WINDOWS DEFENDER

[Berg]

Windows XP
Upon turning on my desktop Microsoft Windows Defender was flooding my
screen. I could not close any of the windows and I could not open McAfee to
find out why these pop-ups were on my screen. I shut down and waited a
reasonable amount of time, turned on my computer again and then I didn't have
McAfee. When I try to open files I receive either
"C:/Windows/System32/rundll32.exe Application not found" or I'm asked which
program I'd like to use to open it. If I choose something I receive "The
item you selected is unavailable. It might have been moved,etc. etc. I have
been online to various microsoft customer support sites, forum, this support.
I'm exhausted trying to erradicate this issue. Can someone please help me!?
Thanks

 

[LD5SZRA]

Windows XP
Upon turning on my desktop Microsoft Windows Defender was flooding my
screen. I could not close any of the windows and I could not open McAfee to
find out why these pop-ups were on my screen. I shut down and waited a
reasonable amount of time, turned on my computer again and then I didn't have
McAfee. When I try to open files I receive either
"C:/Windows/System32/rundll32.exe Application not found" or I'm asked which
program I'd like to use to open it. If I choose something I receive "The
item you selected is unavailable. It might have been moved,etc. etc. I have
been online to various microsoft customer support sites, forum, this support.
I'm exhausted trying to erradicate this issue. Can someone please help me!?
Thanks

Please download a rescue CD from here using any healthy system available
to you because you need to create a boot-up CD and download definitions
updates on a USB flash drive to enable you to boot your system using
Knoppix (a derivative of Linux). If you have internet access then
clearly you don't need to download any definition updates because the CD
can use the online version securely.

I am amazed Pig-Bear hasn't told you yet to scan your system with ALL
available anti-virus programs so that you spend about 1 month fixing
your system My method will take you about an hour to scan your system.

hth


--
THE INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY
KIND. LD5SZRA DISCLAIMS ALL WARRANTIES, EITHER EXPRESSED OR
IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL LD5SZRA
OR ITS ASSOCIATES BE LIABLE FOR ANY DAMAGES WHATSOEVER
INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF
BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF LD5SZRA OR ITS
ASSOCIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR
LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL
DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright LD5SZRA 2010.

 

[LD5SZRA]

The link should be here:

<http://www.f-secure.com/en_EMEA/security/tools/rescue-cd/>

hth

Please download a rescue CD from here using any healthy system
available to you because you need to create a boot-up CD and download
definitions updates on a USB flash drive to enable you to boot your
system using Knoppix (a derivative of Linux). If you have internet
access then clearly you don't need to download any definition updates
because the CD can use the online version securely.

I am amazed Pig-Bear hasn't told you yet to scan your system with ALL
available anti-virus programs so that you spend about 1 month fixing
your system My method will take you about an hour to scan your system.

hth

--
THE INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY
KIND. LD5SZRA DISCLAIMS ALL WARRANTIES, EITHER EXPRESSED OR
IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL LD5SZRA
OR ITS ASSOCIATES BE LIABLE FOR ANY DAMAGES WHATSOEVER
INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF
BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF LD5SZRA OR ITS
ASSOCIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR
LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL
DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright LD5SZRA 2010.

 

[PA Bear [MS MVP]]

Had you ever installed the real Windows Defender (vs. the rogue "Windows
Defender 2010" or "PC Defender (2010)" that's infected your computer, no
thanks to that McAfee application)?

NB: Do NOT run a search for "Windows Defender 2010" and/or click on just any
result link that claims to be able to remove it!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

 

[Twayne]

GIGO: Pure junk and useless advice.

In
This person has been hit with malware and needs to react accordingly using a
reputable, updated AV and at least three spyware scanning programs. If he
needs help with those, he can simply ask here and hope you don't respond to
him if he can't resist reading you.

Please download a rescue CD from here using any healthy

"Here"? Where is "here"? Oh, I see; THERE, eh? Maroon!

system available to you because you need to create a
boot-up CD and download definitions updates on a USB flash
drive to enable you to boot your system using Knoppix (a
derivative of Linux). If you have internet access then
clearly you don't need to download any definition updates
because the CD can use the online version securely.

No, that's not likely to be the solution, and definitely is NOT the first
thing that needs to be done. Also there is likely no need to create startup
disks; there is likely one that was provided with the computer when it was
bought.

I am amazed Pig-Bear hasn't told you yet to scan your

pot - kettle

system with ALL available anti-virus programs so that you
spend about 1 month fixing your system My method will take
you about an hour to scan your system.

Yeah, an hour to "scan" and days to finish and clean up the mess. Assuming
"here" can be located of course.

HTH,

Twayne`

 

[Twayne]

In

The link should be here:

<http://www.f-secure.com/en_EMEA/security/tools/rescue-cd/>

"The link"? What link?
And what good does it do to backup an INFECTED OS? It's a useless effort at
this point unless you've thought of some clever way to clean it.

HTH,

Twayne`