Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

download blocked on bleeping computer site am I infected?


  • Please log in to reply
15 replies to this topic

#1 sheen25

sheen25

  • Members
  • 82 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 08 February 2017 - 09:54 PM

Hi! I was just tying to download any updates for rkill,and adwrcleaner here but it seems that my computer wasn't able to. I'm pretty sure it wasn't anything related to my internet connection, then I started to run an outdated rkill then the report showed this:

 

Rkill 2.8.4 by Lawrence Abrams (Grinler)
Copyright 2008-2017 BleepingComputer.com
More Information about Rkill can be found at this link:
 
Program started at: 02/09/2017 03:57:18 AM in x86 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
 
Checking for Windows services to stop:
 
 * No malware services found to stop.
 
Checking for processes to terminate:
 
 * No malware processes found to kill.
 
Checking Registry for malware related settings:
 
 * No issues found in the Registry.
 
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
 
Performing miscellaneous checks:
 
 * No issues found.
 
Checking Windows Service Integrity: 
 
 * TBS [Missing Service]
 
Searching for Missing Digital Signatures: 
 
 * No issues found.
 
Checking HOSTS File: 
 
 * Cannot edit the HOSTS file.
 * Permissions could not be fixed. Use Hosts-perm.bat to fix permissions: http://www.bleepingcomputer.com/download/hosts-permbat/
 
Program finished at: 02/09/2017 03:58:11 AM
Execution time: 0 hours(s), 0 minute(s), and 53 seconds(s)
 
 
please help me fix this. Thank you.


BC AdBot (Login to Remove)

 


#2 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:10:39 PM

Posted 08 February 2017 - 10:14 PM

Hi sheen25,

 

Let's try and get you going again.

 

Go to this page and download the batch file.

 

Double-click the file to run it. Your network connectivity should be restored.

 

Then...

 

Open your command prompt, and enter the following command:

sc query tbs

Let me know the output.



#3 sheen25

sheen25
  • Topic Starter

  • Members
  • 82 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 09 February 2017 - 02:03 PM

Hi! I tried bur unfortunately I can't download anything from this site as it has the same effect on my attempts to download the updated rkill file.



#4 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:10:39 PM

Posted 09 February 2017 - 04:14 PM

Create a new text document and copy the code into it and save it.

@echo off
echo,Y|cacls "%WinDir%\system32\drivers\etc\hosts" /G everyone:f
attrib -s -h -r "%WinDir%\system32\drivers\etc\hosts"
echo The Permissions on the HOSTS file have been reset.
pause

Then rename that file, hosts.bat then double click it to run it.

 

Then run rKill again to fix the hosts file.

 

Open your command prompt, and enter the following command:

sc query tbs

Let me know the output.


Edited by TsVk!, 09 February 2017 - 04:54 PM.


#5 sheen25

sheen25
  • Topic Starter

  • Members
  • 82 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 15 February 2017 - 07:03 AM

Thanks a lot, will do this.



#6 sheen25

sheen25
  • Topic Starter

  • Members
  • 82 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 15 February 2017 - 08:15 AM

Hi! I did what you said and here ia the rkill scan after I ran the hosts.bat:

Rkill 2.8.4 by Lawrence Abrams (Grinler)
Copyright 2008-2017 BleepingComputer.com
More Information about Rkill can be found at this link:
 
Program started at: 02/15/2017 08:06:05 PM in x86 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
 
Checking for Windows services to stop:
 
 * No malware services found to stop.
 
Checking for processes to terminate:
 
 * No malware processes found to kill.
 
Checking Registry for malware related settings:
 
 * No issues found in the Registry.
 
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
 
Performing miscellaneous checks:
 
 * No issues found.
 
Checking Windows Service Integrity: 
 
 * TBS [Missing Service]
 
 
 
then I ran command prompt and the line and it said that the specifc service does not exist as an installed service.


#7 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:10:39 PM

Posted 15 February 2017 - 04:14 PM

You can download the Registry file (.reg) to restore the TBS service from the guide below.

 

http://www.sevenforums.com/tutorials/236709-services-restore-default-services-windows-7-a.html

 

Here's the direct link:

 

http://www.sevenforums.com/attachments/tutorials/217986d1340526780-services-restore-default-services-windows-7-a-tpm_base_services.reg

 

Once done, restart your computer, enter the same command again (sc query tbs) and post the output here.



#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,954 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:39 AM

Posted 15 February 2017 - 05:57 PM

In regards to your topic title.

Bleeping Computer's hosted programs for download are trustworthy, safe and malware-free. However, depending on the product, some anti-virus software and other security scanners may flag certain programs as a threat for a variety of reasons when that is not the case. In these instances the detection is a "false positive" and can be ignored.

Most of the well known specialized tools we use against malware are written by experts/Security Colleagues at various security forums like Bleeping Computer, TechSupport, GeeksToGo, Emsisoft and other similar sites so they can be trusted...this includes any program hosted by BC for download. Unfortunately, many of these tools (or their embedded files) are falsely detected by various anti-virus programs from time to time. This in turn sometimes results in an inaccurate site rating/warning of potentially dangerous software when that is not the case.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 sheen25

sheen25
  • Topic Starter

  • Members
  • 82 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 19 February 2017 - 09:25 PM

Thank you TsVk and quieman7 for the information and instructions. Will do this. 



#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,954 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:39 AM

Posted 20 February 2017 - 09:38 AM

TsVk! did all the work...I just answered a question.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#11 sheen25

sheen25
  • Topic Starter

  • Members
  • 82 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 28 February 2017 - 04:21 PM

Hello! I did what you instructed me to do and this is the result displayed in the command prompt:

 

wait... why can't I attach a screenshot of the file?



#12 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:10:39 PM

Posted 28 February 2017 - 04:26 PM

In some forums here we can't post images.

 

To copy and paste out of the command prompt box;

  • right click in the prompt window
  • click "Mark"
  • select the area you'd like to copy with your mouse, by clicking and dragging
  • press "Enter"
  • the text is now copied to your clipboard and can be pasted anywhere you like.

Edited by TsVk!, 28 February 2017 - 04:28 PM.


#13 sheen25

sheen25
  • Topic Starter

  • Members
  • 82 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 28 February 2017 - 04:26 PM

SERVICE_NAME: tbs

TYPE                               : 20 WIN43_SHARE_PROCESS

STATE                             : 1   STOPPED

WIN32_EXIT_CODE       :  1077 <0X435>

SERVICE_EXIT_CODE   :   0   <0X0>

CHECKPOINT                 :   0X0

WAIT_HINT                     :  0X0



#14 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:10:39 PM

Posted 28 February 2017 - 04:30 PM

Okay, that's good.

 

Can you download your updates now?



#15 sheen25

sheen25
  • Topic Starter

  • Members
  • 82 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 28 February 2017 - 04:57 PM

Yes! Thank you very much for your time and assistance!  :thumbup2:






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users