Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I believe I have the Google Redirect Virus...


  • This topic is locked This topic is locked
12 replies to this topic

#1 mityman50

mityman50

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:05:58 AM

Posted 08 June 2010 - 05:41 PM

Hello,

For the past two-ish weeks I've been dealing with what I think is the Google Redirect virus, on three separate computers. On one of my computers, every so often I'll click a link (only on one certain website, however) and a second Firefox window will open, which usually leads to Google or Yahoo (first it's results.google.com before it leads to one of those sites). On this computer, it happens once every eight or so times I click, but on any website. And I haven't used the third computer enough to know the exact details, but I've used it enough to know that it happens.

I Googled around and ended up here. It looks promising.

So far, on this computer, I've tried running Combofix (I know now I shouldn't have; I followed the directions on this site to the letter, but didn't really think before I acted, and of course did nothing with the log). Since then, I deleted ComboFix and the log it left. I'm back to a blank slate. Oh, and this computer is practically new (I reformatted it a few weeks ago, I'm half tempted to again because it's only used for internet and has nothing on it, but I'll try this first), so no extra programs on it.

So, I would love to get started fixing this computer. I've got all the time in the world; all attention is directed at this. Where do I start?

Thanks for reading.

Edited by Orange Blossom, 08 June 2010 - 06:04 PM.
Move to AII as no logs posted and prep. guide not followed. ~ OB Moved back at Blade's request. ~ OB


BC AdBot (Login to Remove)

 


#2 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,702 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:06:58 AM

Posted 08 June 2010 - 06:12 PM

Hello, and welcome.gif to the Malware Removal forum! My online alias is Blade Zephon, or Blade for short, and I will be assisting you with your malware issues!

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.

Before we begin cleaning your machine, I'd like to lay out some guidelines for us to follow while we are working together.
  • I will be assisting you with your malware issues. This may or may not resolve other problems you are having with your computer. If you are still having problems after your machine has been determined clean, I will be glad to direct you to the proper forum for assistance.
  • Even if things appear better, that does not mean we are finished. Please continue to follow my instructions until I give you the all clean. Absence of symptoms does not mean that all the malware has been removed. If a piece of the infection is left, it can regenerate and reinfect your machine.
  • Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
  • I ask that you please refrain from running tools other than those I suggest to you while I am cleaning up your computer. The reason for this is so I know what is going on with the machine at any time. If you act independently it will cause changes to your system that I will not be aware of, which will make the process of cleaning the machine a much slower and more difficult process. Additionally, some programs can interfere with others and hamper the recovery process.
  • Please perform all steps in the order received. If you are unsure or confused about any instructions I give you, you should ask me to clarify before doing anything. Additionally, if you run into any problems while carrying out instructions, you should STOP and reply back here explaining what happened.
  • After 5 days if a topic is not replied to we assume it has been abandoned and it is closed. If you need additional time, that is perfectly alright; you just need to let us know beforehand. smile.gif
***************************************************

We'll deal with each of your computers one at a time, starting with the computer you're posting this from. Once we've got one computer clean, we'll move on to the next one. Please be aware that the method used to clean one computer may not be successful on the others, so we'll need to treat each machine individually.

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

***************************************************

Please download GMER from one of the following locations and save it to your desktop:
  • Main Mirror
    This version will download a randomly named file (Recommended)
  • Zipped Mirror
    This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.
  • Disconnect from the Internet and close all running programs.
  • Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
  • Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
  • Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.


  • GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)
  • If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.
  • In the right panel, you will see several boxes that have been checked. Uncheck the following ...
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.log" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and copy/paste its contents in your nextreply.
  • Exit GMER and re-enable all active protection when done.
-- If you encounter any problems, try running GMER in Safe Mode.
**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries


~Blade

In your next reply, please include the following:
DDS.txt
Attach.txt
GMER.log

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#3 mityman50

mityman50
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:05:58 AM

Posted 08 June 2010 - 06:58 PM

Sorry, my internet was being ridiculous there for a minute. Moving on...

DDS.log:
****************************************************************************************************

DDS (Ver_10-03-17.01) - NTFSx86
Run by Mom at 18:18:31.12 on Tue 06/08/2010
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1919.1452 [GMT -5:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mom\Desktop\dds.scr

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\mom\applic~1\mozilla\firefox\profiles\z2nis53j.default\
FF - prefs.js: browser.startup.homepage - www.google.com

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

RUnknown szkg5;szkg5; [x]
RUnknown szkgfs;szkgfs; [x]
UnknownUnknown is3srv;is3srv; [x]

=============== Created Last 30 ================

2010-06-08 22:08:36 0 d-sha-r- C:\cmdcons
2010-06-08 22:07:55 256512 ----a-w- c:\windows\PEV.exe
2010-06-08 22:07:51 0 d-----w- C:\ComboFix
2010-06-08 22:00:55 80 ----a-w- c:\windows\system32\drivers\kgpfr2.cfg
2010-06-08 22:00:47 98816 ----a-w- c:\windows\sed.exe
2010-06-08 22:00:47 77312 ----a-w- c:\windows\MBR.exe
2010-06-08 22:00:47 161792 ----a-w- c:\windows\SWREG.exe
2010-06-08 21:44:11 744 ----a-w- c:\windows\system32\drivers\kgpcpy.cfg
2010-06-08 21:40:06 16384 ---ha-w- C:\SZKGFS.dat
2010-06-08 21:39:21 0 d-----w- c:\docume~1\alluse~1\applic~1\SITEguard
2010-06-08 21:38:53 0 d-----w- c:\program files\common files\iS3
2010-06-08 21:38:52 0 d-----w- c:\docume~1\alluse~1\applic~1\STOPzilla!
2010-06-08 21:26:54 0 d-----w- c:\windows\system32\wbem\Repository
2010-06-08 21:26:50 0 d-----w- c:\windows\system32\appmgmt
2010-06-08 21:26:40 0 d-----w- c:\docume~1\mom\applic~1\WeatherBug
2010-06-08 21:25:29 0 d-----w- c:\windows\system32\PreInstall
2010-06-08 21:25:28 0 d-----w- c:\windows\system32\Lang
2010-06-08 21:25:13 0 d-----w- c:\windows\system32\RTCOM
2010-06-08 21:25:09 0 d-----w- c:\program files\Realtek
2010-06-08 21:25:06 0 d-----w- c:\windows\system32\SoftwareDistribution
2010-05-30 05:52:29 0 d-----w- c:\docume~1\mom\applic~1\FinalMediaPlayer
2010-05-24 21:46:39 0 d-----w- c:\windows\system32\KB905474
2010-05-23 19:26:02 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-05-23 19:26:02 272128 ------w- c:\windows\system32\drivers\bthport.sys
2010-05-23 19:25:12 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-05-23 19:23:38 2189952 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2010-05-23 19:23:38 2146304 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-05-23 19:23:37 2024448 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-05-23 19:12:08 2560 ------w- c:\windows\system32\xpsp4res.dll
2010-05-23 19:10:36 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2010-05-23 19:10:34 0 d--h--w- c:\windows\$hf_mig$
2010-05-23 19:07:15 0 d-----w- c:\windows\pss
2010-05-23 19:07:03 13646 ----a-w- c:\windows\system32\wpa.bak
2010-05-23 19:03:58 940794 ----a-w- c:\windows\system32\LoopyMusic.wav
2010-05-23 19:03:58 146650 ----a-w- c:\windows\system32\BuzzingBee.wav
2010-05-23 19:00:21 140158 ----a-w- c:\windows\system32\nvapps.xml
2010-05-23 19:00:01 17525 ----a-w- c:\windows\system32\nvdisp.nvu
2010-05-23 19:00:01 0 d-----w- c:\windows\nview
2010-05-23 19:00:00 356352 ----a-w- c:\windows\system32\nvudisp.exe
2010-05-23 18:44:39 0 d-----w- c:\program files\Belarc
2010-05-23 18:40:10 0 d-----w- c:\program files\RALINK
2010-05-23 18:25:19 0 d-sh--w- c:\documents and settings\all users\DRM
2010-05-23 18:25:05 0 d--h--w- c:\program files\WindowsUpdate
2010-05-23 18:24:37 0 d-----w- c:\program files\common files\MSSoap
2010-05-23 18:23:27 0 d-----w- c:\program files\Online Services
2010-05-23 18:23:20 0 d-----w- c:\program files\MSN Gaming Zone
2010-05-23 18:22:53 0 d-----w- c:\program files\Windows NT
2010-05-23 13:16:49 0 d-----w- c:\program files\common files\ODBC
2010-05-23 13:16:47 0 d-----w- c:\program files\common files\SpeechEngines
2010-05-23 13:16:27 0 d-----r- c:\documents and settings\all users\Documents

==================== Find3M ====================

2010-05-23 18:57:43 315392 ----a-w- c:\windows\HideWin.exe
2010-05-23 18:40:25 21419 ----a-w- c:\windows\system32\drivers\AegisP.sys
2010-05-23 18:23:43 21640 ----a-w- c:\windows\system32\emptyregdb.dat

============= FINISH: 18:18:36.56 ===============

****************************************************************************************************

Gmer.log
****************************************************************************************************
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-06-08 18:45:59
Windows 5.1.2600 Service Pack 3
Running: w35ux15g.exe; Driver: C:\DOCUME~1\Mom\LOCALS~1\Temp\kfrdapoc.sys


---- Kernel code sections - GMER 1.0.15 ----

.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB9DD4360, 0x307F47, 0xE8000020]

---- EOF - GMER 1.0.15 ----

****************************************************************************************************

And the last is attached.

Attached Files


Edited by mityman50, 08 June 2010 - 06:59 PM.


#4 mityman50

mityman50
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:05:58 AM

Posted 08 June 2010 - 09:27 PM

Check out this link, someone on this forum might possibly have found a fix. Worth a look, right?

http://www.bleepingcomputer.com/forums/ind...p;#entry1792037

Believe me, i really do hate to do anything without your permission. I understand that you're sacrificing your time to help me and, trust me, I do appreciate it. But this was a simple change, and reversible if need be. Plus, it worked. Well, for now at least. I'm sure the virus is still hiding, but the redirects have stopped.

Edited by mityman50, 08 June 2010 - 09:38 PM.


#5 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,702 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:06:58 AM

Posted 09 June 2010 - 11:35 PM

Hello mityman50

QUOTE
Check out this link, someone on this forum might possibly have found a fix. Worth a look, right?

Router poisoning is one of the possible causes of receiving redirects. It is also a fairly rare cause currently. While it is something we would have eventually tried here, there are other more common causes that would be ruled out first. So. . . it saves us some time.

Please uninstall STOPzilla immediately. The program is dubious at best, and is widely considered to be rogue by the security community for a number of reasons.

After you've uninstalled STOPzilla, reboot the machine, then check to see how it's running and let me know how things are going.

~Blade

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#6 mityman50

mityman50
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:05:58 AM

Posted 10 June 2010 - 02:25 PM

Alright, STOPzilla is gone.

So far, everything is good. Since I changed the setting with the router, all redirects on all three computers have stopped. But the virus has to still be lurking, right?

#7 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,702 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:06:58 AM

Posted 10 June 2010 - 03:48 PM

Hi mityman50.

QUOTE
But the virus has to still be lurking, right?


Nope. . . one of the advantages (if you want to call it that) of router poisoning is that it affects every computer on the network. Most likely scenario is that ComboFix dealt with whatever malware poisoned your router. We'll run a scan to be sure though.

Let's do a comprehensive scan to check for remaining malware on the machine. Please be aware that this scan will take some time to run.

Please go to the Kaspersky website and perform an online antivirus scan.
  1. Read through the requirements and privacy statement and click on Accept button.
  2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  3. When the downloads have finished, click on Settings.
  4. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
      Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
  5. Click on My Computer under Scan.
  6. Once the scan is complete, it will display the results. Click on View Scan Report.
  7. You will see a list of infected items there. Click on Save Report As....
  8. Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
  9. Please post this log in your next reply .

~Blade


In your next reply, please include the following:
Kaspersky Online Scan log

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#8 mityman50

mityman50
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:05:58 AM

Posted 14 June 2010 - 12:03 AM

I'm sorry this is taking so long. I'm still here. I should be on the computer tomorrow (the fifteenth).

#9 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,702 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:06:58 AM

Posted 15 June 2010 - 09:03 AM

Okay. . . will keep an eye out.

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#10 mityman50

mityman50
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:05:58 AM

Posted 15 June 2010 - 06:24 PM

Well, the scan found nothing, but I included the report anyways.

Attached Files



#11 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,702 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:06:58 AM

Posted 15 June 2010 - 08:04 PM

okay. . . excellent! I think you're good to go then unless you've any other questions!

Your machine appears to be clean!


You might find the following links informative and/or helpful.I recommend you regularly visit the Windows Update Site!
  • Lots of Hacking/Trojans use the methods found (plugged by the updates) that have not been stopped by people not updating.
  • By updating your machine, you have one less headache!
  • Update ALL Critical updates and any other Windows updates for services/programs that you use.
  • If you wish, you can also use automatic updates. This is a good thing to have if you want to be up-to-date all the time, but can also be a bit of an annoyance due to its handling and the sizes of the updates. If you wish to turn on automatic updates then you will find here is a nice little article about turning on automatic updates.
  • Note that it will download them for you, but you still have to actually click install.
  • If you do not want to have automatic updates turned on, or are on dial-up, you can always download updates seperately at: http://windowsupdate.microsoft.com.
It is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities. You can check these by visiting Secunia Software Inspector and Calendar of Updates.

For a nice list of freeware programs in all categories, please have a look at this thread with freeware products that are regarded as useful by the users of this forum: Commonly Used Freeware Replacements.

Another recommendation, is to download HostsMan. It safeguards you with a regularly updated Hosts-file that blocks dangerous sites from opening. This adds another bit of safety while surfing the Internet. For installlation and setting up, follow these steps:
  1. Double-click the Downloaded installer and install the tool to a location of your choice
  2. Via the Startmenu, navigate to HostsMan and run the program.
    1. Click "Hosts" in the menu
    2. Click "Manage Updates" in the submenu
    3. Out of the three, select at least one of them (I have MVPS Host as my main one)
    4. Click "Add Update." After that you will only need to click on the following button to retrieve updates:
  3. Click the X to exit the program.
Finally, and definitely the MOST IMPORTANT step, click on the following tutorial and follow each step listed there:

Simple and easy ways to keep your computer safe and secure on the Internet

Glad I was able to help and if there any other problems related to your computer please feel free to post them in the appropriate forum. Though we help people with spyware and viruses here at BC, we also help people with other computer problems! Do not forget to tell your friends about us!

~Blade

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#12 mityman50

mityman50
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:05:58 AM

Posted 15 June 2010 - 10:48 PM

Wonderful! Thanks for all the help! You just can't find places on the internet that can walk you through fixes like this!

#13 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,702 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:06:58 AM

Posted 17 June 2010 - 01:45 AM

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. smile.gif

If you need this topic reopened, please send me a PM.
Please include the address of this thread in your request.
This applies only to the original topic starter.

Everyone else please start a new topic.

~Blade

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users