Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Update > Questions about November windows updates

Reply
Thread Tools Display Modes

Questions about November windows updates

 
 
E. T.
Guest
Posts: n/a

 
      11-24-2006
This is the total mess: I've been for a while away of my p/c and now I
started all over again surfing.
I found lots of trojans when updated my Adaware (WIN32.TROJAN.AGENT
obj[8]=Regkey : clsid\{48e59293-9880-11cf-9754-00aa00c00908}
obj[9]=Regkey : interface\{48e59291-9880-11cf-9754-00aa00c00908}
obj[10]=Regkey : typelib\{48e59290-9880-11cf-9754-00aa00c00908}
WIN32.TROJANDOWNLOADER.ZLOB
obj[11]=Regkey : clsid\{fe38753a-44a3-11d1-b5b7-0000c09000c4})
and had lots of problems (kind of remote function of my vertical scrollbar
of my everything, notepad, wordpad, browsers etc and yesterday something
changed the display of my screen, it became narrow, could not fix it by
changing DPI, colour, acceleration or resolution and it was fixed later on
its own again).
Also Spybot found and erased lots of things, I have the full report now but
cannot locate if there were trojans in it.
When I tried to use hijackthis had two error messages of the program, I'm
afraid the log does not show the exact situation of my system.
I restored Windows to some earlier date, updated them, updated ZAP,
antivirus and all antispyware, performed safe mode scans, but I have
questions also about Microsoft November Windows updates:
I see Microsoft Security bulletin shows if I'm not mistaken necessary
updates for Windows XP the
066 (923980), 067 (922760), 068 (920213), 069 (923789), 070 (924270) and 071
(928088).
From them I have in my update history 923980, 924270 and 920213.
They also appear in my show updates (add/remove programs) menu.
I have also IE7 in both places (downloaded today).
But update 922760 (downloaded automatically on November 20th) that appears
in my update history does not show in show updates menu.
And update 923789 does not show anywhere.
Should I download them manually?
All updates of November were downloaded automatically through limited
account surfing except for IE7 which I downloaded through admin account in
Microsoft Update page.
This 923789 prevents remode code execution which seems to be my problem
often lately.
I tried to download it maually but it said the version of my Macromedia
Flash Player does not match it.
Also in my updates history shows twice 927978 (downloaded in 20 November and
in 24 November) which does not show in my show updates menu neither in
November security bulletin.
And in my show updates menu show 904942 and 914440 (updated today, while I
only downloaded IE7) which do not show in my updates history nor in security
bulletin. What are they?
I'll look later for October updates.
Thanks for comments and advise.
(For trojans I tried everything, even hijackthis seems to be unable to help.
I think I'll use repair of Windows cd-rom, and then surf only through
limited account).

P.S. This IE7 seems I can use it henceforward, while the previous one not
only I had forgotten it exists but also, every time I was looking at it, I
was feeling sad... You know, too many accidents and bad memories...
 
Reply With Quote
 
 
 
 
MowGreen [MVP]
Guest
Posts: n/a

 
      11-24-2006
E.T.,

Either get the system cleaned up or wipe the drive and reinstall the OS.
A repair install is not going to go well with malware being resident on
the system. Zlob being present means that the system is most likely
sending out spam and you may get booted off by your ISP.

At this point in time Spybot will only help in the final phase of
cleaning. It's useless against the malware that's controlling the system.

If you want to go the clean up route recommend that you post to a
reputable anti-malware forum after first reading the guidelines of the
forum of your choice :

http://www.bleepingcomputer.com/foru...lysis-f22.html
http://spywarewarrior.com/viewforum....1bac3189d22184
http://forums.spywareinfo.com/index.php?showforum=44
http://castlecops.com/f67-Hijackthis...ans_Oh_My.html
http://forum.aumha.net/viewforum.php?f=30


MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


E. T. wrote:

> This is the total mess: I've been for a while away of my p/c and now I
> started all over again surfing.
> I found lots of trojans when updated my Adaware (WIN32.TROJAN.AGENT
> obj[8]=Regkey : clsid\{48e59293-9880-11cf-9754-00aa00c00908}
> obj[9]=Regkey : interface\{48e59291-9880-11cf-9754-00aa00c00908}
> obj[10]=Regkey : typelib\{48e59290-9880-11cf-9754-00aa00c00908}
> WIN32.TROJANDOWNLOADER.ZLOB
> obj[11]=Regkey : clsid\{fe38753a-44a3-11d1-b5b7-0000c09000c4})
> and had lots of problems (kind of remote function of my vertical scrollbar
> of my everything, notepad, wordpad, browsers etc and yesterday something
> changed the display of my screen, it became narrow, could not fix it by
> changing DPI, colour, acceleration or resolution and it was fixed later on
> its own again).
> Also Spybot found and erased lots of things, I have the full report now but
> cannot locate if there were trojans in it.
> When I tried to use hijackthis had two error messages of the program, I'm
> afraid the log does not show the exact situation of my system.
> I restored Windows to some earlier date, updated them, updated ZAP,
> antivirus and all antispyware, performed safe mode scans, but I have
> questions also about Microsoft November Windows updates:
> I see Microsoft Security bulletin shows if I'm not mistaken necessary
> updates for Windows XP the
> 066 (923980), 067 (922760), 068 (920213), 069 (923789), 070 (924270) and 071
> (928088).
> From them I have in my update history 923980, 924270 and 920213.
> They also appear in my show updates (add/remove programs) menu.
> I have also IE7 in both places (downloaded today).
> But update 922760 (downloaded automatically on November 20th) that appears
> in my update history does not show in show updates menu.
> And update 923789 does not show anywhere.
> Should I download them manually?
> All updates of November were downloaded automatically through limited
> account surfing except for IE7 which I downloaded through admin account in
> Microsoft Update page.
> This 923789 prevents remode code execution which seems to be my problem
> often lately.
> I tried to download it maually but it said the version of my Macromedia
> Flash Player does not match it.
> Also in my updates history shows twice 927978 (downloaded in 20 November and
> in 24 November) which does not show in my show updates menu neither in
> November security bulletin.
> And in my show updates menu show 904942 and 914440 (updated today, while I
> only downloaded IE7) which do not show in my updates history nor in security
> bulletin. What are they?
> I'll look later for October updates.
> Thanks for comments and advise.
> (For trojans I tried everything, even hijackthis seems to be unable to help.
> I think I'll use repair of Windows cd-rom, and then surf only through
> limited account).
>
> P.S. This IE7 seems I can use it henceforward, while the previous one not
> only I had forgotten it exists but also, every time I was looking at it, I
> was feeling sad... You know, too many accidents and bad memories...

 
Reply With Quote
 
E. T.
Guest
Posts: n/a

 
      11-25-2006
Zlob was erased by Adaware.
Other things persist and now we're talking they move up and down my
notepads' and browsers' vertical scrollbar to provoke me.
I lost my previous p/c because of trojans and this new one I have it one
year, I bought it by credit card instalments and only last month was fully
paid.
I do not hope I can celan up, and I do not want to reinstall the OS, at
least for now.
I have not permanent ISP, I only use internet cards (20 hours, 10 hours and
so on...) bought in cigarette kiosks and similar...

Thanks anyway

P.S.: Ι checked all Windows updates from July till now and it seems they are
OK.

"E. T." wrote:

> This is the total mess: I've been for a while away of my p/c and now I
> started all over again surfing.
> I found lots of trojans when updated my Adaware (WIN32.TROJAN.AGENT
> obj[8]=Regkey : clsid\{48e59293-9880-11cf-9754-00aa00c00908}
> obj[9]=Regkey : interface\{48e59291-9880-11cf-9754-00aa00c00908}
> obj[10]=Regkey : typelib\{48e59290-9880-11cf-9754-00aa00c00908}
> WIN32.TROJANDOWNLOADER.ZLOB
> obj[11]=Regkey : clsid\{fe38753a-44a3-11d1-b5b7-0000c09000c4})
> and had lots of problems (kind of remote function of my vertical scrollbar
> of my everything, notepad, wordpad, browsers etc and yesterday something
> changed the display of my screen, it became narrow, could not fix it by
> changing DPI, colour, acceleration or resolution and it was fixed later on
> its own again).
> Also Spybot found and erased lots of things, I have the full report now but
> cannot locate if there were trojans in it.
> When I tried to use hijackthis had two error messages of the program, I'm
> afraid the log does not show the exact situation of my system.
> I restored Windows to some earlier date, updated them, updated ZAP,
> antivirus and all antispyware, performed safe mode scans, but I have
> questions also about Microsoft November Windows updates:
> I see Microsoft Security bulletin shows if I'm not mistaken necessary
> updates for Windows XP the
> 066 (923980), 067 (922760), 068 (920213), 069 (923789), 070 (924270) and 071
> (928088).
> From them I have in my update history 923980, 924270 and 920213.
> They also appear in my show updates (add/remove programs) menu.
> I have also IE7 in both places (downloaded today).
> But update 922760 (downloaded automatically on November 20th) that appears
> in my update history does not show in show updates menu.
> And update 923789 does not show anywhere.
> Should I download them manually?
> All updates of November were downloaded automatically through limited
> account surfing except for IE7 which I downloaded through admin account in
> Microsoft Update page.
> This 923789 prevents remode code execution which seems to be my problem
> often lately.
> I tried to download it maually but it said the version of my Macromedia
> Flash Player does not match it.
> Also in my updates history shows twice 927978 (downloaded in 20 November and
> in 24 November) which does not show in my show updates menu neither in
> November security bulletin.
> And in my show updates menu show 904942 and 914440 (updated today, while I
> only downloaded IE7) which do not show in my updates history nor in security
> bulletin. What are they?
> I'll look later for October updates.
> Thanks for comments and advise.
> (For trojans I tried everything, even hijackthis seems to be unable to help.
> I think I'll use repair of Windows cd-rom, and then surf only through
> limited account).
>
> P.S. This IE7 seems I can use it henceforward, while the previous one not
> only I had forgotten it exists but also, every time I was looking at it, I
> was feeling sad... You know, too many accidents and bad memories...

 
Reply With Quote
 
MowGreen [MVP]
Guest
Posts: n/a

 
      11-25-2006
> Zlob was erased by Adaware.

NO, AdAware may claim to have remove Zlob but I'll bet you all the beer
in Germany it's NOT removed.
> Zlob downloads and installs Spyware and Adware applications.

So the spy and adware may have all been cleaned by AdAware, BUT not the
trojan itself.

Either try the tool from F-secure -
http://www.f-secure.com/v-descs/zlob.shtml
or install a-squared FREE -
http://www.emsisoft.com/en/software/free/
to remove the TROJAN

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


E. T. wrote:

> Zlob was erased by Adaware.
> Other things persist and now we're talking they move up and down my
> notepads' and browsers' vertical scrollbar to provoke me.
> I lost my previous p/c because of trojans and this new one I have it one
> year, I bought it by credit card instalments and only last month was fully
> paid.
> I do not hope I can celan up, and I do not want to reinstall the OS, at
> least for now.
> I have not permanent ISP, I only use internet cards (20 hours, 10 hours and
> so on...) bought in cigarette kiosks and similar...
>
> Thanks anyway
>
> P.S.: Ι checked all Windows updates from July till now and it seems they are
> OK.
>
> "E. T." wrote:
>
>
>>This is the total mess: I've been for a while away of my p/c and now I
>>started all over again surfing.
>>I found lots of trojans when updated my Adaware (WIN32.TROJAN.AGENT
>>obj[8]=Regkey : clsid\{48e59293-9880-11cf-9754-00aa00c00908}
>>obj[9]=Regkey : interface\{48e59291-9880-11cf-9754-00aa00c00908}
>>obj[10]=Regkey : typelib\{48e59290-9880-11cf-9754-00aa00c00908}
>>WIN32.TROJANDOWNLOADER.ZLOB
>>obj[11]=Regkey : clsid\{fe38753a-44a3-11d1-b5b7-0000c09000c4})
>>and had lots of problems (kind of remote function of my vertical scrollbar
>>of my everything, notepad, wordpad, browsers etc and yesterday something
>>changed the display of my screen, it became narrow, could not fix it by
>>changing DPI, colour, acceleration or resolution and it was fixed later on
>>its own again).
>>Also Spybot found and erased lots of things, I have the full report now but
>>cannot locate if there were trojans in it.
>>When I tried to use hijackthis had two error messages of the program, I'm
>>afraid the log does not show the exact situation of my system.
>>I restored Windows to some earlier date, updated them, updated ZAP,
>>antivirus and all antispyware, performed safe mode scans, but I have
>>questions also about Microsoft November Windows updates:
>>I see Microsoft Security bulletin shows if I'm not mistaken necessary
>>updates for Windows XP the
>>066 (923980), 067 (922760), 068 (920213), 069 (923789), 070 (924270) and 071
>>(928088).
>>From them I have in my update history 923980, 924270 and 920213.
>>They also appear in my show updates (add/remove programs) menu.
>>I have also IE7 in both places (downloaded today).
>>But update 922760 (downloaded automatically on November 20th) that appears
>>in my update history does not show in show updates menu.
>>And update 923789 does not show anywhere.
>>Should I download them manually?
>>All updates of November were downloaded automatically through limited
>>account surfing except for IE7 which I downloaded through admin account in
>>Microsoft Update page.
>>This 923789 prevents remode code execution which seems to be my problem
>>often lately.
>>I tried to download it maually but it said the version of my Macromedia
>>Flash Player does not match it.
>>Also in my updates history shows twice 927978 (downloaded in 20 November and
>>in 24 November) which does not show in my show updates menu neither in
>>November security bulletin.
>>And in my show updates menu show 904942 and 914440 (updated today, while I
>>only downloaded IE7) which do not show in my updates history nor in security
>>bulletin. What are they?
>>I'll look later for October updates.
>>Thanks for comments and advise.
>>(For trojans I tried everything, even hijackthis seems to be unable to help.
>>I think I'll use repair of Windows cd-rom, and then surf only through
>>limited account).
>>
>>P.S. This IE7 seems I can use it henceforward, while the previous one not
>>only I had forgotten it exists but also, every time I was looking at it, I
>>was feeling sad... You know, too many accidents and bad memories...

 
Reply With Quote
 
Shenan Stanley
Guest
Posts: n/a

 
      11-25-2006
MowGreen [MVP] wrote:
> NO, AdAware may claim to have remove Zlob but I'll bet you all the
> beer in Germany it's NOT removed.


Damn.
Why cannot anyone ever make that bet when I know I could win?

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


 
Reply With Quote
 
E. T.
Guest
Posts: n/a

 
      11-26-2006
OK. I bet same I will not stop surfing until I die.
What d'ya think Shenan?
Decide if you're gonna pay the beer or drink it.

"Shenan Stanley" wrote:

> MowGreen [MVP] wrote:
> > NO, AdAware may claim to have remove Zlob but I'll bet you all the
> > beer in Germany it's NOT removed.

>
> Damn.
> Why cannot anyone ever make that bet when I know I could win?
>
> --
> Shenan Stanley
> MS-MVP
> --
> How To Ask Questions The Smart Way
> http://www.catb.org/~esr/faqs/smart-questions.html
>
>
>

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Problems with november updates Lucian Windows Update 8 11-26-2006 10:19 PM
Windows Update for November and Graphics problems littleccguy Windows Update 0 11-21-2006 04:06 PM
3 of 5 November Windows XP Updates fail to download Danny Windows Update 2 11-15-2006 05:25 PM
2 questions about Windows Updates mschlank Windows Update 0 08-25-2005 02:19 PM
Questions on the recording of checks for Windows Updates set for Automatic Downloads Dave Ranson Windows Update 6 04-20-2004 08:47 PM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59