[Resolved] False Security Alert

[redeye]

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Rodney>tasklist/svc>tasklist.txt

C:\Documents and Settings\Rodney>tasklist

Image Name                   PID Session Name     Session#    Mem Usage
========================= ====== ================ ======== ============
System Idle Process            0 Console                 0         28 K
System                         4 Console                 0    150,332 K
smss.exe                     884 Console                 0        432 K
csrss.exe                    948 Console                 0      6,860 K
winlogon.exe                 976 Console                 0      6,420 K
services.exe                1020 Console                 0      4,944 K
lsass.exe                   1032 Console                 0      7,496 K
ati2evxx.exe                1228 Console                 0      3,680 K
svchost.exe                 1244 Console                 0      6,240 K
svchost.exe                 1308 Console                 0      6,124 K
svchost.exe                 1452 Console                 0     27,712 K
EvtEng.exe                  1500 Console                 0      8,960 K
S24EvMon.exe                1540 Console                 0      6,816 K
WLKEEPER.exe                1568 Console                 0      7,456 K
svchost.exe                 1624 Console                 0      4,884 K
svchost.exe                 1796 Console                 0      4,268 K
vsmon.exe                   1856 Console                 0     26,020 K
ISWSVC.exe                  1664 Console                 0     10,124 K
spoolsv.exe                 1784 Console                 0      8,140 K
svchost.exe                  324 Console                 0      4,596 K
avgwdsvc.exe                 524 Console                 0      1,724 K
ati2evxx.exe                 572 Console                 0      4,596 K
explorer.exe                 820 Console                 0     23,996 K
btwdins.exe                  856 Console                 0      3,352 K
ehrecvr.exe                  924 Console                 0      5,708 K
ehSched.exe                  112 Console                 0      4,316 K
hnm_svc.exe                 1364 Console                 0      7,348 K
jqs.exe                     2004 Console                 0      1,396 K
avgrsx.exe                  2124 Console                 0     13,396 K
avgnsx.exe                  2132 Console                 0        436 K
MDM.EXE                     2472 Console                 0      4,464 K
ehtray.exe                  2592 Console                 0      2,928 K
sqlservr.exe                2616 Console                 0     17,292 K
ZCfgSvc.exe                 2640 Console                 0      9,564 K
iFrmewrk.exe                2756 Console                 0     13,704 K
stsystra.exe                2840 Console                 0      8,060 K
SynTPEnh.exe                2892 Console                 0      6,036 K
RegSrvc.exe                 2908 Console                 0      4,248 K
svchost.exe                 2968 Console                 0      7,024 K
CLI.exe                     2984 Console                 0      5,156 K
issch.exe                   3008 Console                 0      2,820 K
tfswctrl.exe                3096 Console                 0      4,952 K
svchost.exe                 3200 Console                 0      5,204 K
QTTask.exe                  3176 Console                 0      3,776 K
pptd40nt.exe                3416 Console                 0      4,128 K
ToolbarUpdater.exe          3688 Console                 0      7,672 K
zlclient.exe                3752 Console                 0      5,492 K
mcrdsvc.exe                 3924 Console                 0      4,324 K
vprot.exe                   3968 Console                 0      6,924 K
netwaiting.exe              3976 Console                 0      5,548 K
ctfmon.exe                   144 Console                 0      5,056 K
BTTray.exe                   600 Console                 0      7,468 K
DLG.exe                      604 Console                 0      4,328 K
BTSTAC~1.EXE                2092 Console                 0      9,044 K
dllhost.exe                 2536 Console                 0      7,492 K
svchost.exe                 3424 Console                 0      4,500 K
ehmsas.exe                  3156 Console                 0      4,148 K
Dot1XCfg.exe                 540 Console                 0      9,248 K
ISUSPM.exe                   140 Console                 0      6,108 K
agent.exe                   2736 Console                 0     10,392 K
CLI.exe                     4804 Console                 0     10,468 K
ForceField.exe              5292 Console                 0     28,464 K
iexplore.exe                5808 Console                 0     73,308 K
cmd.exe                     3236 Console                 0      3,936 K
wmiprvse.exe                4800 Console                 0      7,308 K
tasklist.exe                4176 Console                 0      5,764 K

C:\Documents and Settings\Rodney>

[Hoov]

I just realized I goofed. Please follow the revised instructions below. I gave you instructions for Vista or Windows 7, not XP. They are corrected below.

For the windows update problem,

1.       I need you to go to the administration tools in XP. They are in the Control Panel. Open the Admin tools, then open services.

2.       Scroll down to Background Intelligent Transfer Service then double click on it.

3.       If the Startup status lists Stopped, click Start and then click OK.

4.      Do the same with Windows Update Automatic Updates and Workstation services.

5.       If the Startup status lists Stopped, click Start and then click OK.

6.       Close the Services window and try to install updates again.

Let me know what happens.

[redeye]

I attached a screen shot because I don’t see automatic update in the service folder. And updates didn’t work either. However I noticed a dialogue box to the right referring to turn on automatic updates. Is that an advertisement or a helper?

[Hoov]

Go ahead and click the button it is not an ad, it goes into the windows settings and turns on automatic updates.  Lets see if it can fix the problem.

[Hoov]

If that does not work, try running this file and see if it fixes the automatic update issue.

[redeye]

I tried clicking the update button but nothing. Ran the installer and was prompt that it was no need since window update agent already installed.
Still getting the same error code too.

[Hoov]

I am going to have to do a bit of research on this.

[Hoov]

Please go this page, scroll down to the two fixit buttons and click on the left one, follow any instructions.

[redeye]

Thanks Hoov
Followed all instruction, then tried to update. But got the same error code.

[Hoov]

Go to this page and run the fixit and then reboot the computer and try running windows update.

[redeye]

That we the ticket Hoov...Updates worked. Had 16-priority & 9-software.
Thank you very much. Is there anything else you see we need to address.

[Hoov]

Now  there are a few thing's you need to do to fully clean your system and keep it secure.


Disable and Enable System Restore.
I recommend you turn off System restore, and then turn it back on so that you will not be able to restore your problems to a clean computer.
For Vista use these instructions, Windows Vista Restore Guide
For XP use these instructions, Windows XP System Restore Guide
Reboot
Re-enable system restore with instructions from tutorial above
Create a System Restore Point
Go to all programs, then to accessories, then to system tools, then to system restore. Check the box for create restore point (not select a restore point), then click next and follow the instructions.

Cleaning out Temporary Files etc. There are several different products that you can use for this. You can go thru the Internet Options in the windows Control Panel. There are several programs that also do the job better than windows does it, in my opinion. There is System Security Suite, EasyCleaner, Ccleaner. Also sometimes other program sometimes do it as well as what you originally got it for like ZoneAlarm Security Suite. Just make sure to keep them updated and use them regularly.

Make your Internet Explorer more secure - This can be done by following these simple instructions: (unless you are using ZoneAlarm Security Suite or something similar, then you would secure the browser thru the firewall). There are some good basic instructions for that here.

Use a different browser other than  IE (most exploits are pointed towards IE). One of them is
Firefox.
It is also worth trying Thunderbird for controlling spam in your e-mail.

Always use an UPDATED anti-virus program Make sure you update this at least weekly, if not more often. This is one thing that may save you more than anything else.

Run malware scanners. Three free ones are Spybot Search and Destroy, and AdAware and Malwarebytes' Anti-Malware

Always use a firewall.
Any firewall is better than none, and you should pick a firewall that you will use, as even the best firewall is worthless if you turn it off.
 
Learn how to use your firewall Only programs that need it should have access to the net. But these are specific to the firewall you use, so you will need to learn how. Several firewalls have support forums here. My page will help you with ZoneAlarm if that is what you choose. 


Never run two Antivirus programs or two Firewalls  at the same time. They can interfere with each other and cause problems. Some people swear that more protection is provided, but the reverse is true. They tend to argue amongst themselves and end up leaving holes. Now I have more than 1 AV installed on my computer, and I keep them up to date. I only run one at a time, but each program has weakness's, so I keep a backup in case my computer starts acting up.


 MOST IMPORTANT : Windows and IE, and whatever other software that you have that connects to the net, needs to be kept updated. The reason is, these programs connect to the net, and if there is an internal security problem, you have already told your firewall to allow the communication, and thus you will have allowed a hole. UPDATES are important. I suggest that you make sure that Windows Updates and the updates for your antivirus and antimalware programs are set for automatic updates. I also suggest running Secunia PSI. It will monitor the software you have installed and let you know when something needs to be updated.

Don't ever use P2P or filesharing software Even the safest P2P file sharing programs that do not contain bundled spyware, still expose you to risks because of the very nature of the P2P file sharing process. By default, most P2P file sharing programs are configured to automatically launch at startup. They are also configured to allow other P2P users on the same network open access to a shared directory on your computer. The reason for this is simple. File sharing relies on its members giving and gaining unfettered access to computers across the P2P network. However, this practice can make you vulnerable to data and identity theft. Even if you change those risky default settings to a safer configuration, the act of downloading files from an anonymous source greatly increases your exposure to infection. That is because the files you are downloading may actually contain a disguised threat. Many very malicious worms and trojans, such as the Storm Worm, target and spread across P2P files sharing networks because of their known vulnerabilities.

Before using any malware detection / removal software Check with Rogue/Suspect Spyware List That way you will know if the program you are looking at is on the up and up. If you want to know how it stacks up against other programs check out SpywareWarrior

We have a good guide here at Spyware Hammer on how to prevent Malware in the Future. You might want to peruse this and follow the recommendations in there.
PLEASE READ IT AND FOLLOW THE RECOMMENDATIONS TO PROTECT YOURSELF.

Let us know if you have any more problems, either new or old.
Have a good time surfing the net, but stay safe.
If you have no more problems, let me know and I will mark this as resolved. Or if you have more questions, ask away, that is why I am here.

[redeye]

Thanks again Hoov,
I do have a quick question about things that are on the task bar. Such as Netwaiting,(icon looks like a telephone) I have 2 local area network connection that state cable unplugged.  I suppose that’s because I’m wireless. There is also, Quick time and my son’s Xbox that has been detected. How do I get rid of these programs from start up? I’ve read on here about Start Up Lite but, not sure on that through, Is that something that I should look into. My thoughts are it will speed start up time.
As for this post…Thank you for resolving this issue.

I feel with the new router I purchased, I’ll be headed over to that section soon.

[Hoov]

For the network connections that you are not using, go to the networking control panel, right click on the devices that you are not using and select disable.

As for programs, if you go into the configuration settings for the program, there should be some way to keep the program from starting with windows. If it doesn't, or you can't find it, I suggest using  Mike Lin's Startup Control Panel and install it. Don't get the standalone version. Install it, and then go to the windows control panel and start the Startup Control Panel. If you don't want the program to start, but may need it to in the future, just uncheck the box next to the program. If you are sure that you will never need it again, you can right click on it and select delete. Go thru each tab.

What questions do you have about your router? We can do that here if you like, as it does have something to do with securing your network against malware.

[redeye]

Thank you for the offer but, I haven’t even taken it out of the box yet, and we are heading out of town for a New Years vacation. I would really like to get this one set up right, with a security code and everything. The one I have now needless to say is out dated with all the devices we have and it’s unsecured.
I do appreciate you help and wish you a Happy New Year.