[Excal]

Ok, hopefully this will put u over the edge to being clean.


If you use Windows XP, Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also.


Go into C:\WINDOWS\system32 folder.

Look for a file that begins with W and the last 6 letters will be crtupd. It should have no icon and have been created on 08/30/2005 09:35 AM and be 401,408bytes in size (right clikc on it and go to properties to verify)

Let me know how it goes.

Thanks,



Excal

Edited by Excal, 05 September 2005 - 12:10 AM.

[Advertisements]

ok it exists wucrtupd.exe 392 KB (401,408 bytes) Application 8/30/2005 9:35 AM

Now what???

Edited by bhzendner, 05 September 2005 - 12:19 AM.

[bhzendner]

ok it exists wucrtupd.exe 392 KB (401,408 bytes) Application 8/30/2005 9:35 AM

Now what???

Edited by bhzendner, 05 September 2005 - 12:19 AM.

[Excal]

Delete it. Then reboot and let me know how everything is running.

I have to take off for a bit, not sure when I will be back, but wanted to let you know.



Excal

[bhzendner]

Ok will do,

Later when you get a chance could you summarize what I had and where it might have come from.

Thanks,

You deserve a break

I will check back in the morning

Thanks again so much...

[Excal]

Initially you had looktome infection. You also had qoologic infection and a few misc adware programs running.

Its hard to pin down exactly where you go it. You could have gotten it from surfing to a bad site, opening an email, or even downloading a program. Best way to prevent this in the future is adding some programs to your aresenl, keeping everything updated and being cautious.

I am assuming everything is running fine now, if not please let me know.

Great job, it appears your computer is clean

Ensure you rehide your “hidden files and folders” back to the way they were.

Now that your system is Malware Free, it is important to reset your system Restore. Click Here to learn how to.

I recommend that you Defrag your computer before setting your Restore points:

Go to start>all programs>accessories>system tools>Disk Defragmentor Make sure it set to the proper drive (default should be your main driver) and click on defragment


Might I suggest the following Free Spyware programs, if you don't already have them, for added security, you can download them at the following links. These programs work great for detection:

Ad-aware SE
Spybot S&D
Microsoft Anti-Spyware


If you are unhappy with your current antivirus and want to replace it or if you dont already have one, I suggest one of these free programs:
*Note - do not use more than one anti-virus program as it will more than likely cause conflict.

AVG
Avast
AntiVir


The following free programs are great for prevention:

SpywareBlaster 3.4
Spywareguard
IE/Spyad

A Firewall is a must! Here are 3 good free versions:
(do not have more than one firewall running on your system)

Sygate
Kerio
ZoneLabs

There are other options other than Internet Explorer for a browser, which some say have better security. Two of them are:

Firefox
Opera

If you decide to keep Internet Explorer, This site is a great source for tightening up security on It's settings.

Make sure that you keep your Operating System and IE updated with the latest Critical Security Updates from Microsoft...they usually come out once a month, on the 2nd Tuesday of each month.

Be sure and give the Temp folders a cleaning out now and then as well, Make sure after you clean your Temp files to empty out your Recycle bin as well.
For ease use the following program:

Cleanup
Run "Cleanup" and when it has finished, Reboot

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial and use the tools provided. Also read How I got Infected

[bhzendner]

So far so good this mornig.

Everything appears to be working fine.

I will start implmentation on your suggestions.

Thank you very much.

You earned your stripes on this one.

[Excal]

Sounds good, just keep me advised on any change.

Thanks,




Excal

[Excal]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.