Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

xp anti-virus 2011


  • Please log in to reply
3 replies to this topic

#1 bunack

bunack

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:23 AM

Posted 24 April 2011 - 12:22 PM

http://www.bleepingcomputer.com/virus-removal/remove-win-7-internet-security-2011

after doing this in safe mode

wscntfy.exe is in my tray it tells me automatic updates are turned off, I go to ctrl panel to automatic updates, turn it on to download and install updates automatically, click apply, then ok.

the wscntfy.exe is still in my tray, is my wscntfy.exe infected?

here is my thread on annoyances.org:

http://www.annoyances.org/exec/forum/winxp/1303542753

EDIT: Member advised to post here at BC ~ Hamluis.


should i go through this?

http://support.microsoft.com/kb/315353

http://pcbutts1.com/downloads/tools/tools.htm

MicrosoftFixit50202.exe - tried installing this, had error saying Windows Installer is broken?????

-r

Edited by hamluis, 24 April 2011 - 01:19 PM.
Moved from XP to Am I Infected.


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,537 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:23 AM

Posted 05 May 2011 - 07:50 PM

Let's try to kill this file wscntfy.exe

As you have run MBAM..let's use MBAM's FileAssassin feature.

Open MBAM again.
Click the More Tools tab and then the Run Tool button
Now browse to the file(s) we want to remove using the drop down box next to Look in: at the top.
Locate the file(s), click Open.
You will be prompted with a message warning: This file will be permanently deleted. Are you sure you want to continue?. Click Yes.
If removal did not require a reboot, you will receive a message indicating the file was deleted successfully, however, I recommend you reboot anyway.

Caution: Be careful what you delete. FileAssassin is a powerful program, designed to move highly persistent files. Using it incorrectly could lead to disastrous problems with your operating system.


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 bunack

bunack
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:23 AM

Posted 05 May 2011 - 10:21 PM

it's located in my system 32 folder which the internet says is the default folder, how do i check if this is a microsft digitally signed file?

how do i restore this file if i do decide to delete it?

how do i get my windows updates in the future? (xp home premium sp2)

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,537 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:23 AM

Posted 06 May 2011 - 07:53 PM

Hello, do you have an XP install disk and is it with SP 1 or 2?
91% of the time it is malware so let's get a secomd opinion.
ThreatExpert

Lets' upload this file for a second opinion..

Please make sure that you can view all hidden files. Instructions on how to do this can be found here:
How to see hidden files in Windows

Please click this link-->Jotti

When the jotti page has finished loading, click the Browse button and navigate to the following file and click Submit.
<filepath>suspect.file

Please post back the results of the scan in your next post.

If Jotti is busy, try the same at Virustotal: http://www.virustotal.com/
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users