:
> >>> Hello! My computer got some malware recently, I ran my anti-virus
> >>> software,
> >>> got id of i (took several times to make sure the system was clean),
> >>> however
> >>> the problem persist. It's as if the virus has gone but left destruction
> >>> behind. My Automatic Updates is turned off ever time I switch on the
> >>> computer, even though reregistering it through Start--> Run helped first
> >>> time. I looked at other threads, went to download this AU Reset tool
> >>> from
> >>> http://www.codeplex.com/aureset/Rele...eleaseId=13656
> >>>
> >>> How long does take to download??Because my installation got to
> >>> 'Installing
> >>> KB842773 for Windows XP AKA BITS 2.0....' and it's not progressing
> >>> anywhere
> >>> for a while now...Shoud Icancel and start again?
>
>

[PA Bear [MS MVP]]

I'm sure the expert who handles your forum thread will be able to suggest
ways to avoid such issues in the future.

That being said, no applications or utilities will be able to protect you
from yourself. Be exceedingly cautious when clicking on any links, anywhere
(including emails and chat), and when participating in P2P file sharing.

Protect Your PC!
http://www.microsoft.com/athome/secu...r/default.mspx

Security FAQ & Checklist
http://www.dslreports.com/faq/8463

P2P file sharing: Anticipate the risks before you download your first file:
http://www.microsoft.com/protect/you...lesharing.mspx
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/




Can''t_Stand_Hackers wrote:
> Thank you, I followed yur advice and posted a HIijackThis log in one of
> the
> forums. Is there any way to prevent such horrible system invasions? I
> mean,
> I am always so careful, delete suspicious attachments, don't open dodgy
> websites....It's taking two days and an enormous amount of patience and
> effort to clean up my computer, would ove to know if there's a setting or
> some way to protect against future attacks..I have avast anti-virus
> updated,
> and the firewal working...now got spybot too...
>
> "PA Bear [MS MVP]" wrote:
>
>> Spybot is only one of many anti-spyware utilities used to detect & remove
>> issues (and provide real-time protection, depending on your settings).
>>
>> HijackThis is not one of these utilities. Logs from this application and
>> others (e.g., Deckard's System Scanner) are used by experts in such
>> matters
>> to diagnose problems.
>>
>> I can assure you that if you have a Vundo-ZLOB-SDBot infection, all
>> protected by a rootkit, no one application or combination of applications
>> will do the job: You will need expert assistance to get the machine
>> cleaned
>> up.
>>
>>
>> Can''t_Stand_Hackers wrote:
>>> Thanks for your reply! What's the difference between the programsyou
>>> suggested and Spybot? Because I downloaded it, it got rid of everything
>>> just
>>> fine. Only, as I wrote in my other post 'What IS this site?', some
>>> websites
>>> still appear and the updates are still disabled. How can that be if the
>>> malware has been destroyed?
>>>
>>> "PA Bear [MS MVP]" wrote:
>>>
>>>> Judging from similar posts here in the past month or so, the behavior
>>>> may
>>>> be due to a Vundo-ZLOB-SDBot infection, all of which is protected by a
>>>> rootkit.
>>>>
>>>> Unexplained computer behavior may be caused by deceptive software
>>>> http://support.microsoft.com/kb/827315
>>>>
>>>> Run a thorough check for hijackware, including posting your hijackthis
>>>> log
>>>> to an appropriate forum.
>>>>
>>>> Checking for/Help with Hijackware
>>>> http://aumha.org/a/parasite.htm
>>>> http://aumha.org/a/quickfix.htm
>>>> http://aumha.net/viewtopic.php?t=5878
>>>> http://wiki.castlecops.com/Malware_R...:_Introduction
>>>> http://mvps.org/winhelp2002/unwanted.htm
>>>> http://inetexplorer.mvps.org/data/prevention.htm
>>>> http://inetexplorer.mvps.org/tshoot.html
>>>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>>>> http://defendingyourmachine2.blogspot.com/
>>>> http://www.elephantboycomputers.com/...moving_Malware
>>>>
>>>> When all else fails, HijackThis v2.0.2
>>>> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to
>>>> use
>>>> (in conjuction with some other utilities). HijackThis will NOT fix
>>>> anything on its own, but it will help you to both identify and remove
>>>> any
>>>> hijackware/spyware with assistance from an expert. **Post your log to
>>>> http://aumha.net/viewforum.php?f=30,
>>>> http://forums.spybot.info/forumdisplay.php?f=22,
>>>> http://castlecops.com/forum67.html, or other appropriate forums for
>>>> review
>>>> by an expert in such matters, not here.**
>>>>
>>>> If the procedures look too complex - and there is no shame in admitting
>>>> this isn't your cup of tea - take the machine to a local, reputable and
>>>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>>>>
>>>> ==========================================
>>>>
>>>> Start a free Windows Update support incident request:
>>>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>>>
>>>> Support for Windows Update:
>>>> http://support.microsoft.com/gp/wusupport
>>>>
>>>> For home users, no-charge support is available by calling
>>>> 1-866-PCSAFETY
>>>> in
>>>> the United States and in Canada or by contacting your local Microsoft
>>>> subsidiary. There is no-charge for support calls that are associated
>>>> with
>>>> security updates.
>>>> --
>>>> ~Robear Dyer (PA Bear)
>>>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>>>> AumHa VSOP & Admin http://aumha.net
>>>> DTS-L http://dts-l.net/
>>>>
>>>>
>>>> Can't_Stand_Hackers wrote:
>>>>> Hello! My computer got some malware recently, I ran my anti-virus
>>>>> software,
>>>>> got id of i (took several times to make sure the system was clean),
>>>>> however
>>>>> the problem persist. It's as if the virus has gone but left
>>>>> destruction
>>>>> behind. My Automatic Updates is turned off ever time I switch on the
>>>>> computer, even though reregistering it through Start--> Run helped
>>>>> first
>>>>> time. I looked at other threads, went to download this AU Reset tool
>>>>> from
>>>>> http://www.codeplex.com/aureset/Rele...eleaseId=13656
>>>>>
>>>>> How long does take to download??Because my installation got to
>>>>> 'Installing
>>>>> KB842773 for Windows XP AKA BITS 2.0....' and it's not progressing
>>>>> anywhere
>>>>> for a while now...Shoud Icancel and start again?