error 1058

Hi,

I am unable to get widows automatic updates to stay enabled. When I attempt
to enable it I get the error 1058 message.

Any help please?

I use Winows XP.

Maragret

Hello Margaret,

1058 = vundo = SUPERAntiSpyware

See if this sugesstion can help you:

<http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?&query=1058&lang=en&cr=US&guid=&sloc=e n-us&dg=microsoft.public.windowsupdate&p=1&tid=57bde f89-a8ae-48ae-a09a-11f6d4ff130b&mid=57bdef89-a8ae-48ae-a09a-11f6d4ff130b>

Come back and let everyone here know the results.

Good luck


Ǝиçεl
-=-
"Margaret" wrote:

> Hi,
>
> I am unable to get widows automatic updates to stay enabled. When I attempt
> to enable it I get the error 1058 message.
>
> Any help please?
>
> I use Winows XP.
>
> Maragret

Thanks Engel - I'll try that now.

Maragret

"Engel" wrote:

> Hello Margaret,
>
> 1058 = vundo = SUPERAntiSpyware
>
> See if this sugesstion can help you:
>
> <http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?&query=1058&lang=en&cr=US&guid=&sloc=e n-us&dg=microsoft.public.windowsupdate&p=1&tid=57bde f89-a8ae-48ae-a09a-11f6d4ff130b&mid=57bdef89-a8ae-48ae-a09a-11f6d4ff130b>
>
> Come back and let everyone here know the results.
>
> Good luck
>
>
> Ǝиçεl
> -=-
> "Margaret" wrote:
>
> > Hi,
> >
> > I am unable to get widows automatic updates to stay enabled. When I attempt
> > to enable it I get the error 1058 message.
> >
> > Any help please?
> >
> > I use Winows XP.
> >
> > Maragret

Hi,

No luck Engel. My computer was scanned but two items could not be removed.
They are Trojan:win32/Vundo.gen!aa and Trojan:win32/Vundo.gen.c

I am also now getting the following message on startup "The specified modual
could not be found C:\windows\system32\hyoyeuxa.dll.

I am using Windows XP.

Regards,


Margaret

"Engel" wrote:

> Hello Margaret,
>
> 1058 = vundo = SUPERAntiSpyware
>
> See if this sugesstion can help you:
>
> <http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?&query=1058&lang=en&cr=US&guid=&sloc=e n-us&dg=microsoft.public.windowsupdate&p=1&tid=57bde f89-a8ae-48ae-a09a-11f6d4ff130b&mid=57bdef89-a8ae-48ae-a09a-11f6d4ff130b>
>
> Come back and let everyone here know the results.
>
> Good luck
>
>
> Ǝиçεl
> -=-
> "Margaret" wrote:
>
> > Hi,
> >
> > I am unable to get widows automatic updates to stay enabled. When I attempt
> > to enable it I get the error 1058 message.
> >
> > Any help please?
> >
> > I use Winows XP.
> >
> > Maragret

Hi Margaret,

Download Ccleaner and run in safe mode
<http://www.ccleaner.com>
Note, uncheck Yahoos Toolbar

Download the basic version via
<http://www.ccleaner.com/download/builds.aspx>
The basic version does not contain the disgusted Toolbar

Ccleaner
It removes unused and temporary files from your system - allowing Windows to
run faster, more efficiently and giving you more hard disk space.

The best part is that it's fast! (normally taking less than a second to run)
and Free.

Uncheck:

In the INTERNET EXPLORER:
Last Download Location
Autocomplete Form History

In the WINDOWS EXPLORER:
Recent Documents

In the SYSTEM:
Clipboard
Memory Dumps
Windows Log Files
Start Menu Shortcuts
Desktop Shortcuts

In the Utilities category, uncheck WindowsDefender. Having this checked
removes the history of when the last scan was run.

DO NOT USE ANY Advanced cleaning options. DO NOT TOUCH THE REGISTRY OR
TOOLS. At least not for now (bette� if never).
And remove all temporarily junk.
-=-

Re-trying the operation with SUPERAntiSpyware in safe mode (F-8) is what I
would try.

How to boot to Safe Mode -
<http://www.bleepingcomputer.com/tutorials/tutorial61.html#winxo>

Support Forum: <http://forums.superantispyware.com/>

Good luck this time ;-)
-=-

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

**Post your logs to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
=====================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Margaret wrote:
> Hi,
>
> No luck Engel. My computer was scanned but two items could not be removed.
> They are Trojan:win32/Vundo.gen!aa and Trojan:win32/Vundo.gen.c
>
> I am also now getting the following message on startup "The specified
> modual
> could not be found C:\windows\system32\hyoyeuxa.dll.
>
> I am using Windows XP.
>
> Regards,
>
>
> Margaret
>
> "Engel" wrote:
>
>> Hello Margaret,
>>
>> 1058 = vundo = SUPERAntiSpyware
>>
>> See if this sugesstion can help you:
>>
>> <http://www.microsoft.com/windowsxp/expertzone/newsgroups/reader.mspx?&query=1058&lang=en&cr=US&guid=&sloc=e n-us&dg=microsoft.public.windowsupdate&p=1&tid=57bde f89-a8ae-48ae-a09a-11f6d4ff130b&mid=57bdef89-a8ae-48ae-a09a-11f6d4ff130b>
>>
>> Come back and let everyone here know the results.
>>
>> Good luck
>>
>>
>> Ǝиçεl
>> -=-
>> "Margaret" wrote:
>>
>>> Hi,
>>>
>>> I am unable to get widows automatic updates to stay enabled. When I
>>> attempt to enable it I get the error 1058 message.
>>>
>>> Any help please?
>>>
>>> I use Winows XP.
>>>
>>> Maragret

Hi Engel

Sorry for the delay been trying what you suggested and other things.

The situation is now as follows.

The red cross in the bottom right hand side of the screen telling me my
computer is at risk has now gone.

I can get the Automatic Updates to stay enabled and also get through to the
Windows Updates site, which I couldn't do before.

I get as far as choosing whether I want "Express" or "Custom" but no matter
which one I chose I get :- [Error number: 0x800704DD]
"The website has encountered a problem and cannot display the page you are
trying to view. The options provided below might help you solve the problem.
For self-help options". When i follow the self help solutions I get as far as

"Click Start, click Run, type Regedit, and then click OK. Expand the
following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\Cu rrent
Version\Winlogon\Notify\SensLogn" However, when I get to the "Notify" part of
that there is no "Senslogn". ?

Thanks for your help to date.

Margaret




Frequently Asked Questions

Find Solutions

Windows Update Newsgroup



"Engel" wrote:

> Hi Margaret,
>
> Download Ccleaner and run in safe mode
> <http://www.ccleaner.com>
> Note, uncheck Yahoos Toolbar
>
> Download the basic version via
> <http://www.ccleaner.com/download/builds.aspx>
> The basic version does not contain the disgusted Toolbar
>
> Ccleaner
> It removes unused and temporary files from your system - allowing Windows to
> run faster, more efficiently and giving you more hard disk space.
>
> The best part is that it's fast! (normally taking less than a second to run)
> and Free.
>
> Uncheck:
>
> In the INTERNET EXPLORER:
> Last Download Location
> Autocomplete Form History
>
> In the WINDOWS EXPLORER:
> Recent Documents
>
> In the SYSTEM:
> Clipboard
> Memory Dumps
> Windows Log Files
> Start Menu Shortcuts
> Desktop Shortcuts
>
> In the Utilities category, uncheck WindowsDefender. Having this checked
> removes the history of when the last scan was run.
>
> DO NOT USE ANY Advanced cleaning options. DO NOT TOUCH THE REGISTRY OR
> TOOLS. At least not for now (bette� if never).
> And remove all temporarily junk.
> -=-
>
> Re-trying the operation with SUPERAntiSpyware in safe mode (F-8) is what I
> would try.
>
> How to boot to Safe Mode -
> <http://www.bleepingcomputer.com/tutorials/tutorial61.html#winxo>
>
> Support Forum: <http://forums.superantispyware.com/>
>
> Good luck this time ;-)
> -=-
>

Hi,

The situation is now as follows.

The red cross in the bottom right hand side of the screen telling me my
computer is at risk has now gone.

I can get the Automatic Updates to stay enabled and also get through to the
Windows Updates site, which I couldn't do before.

I get as far as choosing whether I want "Express" or "Custom" but no matter
which one I chose I get :- [Error number: 0x800704DD]
"The website has encountered a problem and cannot display the page you are
trying to view. The options provided below might help you solve the problem.
For self-help options". When i follow the self help solutions I get as far as

"Click Start, click Run, type Regedit, and then click OK. Expand the
following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\Cu rrent
Version\Winlogon\Notify\SensLogn" However, when I get to the "Notify" part of
that there is no "Senslogn".

Thank you for your help to date.

Margaret

I include a recent log:-



Avira AntiVir Personal
Report file date: 30 January 2009 11:21

Scanning for 1301540 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: JEFF

Version information:
BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 09:21:26
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 12:30:36
ANTIVIR1.VDF : 7.1.1.113 2817536 Bytes 14/01/2009 09:10:02
ANTIVIR2.VDF : 7.1.1.172 958464 Bytes 23/01/2009 09:10:08
ANTIVIR3.VDF : 7.1.1.204 415744 Bytes 30/01/2009 09:10:10
Engineversion : 8.2.0.60
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 11:05:56
AESCRIPT.DLL : 8.1.1.32 340347 Bytes 30/01/2009 09:10:21
AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 16:06:41
AERDL.DLL : 8.1.1.3 438645 Bytes 04/11/2008 14:58:38
AEPACK.DLL : 8.1.3.5 393588 Bytes 30/01/2009 09:10:20
AEOFFICE.DLL : 8.1.0.33 196987 Bytes 30/01/2009 09:10:19
AEHEUR.DLL : 8.1.0.86 1552759 Bytes 30/01/2009 09:10:17
AEHELP.DLL : 8.1.2.0 119159 Bytes 30/01/2009 09:10:13
AEGEN.DLL : 8.1.1.10 323957 Bytes 30/01/2009 09:10:13
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 11:05:56
AECORE.DLL : 8.1.5.2 172405 Bytes 30/01/2009 09:10:11
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 11:05:56
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:01
AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 13:02:15
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:37

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir
personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:, F:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: 30 January 2009 11:21

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'searchfilterhost.exe' - '1' Module(s) have been scanned
Scan process 'searchprotocolhost.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avgtray.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned
Scan process 'CLSched.exe' - '1' Module(s) have been scanned
Scan process 'X10nets.exe' - '1' Module(s) have been scanned
Scan process 'searchindexer.exe' - '1' Module(s) have been scanned
Scan process 'tgsrvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'sprtsvc.exe' - '1' Module(s) have been scanned
Scan process 'RichVideo.exe' - '1' Module(s) have been scanned
Scan process 'HPZipm12.exe' - '1' Module(s) have been scanned
Scan process 'avgrsx.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'DTSRVC.exe' - '1' Module(s) have been scanned
Scan process 'CLMLServer.exe' - '1' Module(s) have been scanned
Scan process 'CTSVCCDA.EXE' - '1' Module(s) have been scanned
Scan process 'CLCapSvc.exe' - '1' Module(s) have been scanned
Scan process 'avgwdsvc.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'ACService.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
43 processes with 43 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Master boot sector HD2
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.
Master boot sector HD3
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.
Master boot sector HD4
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Boot sector 'F:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '53' files ).


Starting the file scan:

Begin scan in 'C:\' <BOOT>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\System Volume
Information\_restore{C50D2AC3-6E23-4FA4-A51A-91F7F80D3C67}\RP48\A0005513.dll
[WARNING] The file could not be opened!
C:\System Volume
Information\_restore{C50D2AC3-6E23-4FA4-A51A-91F7F80D3C67}\RP48\A0005516.dll
[WARNING] The file could not be opened!
Begin scan in 'D:\' <RECOVER>
Begin scan in 'F:\'
Search path F:\ could not be opened!
System error [3]: The system cannot find the path specified.


End of the scan: 30 January 2009 12:23
Used time: 1:01:47 Hour(s)

The scan has been done completely.

10556 Scanning directories
379587 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
4 Files cannot be scanned
379583 Files not concerned
8948 Archives were scanned
7 Warnings
0 Notes



"PA Bear [MS MVP]" wrote:

> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/ma...e/default.mspx
>
> 2. Run this online scan (in safe mode w/networking, if need be):
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 3. Run a /thorough/ check for hijackware, including posting the requested
> logs in an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> **Post your logs to
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
> by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> =====================
> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/de...spx?gprid=6527
>
> Support for Windows Update:
> http://support.microsoft.com/gp/wusupport
>
> For home users, no-charge support is available by calling 1-866-PCSAFETY in
> the United States and in Canada or by contacting your local Microsoft
> subsidiary. There is no-charge for support calls that are associated with
> security updates.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>

The fact that your AV didn't find anything is NOT conclusive. The machine
remains infected, Margaret, and you have more work to do. See Steps #1, #2,
and #3 in my previous reply.
--
~PA Bear

Margaret wrote:
> The situation is now as follows.
>
> The red cross in the bottom right hand side of the screen telling me my
> computer is at risk has now gone.
>
> I can get the Automatic Updates to stay enabled and also get through to
> the
> Windows Updates site, which I couldn't do before.
>
> I get as far as choosing whether I want "Express" or "Custom" but no
> matter
> which one I chose I get :- [Error number: 0x800704DD]
> "The website has encountered a problem and cannot display the page you
> are
> trying to view. The options provided below might help you solve the
> problem.
> For self-help options". When i follow the self help solutions I get as far
> as
>
> "Click Start, click Run, type Regedit, and then click OK. Expand the
> following registry subkey:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\Cu rrent
> Version\Winlogon\Notify\SensLogn" However, when I get to the "Notify" part
> of that there is no "Senslogn".
>
> Thank you for your help to date.
>
> Margaret
>
> I include a recent log:-
>
> Avira AntiVir Personal
> Report file date: 30 January 2009 11:21
<snip>
>
> "PA Bear [MS MVP]" wrote:
>
>> 1. See if you can download/run the MSRT manually:
>> http://www.microsoft.com/security/ma...e/default.mspx
>>
>> 2. Run this online scan (in safe mode w/networking, if need be):
>> http://onecare.live.com/site/en-us/center/howsafe.htm
>>
>> 3. Run a /thorough/ check for hijackware, including posting the requested
>> logs in an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine2.blogspot.com/
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> **Post your logs to
>> http://spywarehammer.com/simplemachi...php?board=10.0,
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://aumha.net/viewforum.php?f=30, or another appropriate forum for
>> review by an expert in such matters, not here.**
>>
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>> =====================
>> Start a free Windows Update support incident request:
>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>
>> Support for Windows Update:
>> http://support.microsoft.com/gp/wusupport
>>
>> For home users, no-charge support is available by calling 1-866-PCSAFETY
>> in
>> the United States and in Canada or by contacting your local Microsoft
>> subsidiary. There is no-charge for support calls that are associated
>> with
>> security updates.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/

Many thanks for your help.

I decided to go back to factory settings this morning and although it is
time consuming it has solved the problem - I hope!

Thanks again,

Margaret

"PA Bear [MS MVP]" wrote:

> The fact that your AV didn't find anything is NOT conclusive. The machine
> remains infected, Margaret, and you have more work to do. See Steps #1, #2,
> and #3 in my previous reply.
> --
> ~PA Bear
>
> Margaret wrote:
> > The situation is now as follows.
> >
> > The red cross in the bottom right hand side of the screen telling me my
> > computer is at risk has now gone.
> >
> > I can get the Automatic Updates to stay enabled and also get through to
> > the
> > Windows Updates site, which I couldn't do before.
> >
> > I get as far as choosing whether I want "Express" or "Custom" but no
> > matter
> > which one I chose I get :- [Error number: 0x800704DD]
> > "The website has encountered a problem and cannot display the page you
> > are
> > trying to view. The options provided below might help you solve the
> > problem.
> > For self-help options". When i follow the self help solutions I get as far
> > as
> >
> > "Click Start, click Run, type Regedit, and then click OK. Expand the
> > following registry subkey:
> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\Cu rrent
> > Version\Winlogon\Notify\SensLogn" However, when I get to the "Notify" part
> > of that there is no "Senslogn".
> >
> > Thank you for your help to date.
> >
> > Margaret
> >
> > I include a recent log:-
> >
> > Avira AntiVir Personal
> > Report file date: 30 January 2009 11:21
> <snip>
> >
> > "PA Bear [MS MVP]" wrote:
> >
> >> 1. See if you can download/run the MSRT manually:
> >> http://www.microsoft.com/security/ma...e/default.mspx
> >>
> >> 2. Run this online scan (in safe mode w/networking, if need be):
> >> http://onecare.live.com/site/en-us/center/howsafe.htm
> >>
> >> 3. Run a /thorough/ check for hijackware, including posting the requested
> >> logs in an appropriate forum.
> >>
> >> Checking for/Help with Hijackware
> >> http://aumha.org/a/parasite.htm
> >> http://aumha.org/a/quickfix.htm
> >> http://aumha.net/viewtopic.php?t=5878
> >> http://mvps.org/winhelp2002/unwanted.htm
> >> http://inetexplorer.mvps.org/data/prevention.htm
> >> http://inetexplorer.mvps.org/tshoot.html
> >> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> >> http://defendingyourmachine2.blogspot.com/
> >> http://www.elephantboycomputers.com/...moving_Malware
> >>
> >> **Post your logs to
> >> http://spywarehammer.com/simplemachi...php?board=10.0,
> >> http://forums.spybot.info/forumdisplay.php?f=22,
> >> http://aumha.net/viewforum.php?f=30, or another appropriate forum for
> >> review by an expert in such matters, not here.**
> >>
> >> If the procedures look too complex - and there is no shame in admitting
> >> this isn't your cup of tea - take the machine to a local, reputable and
> >> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> >> =====================
> >> Start a free Windows Update support incident request:
> >> https://support.microsoft.com/oas/de...spx?gprid=6527
> >>
> >> Support for Windows Update:
> >> http://support.microsoft.com/gp/wusupport
> >>
> >> For home users, no-charge support is available by calling 1-866-PCSAFETY
> >> in
> >> the United States and in Canada or by contacting your local Microsoft
> >> subsidiary. There is no-charge for support calls that are associated
> >> with
> >> security updates.
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> >> AumHa VSOP & Admin http://aumha.net
> >> DTS-L http://dts-l.net/
>
>