Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - NoWhereMan

Pages: [1]
1
Assuming there is no malware involved, This almost sounds like the VLC setup / install was performed without Administrator privileges.
Try Uninstalling VLC and download a new copy from
Official page for VLC media player, the Open Source video framework!
http://www.videolan.org/vlc/download-windows.html
(Note: you may have to temporarily disable your virus protection AFTER you completed the download.)

Right-Click  the vlc-2.1.0-win32.exe Run as Administrator
Re-enable Virus protection after installation completes.
hth
NoWhereMan

2
This error comes from the [ my words .NET Framework Virus] ..
The article is for XP but .Net is on all Windows OSs in/at various levels.
hth
NoWhereMan
=================================================
From MS site
Quote
This problem occurs because the signature verification fails.
If you receive error ā€œ0x800B010Eā€, the error occurs because the URL cache on the destination computer does not contain an up to date certificate revocation list (CRL) The error come from the  for the signature that is used to sign the update.
-
http://answers.microsoft.com/en-us/windows/forum/windows_xp-windows_update/tried-to-install-windows-xp-net-framework-4/e6f2ca32-7e66-45c2-ae05-f317f1fb44e3
- Related -
.NET Framework 4 Update Error: "Generic Trust Failure" (0x800B010B)

http://support.microsoft.com/kb/2694321
 




3
General Computer Support / Re: Windows Update
« on: October 13, 2013, 01:57:56 pm »
You may wish to try this:
Updating Windows Update Agent
http://msdn.microsoft.com/en-us/library/windows/desktop/aa387285(v=vs.85).aspx

The downloads of interest are: Wuredist.cab

and related:
How to get the latest version of the Windows Update Agent
http://support.microsoft.com/kb/949104
htht
NoWhereMan

4
Firstly, I wish to say that your efforts have been impressive and your collection of fixes has pulled many friends's PCs out of the fire.

Thank You.

I run you scripts / fixes on my units so that I can see the results prior to recommending your  fixes to others.. [I break mine so I don't break thiers ,,,,,,]


Recently, I noticed on My Vista 32 Business install an Event ID: 7001... due to NetPipeActivator start= ***disabled***

I can assume running your full fix script set this service [right or wrong (grinning here)] using the quoted source for Default Vista services http://www.blackviper.com/service-configurations/black-vipers-windows-vista-service-pack-2-service-configurations/ made this setting generate the Event ID: 7001 Dur to the Dependencies listed in the Service Properties -> Dependencies for NetTcpActivator ....

I also was searching the InterWeb [snort] for Default Vista services.....

I have yet to decide wether or not to configure / enable or disable:
[1] Net.Tcp Listener Adapter
[2] Net.Tcp Port Sharing Service Service

I just thought You might like to have this input.
Thanks again.
Regards,
NoWhereMan

- - - - - - - - - - - -

NetTcpActivator = auto
Display Name = Net.Tcp Listener Adapter
Dependencies = [1] NetTcpPortSharing [Wich is [[DISABLED]] and yields error Event ID: 7001 below]

Dependencies = [2] The Windows Process Activation Service (WAS) [[MANUAL -> running]] provides process activation, resource management and health management services for message-activated applications.

NetTcpPortSharing = disabled

= = = = = = = = = = = = = = = = = = = = = = = = =
Log Name:      System
Source:        Service Control Manager
Date:          10/13/2013 9:48:48 AM
Event ID:      7001
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      DELL-D630ATG
Description:
The Net.Tcp Listener Adapter service depends on the Net.Tcp Port Sharing Service service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-10-13T13:48:48.000Z" />
    <EventRecordID>1693005</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>DELL-D630ATG</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Net.Tcp Listener Adapter</Data>
    <Data Name="param2">Net.Tcp Port Sharing Service</Data>
    <Data Name="param3">%%1058</Data>
  </EventData>
</Event>

= = = = = = = = = = = = = = = = = = = = = = = = =

5
Although, I think it is a false positive, here is what the Sophos Virus Removal Tool
2013-05-17 07:26:22   Component rkdisk.dll version 1.5.30.0
2013-05-17 07:26:22   Version info:   Product version   2.3
2013-05-17 07:26:22   Version info:   Detection engine   3.43.0
2013-05-17 07:26:22   Version info:   Detection data   4.89G
2013-05-17 07:26:22   Version info:   Build date   5/8/2013
2013-05-17 07:26:22   Version info:   Data files added   292
2013-05-17 07:26:22   Version info:   Last successful update   5/17/2013 7:26:18 AM
 
>>> Virus 'Mal/Behav-035' found in file D:\Download\Tweaking.com - Utils\svchost.exe Lookup Tool v1.5.0\Tweaking.com - svchost.exe Lookup Tool\lookup_svchost.exe
========================================================
Mal/Behav-035 is a file that displays characteristics or behavior found exclusively within malware.
=========================================================
www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Mal~Behav-035/detailed-analysis.aspx
=========================================================
Regards,

6
With all your hard work, rebuilding the  PC and still having issues, I'd look towards a hardware issue.
Assuming there are no 'dust bunnies clogging air passages and having the unit over heat -
I would start be running  WinDIAG memory tester. And  removing enough RAM to have 4 GB installed aka three tests of 4 GB per test.
Look next at the possibility of a Bios update.
Reset the Bios settings to non-tweaked.
Other appropriate hardware tests.
Rollback or update  video drivers.
There's your homework assignment.
grin
hth

7
Tweaking.com Support & Help / Re: svchost
« on: February 07, 2013, 12:54:14 am »
If you  have performed Shane's  program steps "To The Letter" and have not cleaned the  PC with ComboFix [ also, run as posted on BleepingComputer site], I believe that you  may need to use one of the  offline aka bootable scanning tools like:
Windows Defender Offline
==== quote ====
To use Windows Defender Offline, you need to follow four basic steps:
1.Download Windows Defender Offline and create a CD, DVD, or USB flash drive.
2.Restart your PC using the Windows Defender Offline media.
3.Scan your PC for malicious and other potentially unwanted software.
4.Remove any malware that is found from your PC.
==== quote ====
That particular nasty bug comes down through p2p, 'slimewire', etc, or 'cheap' games cds.
Some of the issue is also related to JAVA. 
If it were me, I'd uninstall JAVA. Even the latest patches may not be sufficient to prevent exploits.
Disabling JavA instructions can be found at Sophos site as well as DHS.gov ..
This nasty burys itself in the system Restore, and sets a reg key to run at boot. It also creates  Autorun.inf's on all drives - Delete Files ('D:\autorun.inf');('C:\autorun.inf');
You  can also, GooGle [ How to remove HEUR.Trojan.Win32.Generic manually? ]
hth


8
Tweaking.com Support & Help / Re: Step 3 - SYSTEM FILE CHECK
« on: February 06, 2013, 11:48:24 pm »
Look on the Dell Support site for:
PC Restore for Windows XP Article ID : 273763 Date Published : 2004-06-16 Journal ID : b0505ae8-9fa4-46f4-9f0e-3943da8d7867

This is the CTRL + F11 factory restore option, assuming that the drive has not been replaced or the recovery partition is missing / corrupt etc.

hth

9
Tweaking.com Support & Help / Re: confused about file
« on: February 06, 2013, 11:31:04 pm »
msdt.exe  - Trojan W32.Tilebot-BQ
[A quick search of the issue yielded this result]

Combofix 'should have gotten it', but; you can try the Sophos tool:
--
Virus Removal Tool Free virus detection and removal Removes viruses, spyware, rootkits and fake antivirus
100% free! Totally, absolutely, completely
Supports Windows XP, Vista and 7
Works alongside your existing antivirus
--

===========
W32/Tilebot-BQ is a worm and IRC backdoor Trojan for the Windows platform.

W32/Tilebot-BQ spreads to other network computers by exploiting common buffer overflow vulnerabilities, including: PNP (MS05-039), ASN.1 (MS04-007), and RPC-DCOM (MS04-012), and by copying itself to network shares and Microsoft SQL servers protected by weak passwords.

W32/Tilebot-BQ runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

W32/Tilebot-BQ includes functionality to access the internet and communicate with a remote server via HTTP.

When first run W32/Tilebot-BQ copies itself to <Windows>\msdt.exe.
===========
hth

10
Hello:
You did not mention what is/was your current A/V program [unless it is F-Secure].
Other A/V's historically do Not uninstall well [Mcafee, Avast, Norton, AVG - each has a separate uninstaller - ]
You might try Bleeping Computer's Combofix.
Be very sure to turn off antivirus AND un plug the ethernet cable and disable wireless.

I helped repair a firend's PC using it.
Combofix reported services.exe was infected.
Run SFC with the Windows installation DVD inserted.
Then retry Shane's Windows Repair tool..
and then reestablish network connectivity.

hth

11
Tweaking.com Support & Help / Re: Network adapter reset issue
« on: January 18, 2013, 03:26:14 pm »
"we" understand  'work in progress' all to well - grin.
Some playing around yielded thes  "ugly" commands:

C:\Windows\system32>netsh int ip set address name="Local Area Connection" source=dhcp
C:\Windows\system32>netsh int ip set dnsserver name="Local Area Connection" source=dhcp
C:\Windows\system32>netsh int ip set winsserver name="Local Area Connection" source=dhcp

The ugly part is [ [ name="Local Area Connection" ] ]
since if the name of the network adapter in NOT what is in the quotes .. That happens all too often with redetected adapters or renamed for convience like name="Broadcom NetXtreme 57xx", et. al..
Just remembered  if both Hard wired and Wireless adapters are enabled..

Another patr of 'ugly' is that the [ netsh int ip set winsserver name="Local Area Connection" source=dhcp
 ] does not reset the NetBios setting to dhcp but leaves it where ever it was .. a.k.a. mine was static and it left the Netbios setting on Enable NetBios over TCP..
Lord Luv a Duck, if IPV6 gets fully implemented..
Regards, and I'll be back.

12
Tweaking.com Support & Help / Network adapter reset issue
« on: January 18, 2013, 10:42:05 am »
Windows All-In-One Downloads v1.9.5
- portable [one issue so far] .. If network adapter originally was set to a manual IP settings, this program clears the IP settings, but leaves the manual IP [as blank] DNS and WINS setting.

Hence it reboots and sets the network adapter to an auto-IP [169.x.y.x, 255.255.0.0 and blank Gateway]; but keeps the original DNS and WINS settingIP....... This will definately mess up a multi-homed PC, ICS or other such configuration.
You just need to reconfigure the settings.
[The images ~Network-Before-After-Tweaking.com~ are before and after , aka no change]
Regards

13
Hello:
I just fixed a PC for a friend that had a "MSE won't instal or update" issue. The second issue not reported to me was Windows Update was not functional.
The PC had two rootkits, found by Combifix [BleepingComputer].
Also BITS [ Background Intelligent Transfer Service (BITS) missing - Microsoft ]
Note: this is how I found Tweaking.com ...

I did not run chkdsk, but i did run SFC via Tweaking.com - Windows Repair (All in One) v.1.95 [setp 3].
SFC must have fixed something because it required a full Restart of Windows.
Then I ran Step 4 successfully. and with only  an IP issue [covered elsewhere] all went well, after full restart.
MSE installed, updated, and Windows updates became available.
Hope this Helps,
Regards

Pages: [1]