Defender gone from Vista

Hello Tony,

Consider going to the secu�ity portal

<http://www.microsoft.com/security/portal/>

and downloading the 32-bit definitions for Windows Defender to the desktop,
then
*right* click mpas-fe.exe and choose 'Run as
administrator'
to apply.


I hope this post is helpful.

Let us know how it works ºut.

Good luck


Ǝиçεl
-=-

"Tony Linguini" wrote:

> BTDTGTTS
> The files are actually GONE from program files/windows defender. It will not
> start manually or automagically.
> I believe the extortionware did that so defender could not remove it.
> This is a Dell laptop, no vista dvd included, just a stock recovery image,
> and all of my dvds here are 64bit. Lappie has 32.
> Thanks, Tony
>
> "KristleBawl" <> wrote in message
> news:...
> > Tony Linguini expressed an opinion:
> >> Thank you, tried that, download said " incorrect operating system" or
> >> some such which loosely translated meant that Defender is built into
> >> Vista.
> >> Tony
> >>
> > After further research, try this:
> >
> > You need to go to "services.msc". Type that in from Start > Run and hit
> > enter. Scroll down the list to the Windows Defender service, right click
> > on it and select properties. In there change the settings for it to start
> > automatically. You could also manually start the service at the same time.
> > That should fix the error.
> >
> > If that doesn't work, you can try a System Restore.
> >
> > --
> > KristleBawl
> > At this point, chocolate is a viable alternative.
> > Taglines by http://tagzilla.mozdev.org
>
> .
>

It ran, but there still is no defender.
Tony

"Ǝиçεl" <> wrote in message
news:4280F992-0666-420F-BD10-...
> Hello Tony,
>
> Consider going to the secu�ity portal
>
> <http://www.microsoft.com/security/portal/>
>
> and downloading the 32-bit definitions for Windows Defender to the
> desktop,
> then
> *right* click mpas-fe.exe and choose 'Run as
> administrator'
> to apply.
>
>
> I hope this post is helpful.
>
> Let us know how it works ºut.
>
> Good luck
>
>
> Ǝиçεl
> -=-
>
> "Tony Linguini" wrote:
>
>> BTDTGTTS
>> The files are actually GONE from program files/windows defender. It will
>> not
>> start manually or automagically.
>> I believe the extortionware did that so defender could not remove it.
>> This is a Dell laptop, no vista dvd included, just a stock recovery
>> image,
>> and all of my dvds here are 64bit. Lappie has 32.
>> Thanks, Tony
>>
>> "KristleBawl" <> wrote in message
>> news:...
>> > Tony Linguini expressed an opinion:
>> >> Thank you, tried that, download said " incorrect operating system" or
>> >> some such which loosely translated meant that Defender is built into
>> >> Vista.
>> >> Tony
>> >>
>> > After further research, try this:
>> >
>> > You need to go to "services.msc". Type that in from Start > Run and hit
>> > enter. Scroll down the list to the Windows Defender service, right
>> > click
>> > on it and select properties. In there change the settings for it to
>> > start
>> > automatically. You could also manually start the service at the same
>> > time.
>> > That should fix the error.
>> >
>> > If that doesn't work, you can try a System Restore.
>> >
>> > --
>> > KristleBawl
>> > At this point, chocolate is a viable alternative.
>> > Taglines by http://tagzilla.mozdev.org
>>
>> .
>>

On Mon, 30 Nov 2009 13:37:42 -0800
"Tony Linguini" <> wrote:

>
> My granddaughter's laptop got the eco (green) antivirus extortionware,
> and I manually removed it. It somehow removed the core files from
> Defender, and now it won't start or run. Suggestions? (besides a format
> please) Tony
>


Now just install Microsoft Security Essentials its designed to disable
Windows Defender anyway and provides real time protection for anti-virus,
rootkits, trojans, spyware.

--
Patrick in IL.

So��y to hear that, but unfortunately
I am out of answers. Sorry I couldn't help

Tony, as well as FromTheRafters suggestion

Reinstall Vista
-=-


"Tony Linguini" wrote:

> It ran, but there still is no defender.
> Tony
>
> "Ǝиçεl" <> wrote in message
> news:4280F992-0666-420F-BD10-...
> > Hello Tony,
> >
> > Consider going to the secu�ity portal
> >
> > <http://www.microsoft.com/security/portal/>
> >
> > and downloading the 32-bit definitions for Windows Defender to the
> > desktop,
> > then
> > *right* click mpas-fe.exe and choose 'Run as
> > administrator'
> > to apply.
> >
> >
> > I hope this post is helpful.
> >
> > Let us know how it works ºut.
> >
> > Good luck
> >
> >
> > Ǝиçεl
> > -=-
> >
> > "Tony Linguini" wrote:
> >
> >> BTDTGTTS
> >> The files are actually GONE from program files/windows defender. It will
> >> not
> >> start manually or automagically.
> >> I believe the extortionware did that so defender could not remove it.
> >> This is a Dell laptop, no vista dvd included, just a stock recovery
> >> image,
> >> and all of my dvds here are 64bit. Lappie has 32.
> >> Thanks, Tony
> >>
> >> "KristleBawl" <> wrote in message
> >> news:...
> >> > Tony Linguini expressed an opinion:
> >> >> Thank you, tried that, download said " incorrect operating system" or
> >> >> some such which loosely translated meant that Defender is built into
> >> >> Vista.
> >> >> Tony
> >> >>
> >> > After further research, try this:
> >> >
> >> > You need to go to "services.msc". Type that in from Start > Run and hit
> >> > enter. Scroll down the list to the Windows Defender service, right
> >> > click
> >> > on it and select properties. In there change the settings for it to
> >> > start
> >> > automatically. You could also manually start the service at the same
> >> > time.
> >> > That should fix the error.
> >> >
> >> > If that doesn't work, you can try a System Restore.
> >> >
> >> > --
> >> > KristleBawl
> >> > At this point, chocolate is a viable alternative.
> >> > Taglines by http://tagzilla.mozdev.org
> >>
> >> .
> >>

That worked fine. I was misinformed about the relationship between defender
and MSE.
I actually run MSE on my Windows 7 machine.
Thanks for everyone's input.
Tony

"Patrick Phillips" <> wrote in message
news:20091130202206.15e2021a@spooker...
> On Mon, 30 Nov 2009 13:37:42 -0800
> "Tony Linguini" <> wrote:
>
>>
>> My granddaughter's laptop got the eco (green) antivirus extortionware,
>> and I manually removed it. It somehow removed the core files from
>> Defender, and now it won't start or run. Suggestions? (besides a format
>> please) Tony
>>
>
>
> Now just install Microsoft Security Essentials its designed to disable
> Windows Defender anyway and provides real time protection for anti-virus,
> rootkits, trojans, spyware.
>
> --
> Patrick in IL.

MSE will remove / disable defender

"Michael Ober" <obermd.@.alum.mit.edu.nospam> wrote in message
news:td6dnXICQoTU_InWnZ2dnUVZ_o-...
> Actually the two work together.
>
> Mike.
>
> "DL" <> wrote in message
> news:...
>> Defender has been replaced by MS Security Essentials
>>
>> "Tony Linguini" <> wrote in message
>> news:...
>>> Thank you, tried that, download said " incorrect operating system" or
>>> some such which loosely translated meant that Defender is built into
>>> Vista.
>>> Tony
>>>
>>> "KristleBawl" <> wrote in message
>>> news:...
>>>> Tony Linguini expressed an opinion:
>>>>> My granddaughter's laptop got the eco (green) antivirus extortionware,
>>>>> and I manually removed it. It somehow removed the core files from
>>>>> Defender, and now it won't start or run. Suggestions? (besides a
>>>>> format please)
>>>>> Tony
>>>>
>>>> The first step is to try to reinstall Defender.
>>>>
>>>> http://www.microsoft.com/windows/pro...r/default.mspx
>>>>
>>>> These programs remove the rogues for you, and they are easy to update,
>>>> just like an anti virus program. I have the free versions installed and
>>>> use them regularly.
>>>>
>>>> Ad-Aware
>>>> http://www.lavasoft.com/?domain=lava...aware_free.php
>>>>
>>>> Malwarebytes
>>>> http://www.malwarebytes.org/mbam.php
>>>>
>>>> SuperAntiSpyware
>>>> http://www.superantispyware.com/superantispyware.html
>>>>
>>>> --
>>>> KristleBawl
>>>> He who adds not to his learning diminishes it. - The Talmud
>>>> Taglines by http://tagzilla.mozdev.org
>>>
>>
>>
>

Manual removal that involves removal of needed "Defender" files leads me
to believe reinstalling Vista, and then installing MSE would have been
the better choice. Anyway, glad you are happy with your results.

"Tony Linguini" <> wrote in message
news:210923E1-57AB-4039-8428-...
> That worked fine. I was misinformed about the relationship between
> defender and MSE.
> I actually run MSE on my Windows 7 machine.
> Thanks for everyone's input.
> Tony
>
> "Patrick Phillips" <> wrote in message
> news:20091130202206.15e2021a@spooker...
>> On Mon, 30 Nov 2009 13:37:42 -0800
>> "Tony Linguini" <> wrote:
>>
>>>
>>> My granddaughter's laptop got the eco (green) antivirus
>>> extortionware,
>>> and I manually removed it. It somehow removed the core files from
>>> Defender, and now it won't start or run. Suggestions? (besides a
>>> format
>>> please) Tony
>>>
>>
>>
>> Now just install Microsoft Security Essentials its designed to
>> disable
>> Windows Defender anyway and provides real time protection for
>> anti-virus,
>> rootkits, trojans, spyware.
>>
>> --
>> Patrick in IL.
>

In message <939F174B-5B8D-479D-9FDD-> "Tony
Linguini" <> was claimed to have wrote:

>My granddaughter's laptop got the eco (green) antivirus extortionware, and I
>manually removed it. It somehow removed the core files from Defender, and
>now it won't start or run. Suggestions? (besides a format please)

I think it's fairly obvious that the computer is not back to it's
original pre-infection state. How do you know that you removed all of
the malware that was installed, and that the machine is safe and can be
trusted at this point?

Once compromised, the only solution is to format and reinstall from
scratch, until that is done, you can never be certain that the machine
is yours, it may still be owned by the trojan software (although you'll
probably still be allowed to use the trojan's machine most of the time)

Well, a quick scan found 2, and a full scan found three, a new quick scan
found none, and a new full scan found none. Rebooting in between every scan.
While I know this is not gospel, it's good enough until the inevitable next
time.
Tony


"Dave Warren" <dave-> wrote in message
news:...
> In message <939F174B-5B8D-479D-9FDD-> "Tony
> Linguini" <> was claimed to have wrote:
>
>>My granddaughter's laptop got the eco (green) antivirus extortionware, and
>>I
>>manually removed it. It somehow removed the core files from Defender, and
>>now it won't start or run. Suggestions? (besides a format please)
>
> I think it's fairly obvious that the computer is not back to it's
> original pre-infection state. How do you know that you removed all of
> the malware that was installed, and that the machine is safe and can be
> trusted at this point?
>
> Once compromised, the only solution is to format and reinstall from
> scratch, until that is done, you can never be certain that the machine
> is yours, it may still be owned by the trojan software (although you'll
> probably still be allowed to use the trojan's machine most of the time)

If the system is not going to be formatted/reinstalled, then inform your
daughter that *anything* she does online with it may be transmitted to a
rogue web server. Her passwords, usernames, personal information either
stored on or sent from the system no longer belongs to her and her alone.
If she's willing to put with that, more power to her.

MowGreen
===============
*-343-* FDNY
Never Forgotten
===============

banthecheck.com
"Security updates should *never* have *non-security content* prechecked"



Tony Linguini wrote:

> Well, a quick scan found 2, and a full scan found three, a new quick
> scan found none, and a new full scan found none. Rebooting in between
> every scan. While I know this is not gospel, it's good enough until the
> inevitable next time.
> Tony
>
>
> "Dave Warren" <dave-> wrote in message
> news:...
>
>> In message <939F174B-5B8D-479D-9FDD-> "Tony
>> Linguini" <> was claimed to have wrote:
>>
>>> My granddaughter's laptop got the eco (green) antivirus
>>> extortionware, and I
>>> manually removed it. It somehow removed the core files from Defender,
>>> and
>>> now it won't start or run. Suggestions? (besides a format please)
>>
>>
>> I think it's fairly obvious that the computer is not back to it's
>> original pre-infection state. How do you know that you removed all of
>> the malware that was installed, and that the machine is safe and can be
>> trusted at this point?
>>
>> Once compromised, the only solution is to format and reinstall from
>> scratch, until that is done, you can never be certain that the machine
>> is yours, it may still be owned by the trojan software (although you'll
>> probably still be allowed to use the trojan's machine most of the time)
>
>