Re: repeated crashes and failure to update ... is this Win32/Rustock.g

"Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

| Apologies if this appears twice - had a crash just as I first posted re this!

| Running XP, have had a frustrating few weeks with repeated random crashes,

| BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

| using the CD supplied. After some of the crashes got the error report from

| MS that I was infected with Win32/Rustock.gen!C, and directing me to an

| online scan that always crashed before completing, although several complete

| and up to date McAfee scans have found nothing.

| Possibly related to this I have had major problems with updates downloading

| but not installing. For a week or so I kept getting the message that Update

| installer 3.1 (I think ... from memory) could not be installed. I Googled re

| this and found a workaround via regedit and did install the update installer,

| after which a number of other updates could be installed, but now no longer.

| It keeps hanging when trying to install IE7 (I currently have IE6), and I

| need to ctrl/alt/delete out of it. Even when I try a custom install without

| IE7 it still doesn't complete installation, and is currently frozen - I am

| posting this on another computer provided by work.

| I am normally a patient man, but am sorely tempted to throw a brick at the

| computer. Some unkind colleagues have suggested I install Linux, but I feel

| I am only moderately computer literate and not really sufficient of a nerd to

| do this.

| Any relatively simple solutions? Or would the simplest and easiest solution

| be to reinstall Windows and start again? - I have backed up all essential

| files so this wouldn't be a total disaster.

| HELP!

What concerns me is "Win32/Rustock.gen!C"

xposted to security.virus for convenience.

Security - Viruses

OE client -

news://msnews.microsoft.com/microsoft.public.security.virus

or

Web client -

http://www.microsoft.com/technet/community....security.virus

--

====================================

TaurArian [MS-MVP] 2005-2008 - Australia

====================================

How to make a good post: http://www.dts-l.org/goodpost.htm

Defending your machine: http://defendingyourmachine2.blogspot.com/

http://taurarian.mvps.org/index.htm

Emails will not be acknowledged - please post to the newsgroup so all may benefit.

Download - rustbfix.exe and save it to your desktop.

If a Rustock.b-infection is found, you will be asked to reboot the computer.

After when you reboot it will take some time for the Desktop to come up. You might need to reboot 2 times , depending.

When the desktop will come up you will have 1-2 logfiles that will show up for you. The infection should be gone. If not post those log files here.

--

Peter

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

"TaurArian [MS-MVP]" <taurarianREMOVECAPS@gmail.com> wrote in message news:eliUBM$3HHA.3400@TK2MSFTNGP03.phx.gbl...<span style="color:blue">

>

>

> "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

> news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

> | Apologies if this appears twice - had a crash just as I first posted re this!

> | Running XP, have had a frustrating few weeks with repeated random crashes,

> | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

> | using the CD supplied. After some of the crashes got the error report from

> | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

> | online scan that always crashed before completing, although several complete

> | and up to date McAfee scans have found nothing.

> | Possibly related to this I have had major problems with updates downloading

> | but not installing. For a week or so I kept getting the message that Update

> | installer 3.1 (I think ... from memory) could not be installed. I Googled re

> | this and found a workaround via regedit and did install the update installer,

> | after which a number of other updates could be installed, but now no longer.

> | It keeps hanging when trying to install IE7 (I currently have IE6), and I

> | need to ctrl/alt/delete out of it. Even when I try a custom install without

> | IE7 it still doesn't complete installation, and is currently frozen - I am

> | posting this on another computer provided by work.

> | I am normally a patient man, but am sorely tempted to throw a brick at the

> | computer. Some unkind colleagues have suggested I install Linux, but I feel

> | I am only moderately computer literate and not really sufficient of a nerd to

> | do this.

> | Any relatively simple solutions? Or would the simplest and easiest solution

> | be to reinstall Windows and start again? - I have backed up all essential

> | files so this wouldn't be a total disaster.

> | HELP!

>

>

>

> What concerns me is "Win32/Rustock.gen!C"

>

> xposted to security.virus for convenience.

>

> Security - Viruses

> OE client -

> news://msnews.microsoft.com/microsoft.public.security.virus

> or

>

> Web client -

> http://www.microsoft.com/technet/community....security.virus

>

>

> --

> ====================================

> TaurArian [MS-MVP] 2005-2008 - Australia

> ====================================

> How to make a good post: http://www.dts-l.org/goodpost.htm

> Defending your machine: http://defendingyourmachine2.blogspot.com/

> http://taurarian.mvps.org/index.htm

>

> Emails will not be acknowledged - please post to the newsgroup so all may benefit.

>

></span>

Sorry I forgot the link for the rustbfix.exe

http://www.uploads.ejvindh.net/rustbfix.exe

--

Peter

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

"Peter Foldes" <okf22@hotmail.com> wrote in message news:%23ER9WaA4HHA.5740@TK2MSFTNGP03.phx.gbl...

Download - rustbfix.exe and save it to your desktop.

If a Rustock.b-infection is found, you will be asked to reboot the computer.

After when you reboot it will take some time for the Desktop to come up. You might need to reboot 2 times , depending.

When the desktop will come up you will have 1-2 logfiles that will show up for you. The infection should be gone. If not post those log files here.

--

Peter

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

"TaurArian [MS-MVP]" <taurarianREMOVECAPS@gmail.com> wrote in message news:eliUBM$3HHA.3400@TK2MSFTNGP03.phx.gbl...<span style="color:blue">

>

>

> "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

> news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

> | Apologies if this appears twice - had a crash just as I first posted re this!

> | Running XP, have had a frustrating few weeks with repeated random crashes,

> | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

> | using the CD supplied. After some of the crashes got the error report from

> | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

> | online scan that always crashed before completing, although several complete

> | and up to date McAfee scans have found nothing.

> | Possibly related to this I have had major problems with updates downloading

> | but not installing. For a week or so I kept getting the message that Update

> | installer 3.1 (I think ... from memory) could not be installed. I Googled re

> | this and found a workaround via regedit and did install the update installer,

> | after which a number of other updates could be installed, but now no longer.

> | It keeps hanging when trying to install IE7 (I currently have IE6), and I

> | need to ctrl/alt/delete out of it. Even when I try a custom install without

> | IE7 it still doesn't complete installation, and is currently frozen - I am

> | posting this on another computer provided by work.

> | I am normally a patient man, but am sorely tempted to throw a brick at the

> | computer. Some unkind colleagues have suggested I install Linux, but I feel

> | I am only moderately computer literate and not really sufficient of a nerd to

> | do this.

> | Any relatively simple solutions? Or would the simplest and easiest solution

> | be to reinstall Windows and start again? - I have backed up all essential

> | files so this wouldn't be a total disaster.

> | HELP!

>

>

>

> What concerns me is "Win32/Rustock.gen!C"

>

> xposted to security.virus for convenience.

>

> Security - Viruses

> OE client -

> news://msnews.microsoft.com/microsoft.public.security.virus

> or

>

> Web client -

> http://www.microsoft.com/technet/community....security.virus

>

>

> --

> ====================================

> TaurArian [MS-MVP] 2005-2008 - Australia

> ====================================

> How to make a good post: http://www.dts-l.org/goodpost.htm

> Defending your machine: http://defendingyourmachine2.blogspot.com/

> http://taurarian.mvps.org/index.htm

>

> Emails will not be acknowledged - please post to the newsgroup so all may benefit.

>

></span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

Latest update:

Have run rustbfix (see logs in posting above) but still can't update. Hangs

while trying to install IE7 and generates Drwatson postmortem debugger error

notice as before. What's up? Is this something other than the virus?

"Richard Henderson" wrote:

<span style="color:blue">

> Peter

> Thanks. Will try when I get home ... but does what I describe sound like a

> Win32/Rustock.gen!C infection, and does McAfee not pick this up?

>

> "Peter Foldes" wrote:

> <span style="color:green">

> > Download - rustbfix.exe and save it to your desktop.

> >

> > If a Rustock.b-infection is found, you will be asked to reboot the computer.

> >

> > After when you reboot it will take some time for the Desktop to come up. You might need to reboot 2 times , depending.

> >

> > When the desktop will come up you will have 1-2 logfiles that will show up for you. The infection should be gone. If not post those log files here.

> >

> >

> > --

> > Peter

> >

> > Please Reply to Newsgroup for the benefit of others

> > Requests for assistance by email can not and will not be acknowledged.

> >

> > "TaurArian [MS-MVP]" <taurarianREMOVECAPS@gmail.com> wrote in message news:eliUBM$3HHA.3400@TK2MSFTNGP03.phx.gbl...<span style="color:darkred">

> > >

> > >

> > > "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

> > > news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

> > > | Apologies if this appears twice - had a crash just as I first posted re this!

> > > | Running XP, have had a frustrating few weeks with repeated random crashes,

> > > | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

> > > | using the CD supplied. After some of the crashes got the error report from

> > > | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

> > > | online scan that always crashed before completing, although several complete

> > > | and up to date McAfee scans have found nothing.

> > > | Possibly related to this I have had major problems with updates downloading

> > > | but not installing. For a week or so I kept getting the message that Update

> > > | installer 3.1 (I think ... from memory) could not be installed. I Googled re

> > > | this and found a workaround via regedit and did install the update installer,

> > > | after which a number of other updates could be installed, but now no longer.

> > > | It keeps hanging when trying to install IE7 (I currently have IE6), and I

> > > | need to ctrl/alt/delete out of it. Even when I try a custom install without

> > > | IE7 it still doesn't complete installation, and is currently frozen - I am

> > > | posting this on another computer provided by work.

> > > | I am normally a patient man, but am sorely tempted to throw a brick at the

> > > | computer. Some unkind colleagues have suggested I install Linux, but I feel

> > > | I am only moderately computer literate and not really sufficient of a nerd to

> > > | do this.

> > > | Any relatively simple solutions? Or would the simplest and easiest solution

> > > | be to reinstall Windows and start again? - I have backed up all essential

> > > | files so this wouldn't be a total disaster.

> > > | HELP!

> > >

> > >

> > >

> > > What concerns me is "Win32/Rustock.gen!C"

> > >

> > > xposted to security.virus for convenience.

> > >

> > > Security - Viruses

> > > OE client -

> > > news://msnews.microsoft.com/microsoft.public.security.virus

> > > or

> > >

> > > Web client -

> > > http://www.microsoft.com/technet/community....security.virus

> > >

> > >

> > > --

> > > ====================================

> > > TaurArian [MS-MVP] 2005-2008 - Australia

> > > ====================================

> > > How to make a good post: http://www.dts-l.org/goodpost.htm

> > > Defending your machine: http://defendingyourmachine2.blogspot.com/

> > > http://taurarian.mvps.org/index.htm

> > >

> > > Emails will not be acknowledged - please post to the newsgroup so all may benefit.

> > >

> > ></span>

> > </span></span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

Peter

Thanks. Will try when I get home ... but does what I describe sound like a

Win32/Rustock.gen!C infection, and does McAfee not pick this up?

"Peter Foldes" wrote:

<span style="color:blue">

> Download - rustbfix.exe and save it to your desktop.

>

> If a Rustock.b-infection is found, you will be asked to reboot the computer.

>

> After when you reboot it will take some time for the Desktop to come up. You might need to reboot 2 times , depending.

>

> When the desktop will come up you will have 1-2 logfiles that will show up for you. The infection should be gone. If not post those log files here.

>

>

> --

> Peter

>

> Please Reply to Newsgroup for the benefit of others

> Requests for assistance by email can not and will not be acknowledged.

>

> "TaurArian [MS-MVP]" <taurarianREMOVECAPS@gmail.com> wrote in message news:eliUBM$3HHA.3400@TK2MSFTNGP03.phx.gbl...<span style="color:green">

> >

> >

> > "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

> > news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

> > | Apologies if this appears twice - had a crash just as I first posted re this!

> > | Running XP, have had a frustrating few weeks with repeated random crashes,

> > | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

> > | using the CD supplied. After some of the crashes got the error report from

> > | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

> > | online scan that always crashed before completing, although several complete

> > | and up to date McAfee scans have found nothing.

> > | Possibly related to this I have had major problems with updates downloading

> > | but not installing. For a week or so I kept getting the message that Update

> > | installer 3.1 (I think ... from memory) could not be installed. I Googled re

> > | this and found a workaround via regedit and did install the update installer,

> > | after which a number of other updates could be installed, but now no longer.

> > | It keeps hanging when trying to install IE7 (I currently have IE6), and I

> > | need to ctrl/alt/delete out of it. Even when I try a custom install without

> > | IE7 it still doesn't complete installation, and is currently frozen - I am

> > | posting this on another computer provided by work.

> > | I am normally a patient man, but am sorely tempted to throw a brick at the

> > | computer. Some unkind colleagues have suggested I install Linux, but I feel

> > | I am only moderately computer literate and not really sufficient of a nerd to

> > | do this.

> > | Any relatively simple solutions? Or would the simplest and easiest solution

> > | be to reinstall Windows and start again? - I have backed up all essential

> > | files so this wouldn't be a total disaster.

> > | HELP!

> >

> >

> >

> > What concerns me is "Win32/Rustock.gen!C"

> >

> > xposted to security.virus for convenience.

> >

> > Security - Viruses

> > OE client -

> > news://msnews.microsoft.com/microsoft.public.security.virus

> > or

> >

> > Web client -

> > http://www.microsoft.com/technet/community....security.virus

> >

> >

> > --

> > ====================================

> > TaurArian [MS-MVP] 2005-2008 - Australia

> > ====================================

> > How to make a good post: http://www.dts-l.org/goodpost.htm

> > Defending your machine: http://defendingyourmachine2.blogspot.com/

> > http://taurarian.mvps.org/index.htm

> >

> > Emails will not be acknowledged - please post to the newsgroup so all may benefit.

> >

> ></span>

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

Peter

Thanks have now downloaded and run rustbfix.exe. It did indeed reboot twice

and generated two logs pasted below. Perhaps you can decipher for me? I'm

not sure if it indicates there was an infection or not.

Richard

Rustock.b-fix v. 1.01 -- By ejvindh

16/08/2007 21:57:55.34

Pre-run Status of system

Rootkit driver PE386 is found. Starting the unload-procedure....

Rustock.b-ADS attached to the System32-folder:

:lzx32.sys 53934

Total size: 53934 bytes.

Attempting to remove ADS...

system32: deleted 53934 bytes in 1 streams.

Looking for Rustock.b-files in the System32-folder:

No Rustock.b-files found in system32

Post-run Status of system

Rustock.b-driver on the system: NONE!

Rustock.b-ADS attached to the System32-folder:

No System32-ADS found.

Looking for Rustock.b-files in the System32-folder:

No Rustock.b-files found in system32

End of Logfile

Logfile of The Avenger version 1, by Swandog46

Running from registry key:

\Registry\Machine\System\CurrentControlSet\Services\ycywykmr

Script file located at: \??\C:\WINDOWS\system32\oqtpyoft.txt

Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

Beginning to process script file:

Driver PE386 unloaded successfully.

Program C:\Rustbfix\2run.bat successfully set up to run once on reboot.

Completed script processing.

Finished! Terminate.

"Peter Foldes" wrote:

<span style="color:blue">

>

> Sorry I forgot the link for the rustbfix.exe

>

> http://www.uploads.ejvindh.net/rustbfix.exe

>

> --

> Peter

>

> Please Reply to Newsgroup for the benefit of others

> Requests for assistance by email can not and will not be acknowledged.

>

> "Peter Foldes" <okf22@hotmail.com> wrote in message news:%23ER9WaA4HHA.5740@TK2MSFTNGP03.phx.gbl...

> Download - rustbfix.exe and save it to your desktop.

>

> If a Rustock.b-infection is found, you will be asked to reboot the computer.

>

> After when you reboot it will take some time for the Desktop to come up. You might need to reboot 2 times , depending.

>

> When the desktop will come up you will have 1-2 logfiles that will show up for you. The infection should be gone. If not post those log files here.

>

>

> --

> Peter

>

> Please Reply to Newsgroup for the benefit of others

> Requests for assistance by email can not and will not be acknowledged.

>

> "TaurArian [MS-MVP]" <taurarianREMOVECAPS@gmail.com> wrote in message news:eliUBM$3HHA.3400@TK2MSFTNGP03.phx.gbl...<span style="color:green">

> >

> >

> > "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

> > news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

> > | Apologies if this appears twice - had a crash just as I first posted re this!

> > | Running XP, have had a frustrating few weeks with repeated random crashes,

> > | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

> > | using the CD supplied. After some of the crashes got the error report from

> > | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

> > | online scan that always crashed before completing, although several complete

> > | and up to date McAfee scans have found nothing.

> > | Possibly related to this I have had major problems with updates downloading

> > | but not installing. For a week or so I kept getting the message that Update

> > | installer 3.1 (I think ... from memory) could not be installed. I Googled re

> > | this and found a workaround via regedit and did install the update installer,

> > | after which a number of other updates could be installed, but now no longer.

> > | It keeps hanging when trying to install IE7 (I currently have IE6), and I

> > | need to ctrl/alt/delete out of it. Even when I try a custom install without

> > | IE7 it still doesn't complete installation, and is currently frozen - I am

> > | posting this on another computer provided by work.

> > | I am normally a patient man, but am sorely tempted to throw a brick at the

> > | computer. Some unkind colleagues have suggested I install Linux, but I feel

> > | I am only moderately computer literate and not really sufficient of a nerd to

> > | do this.

> > | Any relatively simple solutions? Or would the simplest and easiest solution

> > | be to reinstall Windows and start again? - I have backed up all essential

> > | files so this wouldn't be a total disaster.

> > | HELP!

> >

> >

> >

> > What concerns me is "Win32/Rustock.gen!C"

> >

> > xposted to security.virus for convenience.

> >

> > Security - Viruses

> > OE client -

> > news://msnews.microsoft.com/microsoft.public.security.virus

> > or

> >

> > Web client -

> > http://www.microsoft.com/technet/community....security.virus

> >

> >

> > --

> > ====================================

> > TaurArian [MS-MVP] 2005-2008 - Australia

> > ====================================

> > How to make a good post: http://www.dts-l.org/goodpost.htm

> > Defending your machine: http://defendingyourmachine2.blogspot.com/

> > http://taurarian.mvps.org/index.htm

> >

> > Emails will not be acknowledged - please post to the newsgroup so all may benefit.

> >

> ></span>

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

Many thanks. Will see if that generates any response.

"TaurArian [MS-MVP]" wrote:

<span style="color:blue">

>

>

> "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

> news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

> | Apologies if this appears twice - had a crash just as I first posted re this!

> | Running XP, have had a frustrating few weeks with repeated random crashes,

> | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

> | using the CD supplied. After some of the crashes got the error report from

> | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

> | online scan that always crashed before completing, although several complete

> | and up to date McAfee scans have found nothing.

> | Possibly related to this I have had major problems with updates downloading

> | but not installing. For a week or so I kept getting the message that Update

> | installer 3.1 (I think ... from memory) could not be installed. I Googled re

> | this and found a workaround via regedit and did install the update installer,

> | after which a number of other updates could be installed, but now no longer.

> | It keeps hanging when trying to install IE7 (I currently have IE6), and I

> | need to ctrl/alt/delete out of it. Even when I try a custom install without

> | IE7 it still doesn't complete installation, and is currently frozen - I am

> | posting this on another computer provided by work.

> | I am normally a patient man, but am sorely tempted to throw a brick at the

> | computer. Some unkind colleagues have suggested I install Linux, but I feel

> | I am only moderately computer literate and not really sufficient of a nerd to

> | do this.

> | Any relatively simple solutions? Or would the simplest and easiest solution

> | be to reinstall Windows and start again? - I have backed up all essential

> | files so this wouldn't be a total disaster.

> | HELP!

>

>

>

> What concerns me is "Win32/Rustock.gen!C"

>

> xposted to security.virus for convenience.

>

> Security - Viruses

> OE client -

> news://msnews.microsoft.com/microsoft.public.security.virus

> or

>

> Web client -

> http://www.microsoft.com/technet/community....security.virus

>

>

> --

> ====================================

> TaurArian [MS-MVP] 2005-2008 - Australia

> ====================================

> How to make a good post: http://www.dts-l.org/goodpost.htm

> Defending your machine: http://defendingyourmachine2.blogspot.com/

> http://taurarian.mvps.org/index.htm

>

> Emails will not be acknowledged - please post to the newsgroup so all may benefit.

>

>

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

Richard

Win32/Rustock is now not on your system according to the log files the fix generated. Now as far as the Windows Updates go I cannot help you there. Possibly someone else will come in here and give you some advice on that.

Good Luck Richard

--

Peter

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

"Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message news:D5AF9FC2-B4F4-4CA1-AAC7-682C1B074A09@microsoft.com...<span style="color:blue">

> Peter

> Thanks have now downloaded and run rustbfix.exe. It did indeed reboot twice

> and generated two logs pasted below. Perhaps you can decipher for me? I'm

> not sure if it indicates there was an infection or not.

> Richard

>

> Rustock.b-fix v. 1.01 -- By ejvindh

>

> 16/08/2007 21:57:55.34

>

> Pre-run Status of system

>

> Rootkit driver PE386 is found. Starting the unload-procedure....

>

> Rustock.b-ADS attached to the System32-folder:

> :lzx32.sys 53934

> Total size: 53934 bytes.

> Attempting to remove ADS...

> system32: deleted 53934 bytes in 1 streams.

>

> Looking for Rustock.b-files in the System32-folder:

> No Rustock.b-files found in system32

>

>

> Post-run Status of system

>

> Rustock.b-driver on the system: NONE!

>

> Rustock.b-ADS attached to the System32-folder:

> No System32-ADS found.

>

> Looking for Rustock.b-files in the System32-folder:

> No Rustock.b-files found in system32

>

>

> End of Logfile

>

>

> Logfile of The Avenger version 1, by Swandog46

> Running from registry key:

> RegistryMachineSystemCurrentControlSetServicesycywykmr

>

>

>

> Script file located at: ??C:WINDOWSsystem32oqtpyoft.txt

> Script file opened successfully.

>

> Script file read successfully

>

> Backups directory opened successfully at C:Avenger

>

>

>

> Beginning to process script file:

>

> Driver PE386 unloaded successfully.

> Program C:Rustbfix2run.bat successfully set up to run once on reboot.

>

> Completed script processing.

>

>

>

> Finished! Terminate.

>

> "Peter Foldes" wrote:

> <span style="color:green">

>>

>> Sorry I forgot the link for the rustbfix.exe

>>

>> http://www.uploads.ejvindh.net/rustbfix.exe

>>

>> --

>> Peter

>>

>> Please Reply to Newsgroup for the benefit of others

>> Requests for assistance by email can not and will not be acknowledged.

>>

>> "Peter Foldes" <okf22@hotmail.com> wrote in message news:%23ER9WaA4HHA.5740@TK2MSFTNGP03.phx.gbl...

>> Download - rustbfix.exe and save it to your desktop.

>>

>> If a Rustock.b-infection is found, you will be asked to reboot the computer.

>>

>> After when you reboot it will take some time for the Desktop to come up. You might need to reboot 2 times , depending.

>>

>> When the desktop will come up you will have 1-2 logfiles that will show up for you. The infection should be gone. If not post those log files here.

>>

>>

>> --

>> Peter

>>

>> Please Reply to Newsgroup for the benefit of others

>> Requests for assistance by email can not and will not be acknowledged.

>>

>> "TaurArian [MS-MVP]" <taurarianREMOVECAPS@gmail.com> wrote in message news:eliUBM$3HHA.3400@TK2MSFTNGP03.phx.gbl...<span style="color:darkred">

>> >

>> >

>> > "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

>> > news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

>> > | Apologies if this appears twice - had a crash just as I first posted re this!

>> > | Running XP, have had a frustrating few weeks with repeated random crashes,

>> > | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

>> > | using the CD supplied. After some of the crashes got the error report from

>> > | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

>> > | online scan that always crashed before completing, although several complete

>> > | and up to date McAfee scans have found nothing.

>> > | Possibly related to this I have had major problems with updates downloading

>> > | but not installing. For a week or so I kept getting the message that Update

>> > | installer 3.1 (I think ... from memory) could not be installed. I Googled re

>> > | this and found a workaround via regedit and did install the update installer,

>> > | after which a number of other updates could be installed, but now no longer.

>> > | It keeps hanging when trying to install IE7 (I currently have IE6), and I

>> > | need to ctrl/alt/delete out of it. Even when I try a custom install without

>> > | IE7 it still doesn't complete installation, and is currently frozen - I am

>> > | posting this on another computer provided by work.

>> > | I am normally a patient man, but am sorely tempted to throw a brick at the

>> > | computer. Some unkind colleagues have suggested I install Linux, but I feel

>> > | I am only moderately computer literate and not really sufficient of a nerd to

>> > | do this.

>> > | Any relatively simple solutions? Or would the simplest and easiest solution

>> > | be to reinstall Windows and start again? - I have backed up all essential

>> > | files so this wouldn't be a total disaster.

>> > | HELP!

>> >

>> >

>> >

>> > What concerns me is "Win32/Rustock.gen!C"

>> >

>> > xposted to security.virus for convenience.

>> >

>> > Security - Viruses

>> > OE client -

>> > news://msnews.microsoft.com/microsoft.public.security.virus

>> > or

>> >

>> > Web client -

>> > http://www.microsoft.com/technet/community....security.virus

>> >

>> >

>> > --

>> > ====================================

>> > TaurArian [MS-MVP] 2005-2008 - Australia

>> > ====================================

>> > How to make a good post: http://www.dts-l.org/goodpost.htm

>> > Defending your machine: http://defendingyourmachine2.blogspot.com/

>> > http://taurarian.mvps.org/index.htm

>> >

>> > Emails will not be acknowledged - please post to the newsgroup so all may benefit.

>> >

>> ></span>

>></span></span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

I just came across this for the Windows Update issue. Give it a read

http://groups.google.fr/group/microsoft.pu...5393c5468ccf766

--

Peter

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

"Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message news:912AB017-3E92-4F65-8BEF-2EA0DFF41D19@microsoft.com...<span style="color:blue">

> Latest update:

> Have run rustbfix (see logs in posting above) but still can't update. Hangs

> while trying to install IE7 and generates Drwatson postmortem debugger error

> notice as before. What's up? Is this something other than the virus?

>

> "Richard Henderson" wrote:

> <span style="color:green">

>> Peter

>> Thanks. Will try when I get home ... but does what I describe sound like a

>> Win32/Rustock.gen!C infection, and does McAfee not pick this up?

>>

>> "Peter Foldes" wrote:

>> <span style="color:darkred">

>> > Download - rustbfix.exe and save it to your desktop.

>> >

>> > If a Rustock.b-infection is found, you will be asked to reboot the computer.

>> >

>> > After when you reboot it will take some time for the Desktop to come up. You might need to reboot 2 times , depending.

>> >

>> > When the desktop will come up you will have 1-2 logfiles that will show up for you. The infection should be gone. If not post those log files here.

>> >

>> >

>> > --

>> > Peter

>> >

>> > Please Reply to Newsgroup for the benefit of others

>> > Requests for assistance by email can not and will not be acknowledged.

>> >

>> > "TaurArian [MS-MVP]" <taurarianREMOVECAPS@gmail.com> wrote in message news:eliUBM$3HHA.3400@TK2MSFTNGP03.phx.gbl...

>> > >

>> > >

>> > > "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

>> > > news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

>> > > | Apologies if this appears twice - had a crash just as I first posted re this!

>> > > | Running XP, have had a frustrating few weeks with repeated random crashes,

>> > > | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

>> > > | using the CD supplied. After some of the crashes got the error report from

>> > > | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

>> > > | online scan that always crashed before completing, although several complete

>> > > | and up to date McAfee scans have found nothing.

>> > > | Possibly related to this I have had major problems with updates downloading

>> > > | but not installing. For a week or so I kept getting the message that Update

>> > > | installer 3.1 (I think ... from memory) could not be installed. I Googled re

>> > > | this and found a workaround via regedit and did install the update installer,

>> > > | after which a number of other updates could be installed, but now no longer.

>> > > | It keeps hanging when trying to install IE7 (I currently have IE6), and I

>> > > | need to ctrl/alt/delete out of it. Even when I try a custom install without

>> > > | IE7 it still doesn't complete installation, and is currently frozen - I am

>> > > | posting this on another computer provided by work.

>> > > | I am normally a patient man, but am sorely tempted to throw a brick at the

>> > > | computer. Some unkind colleagues have suggested I install Linux, but I feel

>> > > | I am only moderately computer literate and not really sufficient of a nerd to

>> > > | do this.

>> > > | Any relatively simple solutions? Or would the simplest and easiest solution

>> > > | be to reinstall Windows and start again? - I have backed up all essential

>> > > | files so this wouldn't be a total disaster.

>> > > | HELP!

>> > >

>> > >

>> > >

>> > > What concerns me is "Win32/Rustock.gen!C"

>> > >

>> > > xposted to security.virus for convenience.

>> > >

>> > > Security - Viruses

>> > > OE client -

>> > > news://msnews.microsoft.com/microsoft.public.security.virus

>> > > or

>> > >

>> > > Web client -

>> > > http://www.microsoft.com/technet/community....security.virus

>> > >

>> > >

>> > > --

>> > > ====================================

>> > > TaurArian [MS-MVP] 2005-2008 - Australia

>> > > ====================================

>> > > How to make a good post: http://www.dts-l.org/goodpost.htm

>> > > Defending your machine: http://defendingyourmachine2.blogspot.com/

>> > > http://taurarian.mvps.org/index.htm

>> > >

>> > > Emails will not be acknowledged - please post to the newsgroup so all may benefit.

>> > >

>> > >

>> ></span></span></span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

Peter

Thanks a lot. I will try this link and see if it solves the problem (maybe

when I get back from holiday!).

"Peter Foldes" wrote:

<span style="color:blue">

> I just came across this for the Windows Update issue. Give it a read

>

> http://groups.google.fr/group/microsoft.pu...5393c5468ccf766

>

> --

> Peter

>

> Please Reply to Newsgroup for the benefit of others

> Requests for assistance by email can not and will not be acknowledged.

>

> "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message news:912AB017-3E92-4F65-8BEF-2EA0DFF41D19@microsoft.com...<span style="color:green">

> > Latest update:

> > Have run rustbfix (see logs in posting above) but still can't update. Hangs

> > while trying to install IE7 and generates Drwatson postmortem debugger error

> > notice as before. What's up? Is this something other than the virus?

> >

> > "Richard Henderson" wrote:

> > <span style="color:darkred">

> >> Peter

> >> Thanks. Will try when I get home ... but does what I describe sound like a

> >> Win32/Rustock.gen!C infection, and does McAfee not pick this up?

> >>

> >> "Peter Foldes" wrote:

> >>

> >> > Download - rustbfix.exe and save it to your desktop.

> >> >

> >> > If a Rustock.b-infection is found, you will be asked to reboot the computer.

> >> >

> >> > After when you reboot it will take some time for the Desktop to come up. You might need to reboot 2 times , depending.

> >> >

> >> > When the desktop will come up you will have 1-2 logfiles that will show up for you. The infection should be gone. If not post those log files here.

> >> >

> >> >

> >> > --

> >> > Peter

> >> >

> >> > Please Reply to Newsgroup for the benefit of others

> >> > Requests for assistance by email can not and will not be acknowledged.

> >> >

> >> > "TaurArian [MS-MVP]" <taurarianREMOVECAPS@gmail.com> wrote in message news:eliUBM$3HHA.3400@TK2MSFTNGP03.phx.gbl...

> >> > >

> >> > >

> >> > > "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

> >> > > news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

> >> > > | Apologies if this appears twice - had a crash just as I first posted re this!

> >> > > | Running XP, have had a frustrating few weeks with repeated random crashes,

> >> > > | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

> >> > > | using the CD supplied. After some of the crashes got the error report from

> >> > > | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

> >> > > | online scan that always crashed before completing, although several complete

> >> > > | and up to date McAfee scans have found nothing.

> >> > > | Possibly related to this I have had major problems with updates downloading

> >> > > | but not installing. For a week or so I kept getting the message that Update

> >> > > | installer 3.1 (I think ... from memory) could not be installed. I Googled re

> >> > > | this and found a workaround via regedit and did install the update installer,

> >> > > | after which a number of other updates could be installed, but now no longer.

> >> > > | It keeps hanging when trying to install IE7 (I currently have IE6), and I

> >> > > | need to ctrl/alt/delete out of it. Even when I try a custom install without

> >> > > | IE7 it still doesn't complete installation, and is currently frozen - I am

> >> > > | posting this on another computer provided by work.

> >> > > | I am normally a patient man, but am sorely tempted to throw a brick at the

> >> > > | computer. Some unkind colleagues have suggested I install Linux, but I feel

> >> > > | I am only moderately computer literate and not really sufficient of a nerd to

> >> > > | do this.

> >> > > | Any relatively simple solutions? Or would the simplest and easiest solution

> >> > > | be to reinstall Windows and start again? - I have backed up all essential

> >> > > | files so this wouldn't be a total disaster.

> >> > > | HELP!

> >> > >

> >> > >

> >> > >

> >> > > What concerns me is "Win32/Rustock.gen!C"

> >> > >

> >> > > xposted to security.virus for convenience.

> >> > >

> >> > > Security - Viruses

> >> > > OE client -

> >> > > news://msnews.microsoft.com/microsoft.public.security.virus

> >> > > or

> >> > >

> >> > > Web client -

> >> > > http://www.microsoft.com/technet/community....security.virus

> >> > >

> >> > >

> >> > > --

> >> > > ====================================

> >> > > TaurArian [MS-MVP] 2005-2008 - Australia

> >> > > ====================================

> >> > > How to make a good post: http://www.dts-l.org/goodpost.htm

> >> > > Defending your machine: http://defendingyourmachine2.blogspot.com/

> >> > > http://taurarian.mvps.org/index.htm

> >> > >

> >> > > Emails will not be acknowledged - please post to the newsgroup so all may benefit.

> >> > >

> >> > >

> >> ></span></span>

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

Hmm.

Have visited the website you suggested and run ccleaner and dialafix as

detailed there. Has certainly cleaned out a lot of rubbish ... but sadly

still can't run updates. Failed to download security update KB917953 and

failed to install MS.net Framework1.1 service pack 1 - and it hangs when

trying to install IE7 as before.

Any further suggestions?

"Peter Foldes" wrote:

<span style="color:blue">

> I just came across this for the Windows Update issue. Give it a read

>

> http://groups.google.fr/group/microsoft.pu...5393c5468ccf766

>

> --

> Peter

>

> Please Reply to Newsgroup for the benefit of others

> Requests for assistance by email can not and will not be acknowledged.

>

> "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message news:912AB017-3E92-4F65-8BEF-2EA0DFF41D19@microsoft.com...<span style="color:green">

> > Latest update:

> > Have run rustbfix (see logs in posting above) but still can't update. Hangs

> > while trying to install IE7 and generates Drwatson postmortem debugger error

> > notice as before. What's up? Is this something other than the virus?

> >

> > "Richard Henderson" wrote:

> > <span style="color:darkred">

> >> Peter

> >> Thanks. Will try when I get home ... but does what I describe sound like a

> >> Win32/Rustock.gen!C infection, and does McAfee not pick this up?

> >>

> >> "Peter Foldes" wrote:

> >>

> >> > Download - rustbfix.exe and save it to your desktop.

> >> >

> >> > If a Rustock.b-infection is found, you will be asked to reboot the computer.

> >> >

> >> > After when you reboot it will take some time for the Desktop to come up. You might need to reboot 2 times , depending.

> >> >

> >> > When the desktop will come up you will have 1-2 logfiles that will show up for you. The infection should be gone. If not post those log files here.

> >> >

> >> >

> >> > --

> >> > Peter

> >> >

> >> > Please Reply to Newsgroup for the benefit of others

> >> > Requests for assistance by email can not and will not be acknowledged.

> >> >

> >> > "TaurArian [MS-MVP]" <taurarianREMOVECAPS@gmail.com> wrote in message news:eliUBM$3HHA.3400@TK2MSFTNGP03.phx.gbl...

> >> > >

> >> > >

> >> > > "Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in message

> >> > > news:23E8EE0D-6ACA-4D89-9598-6EFBD760C99D@microsoft.com...

> >> > > | Apologies if this appears twice - had a crash just as I first posted re this!

> >> > > | Running XP, have had a frustrating few weeks with repeated random crashes,

> >> > > | BSOD etc. Twice I couldn't boot at all and repaired (not quite a reinstall)

> >> > > | using the CD supplied. After some of the crashes got the error report from

> >> > > | MS that I was infected with Win32/Rustock.gen!C, and directing me to an

> >> > > | online scan that always crashed before completing, although several complete

> >> > > | and up to date McAfee scans have found nothing.

> >> > > | Possibly related to this I have had major problems with updates downloading

> >> > > | but not installing. For a week or so I kept getting the message that Update

> >> > > | installer 3.1 (I think ... from memory) could not be installed. I Googled re

> >> > > | this and found a workaround via regedit and did install the update installer,

> >> > > | after which a number of other updates could be installed, but now no longer.

> >> > > | It keeps hanging when trying to install IE7 (I currently have IE6), and I

> >> > > | need to ctrl/alt/delete out of it. Even when I try a custom install without

> >> > > | IE7 it still doesn't complete installation, and is currently frozen - I am

> >> > > | posting this on another computer provided by work.

> >> > > | I am normally a patient man, but am sorely tempted to throw a brick at the

> >> > > | computer. Some unkind colleagues have suggested I install Linux, but I feel

> >> > > | I am only moderately computer literate and not really sufficient of a nerd to

> >> > > | do this.

> >> > > | Any relatively simple solutions? Or would the simplest and easiest solution

> >> > > | be to reinstall Windows and start again? - I have backed up all essential

> >> > > | files so this wouldn't be a total disaster.

> >> > > | HELP!

> >> > >

> >> > >

> >> > >

> >> > > What concerns me is "Win32/Rustock.gen!C"

> >> > >

> >> > > xposted to security.virus for convenience.

> >> > >

> >> > > Security - Viruses

> >> > > OE client -

> >> > > news://msnews.microsoft.com/microsoft.public.security.virus

> >> > > or

> >> > >

> >> > > Web client -

> >> > > http://www.microsoft.com/technet/community....security.virus

> >> > >

> >> > >

> >> > > --

> >> > > ====================================

> >> > > TaurArian [MS-MVP] 2005-2008 - Australia

> >> > > ====================================

> >> > > How to make a good post: http://www.dts-l.org/goodpost.htm

> >> > > Defending your machine: http://defendingyourmachine2.blogspot.com/

> >> > > http://taurarian.mvps.org/index.htm

> >> > >

> >> > > Emails will not be acknowledged - please post to the newsgroup so all may benefit.

> >> > >

> >> > >

> >> ></span></span>

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

I believe I can help you with the failed Windows update. Apparently this

has really become a common problem that I am sure they are working on. The

fix is fairly easy and has been successful for me on several computers with

the same problem, always different downloads continue to fail and the error

codes differ. But, the problem is the same. Sometimes a Windows Update (or

several) fail to install.

First, go to the Windows Update site. On the left is an option to view your

update history. There you will find any and all updates that have failed.

Write down the KB number of the update. If you click the red button with the

x near the word fail, you will get the error code. You may want to write this

down just in case it could lead you to a future problem.

Then take your KB numbers to:

http://support.microsoft.com/?kbid=323166

Just follow the step by step directions. It is not as hard as it sounds and

it worked great for me several times.

I hope this helps.

Barkimmy

<span style="color:blue"><span style="color:green"><span style="color:darkred">

> > > | Possibly related to this I have had major problems with updates downloading

> > > | but not installing. For a week or so I kept getting the message that Update

> > > | installer 3.1 (I think ... from memory) could not be installed. I Googled re

> > > | this and found a workaround via regedit and did install the update installer,

> > > | after which a number of other updates could be installed, but now no longer.

> > > | It keeps hanging when trying to install IE7 (I currently have IE6), and I

> > > | need to ctrl/alt/delete out of it. Even when I try a custom install without

> > > | IE7 it still doesn't complete installation, and is currently frozen - I am

> > > | posting this on another computer provided by work.

> > > | I am normally a patient man, but am sorely tempted to throw a brick at the

> > > | computer. Some unkind colleagues have suggested I install Linux, but I feel

> > > | I am only moderately computer literate and not really sufficient of a nerd to

> > > | do this.

> > > | Any relatively simple solutions? Or would the simplest and easiest solution

> > > | be to reinstall Windows and start again? - I have backed up all essential

> > > | files so this wouldn't be a total disaster.

> > > | HELP!

> > > --

> > > ====================================

> > > TaurArian [MS-MVP] 2005-2008 - Australia

> > > ====================================

> > > How to make a good post: http://www.dts-l.org/goodpost.htm

> > > Defending your machine: http://defendingyourmachine2.blogspot.com/

> > > http://taurarian.mvps.org/index.htm

> > >

> > > Emails will not be acknowledged - please post to the newsgroup so all may benefit.

> > >

> > ></span>

> > </span></span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

[This thread is from Aug-07]

Barkimmy wrote:<span style="color:blue">

> I believe I can help you with the failed Windows update. Apparently this

> has really become a common problem that I am sure they are working on. The

> fix is fairly easy and has been successful for me on several computers

> with

> the same problem, always different downloads continue to fail and the

> error

> codes differ. But, the problem is the same. Sometimes a Windows Update (or

> several) fail to install.

>

> First, go to the Windows Update site. On the left is an option to view

> your

> update history. There you will find any and all updates that have failed.

> Write down the KB number of the update. If you click the red button with

> the

> x near the word fail, you will get the error code. You may want to write

> this down just in case it could lead you to a future problem.

>

> Then take your KB numbers to:

>

> http://support.microsoft.com/?kbid=323166

>

> Just follow the step by step directions. It is not as hard as it sounds

> and

> it worked great for me several times.

>

> I hope this helps.

>

> Barkimmy

>

><span style="color:green"><span style="color:darkred">

>>>>> Possibly related to this I have had major problems with updates

>>>>> downloading but not installing. For a week or so I kept getting the

>>>>> message that Update installer 3.1 (I think ... from memory) could not

>>>>> be installed. I Googled re this and found a workaround via regedit

>>>>> and

>>>>> did install the update installer, after which a number of other

>>>>> updates

>>>>> could be installed, but now no longer. It keeps hanging when trying to

>>>>> install IE7 (I currently have IE6), and I need to ctrl/alt/delete out

>>>>> of it. Even when I try a custom install without IE7 it still doesn't

>>>>> complete installation, and is currently frozen - I am posting this on

>>>>> another computer provided by work.

>>>>> I am normally a patient man, but am sorely tempted to throw a brick at

>>>>> the computer. Some unkind colleagues have suggested I install Linux,

>>>>> but I feel I am only moderately computer literate and not really

>>>>> sufficient of a nerd to do this.

>>>>> Any relatively simple solutions? Or would the simplest and easiest

>>>>> solution be to reinstall Windows and start again? - I have backed up

>>>>> all essential files so this wouldn't be a total disaster.

>>>>> HELP!

>>>> --

>>>> ====================================

>>>> TaurArian [MS-MVP] 2005-2008 - Australia

>>>> ====================================

>>>> How to make a good post: http://www.dts-l.org/goodpost.htm

>>>> Defending your machine: http://defendingyourmachine2.blogspot.com/

>>>> http://taurarian.mvps.org/index.htm

>>>>

>>>> Emails will not be acknowledged - please post to the newsgroup so all

>>>> may benefit. </span></span></span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

I know. But this is still an ongoing problem. If I ran across this thread

looking for my problem who's to say someone else couldn't as well. Would this

one be pulled out of the data base and never get found by query, (search).

Perhaps you were trying to make a different point and I misunderstood you.

After all, you found your way here after all this time,too. I apologize if I

did something inappropriate on this site. I just figured a thread still

readable, and not fully answered, was a thread still open. Let me know if I

was wrong. I am still new to this site.

Barkimmy

--

When you have 15 grandchildren you don''t let a persnickity obnoxious

computer get you down. There are times I wish I could just reboot the kids,

though.

"PA Bear [MS MVP]" wrote:

<span style="color:blue">

> [This thread is from Aug-07]

>

> Barkimmy wrote:<span style="color:green">

> > I believe I can help you with the failed Windows update. Apparently this

> > has really become a common problem that I am sure they are working on. The

> > fix is fairly easy and has been successful for me on several computers

> > with

> > the same problem, always different downloads continue to fail and the

> > error

> > codes differ. But, the problem is the same. Sometimes a Windows Update (or

> > several) fail to install.

> >

> > First, go to the Windows Update site. On the left is an option to view

> > your

> > update history. There you will find any and all updates that have failed.

> > Write down the KB number of the update. If you click the red button with

> > the

> > x near the word fail, you will get the error code. You may want to write

> > this down just in case it could lead you to a future problem.

> >

> > Then take your KB numbers to:

> >

> > http://support.microsoft.com/?kbid=323166

> >

> > Just follow the step by step directions. It is not as hard as it sounds

> > and

> > it worked great for me several times.

> >

> > I hope this helps.

> >

> > Barkimmy

> >

> ><span style="color:darkred">

> >>>>> Possibly related to this I have had major problems with updates

> >>>>> downloading but not installing. For a week or so I kept getting the

> >>>>> message that Update installer 3.1 (I think ... from memory) could not

> >>>>> be installed. I Googled re this and found a workaround via regedit

> >>>>> and

> >>>>> did install the update installer, after which a number of other

> >>>>> updates

> >>>>> could be installed, but now no longer. It keeps hanging when trying to

> >>>>> install IE7 (I currently have IE6), and I need to ctrl/alt/delete out

> >>>>> of it. Even when I try a custom install without IE7 it still doesn't

> >>>>> complete installation, and is currently frozen - I am posting this on

> >>>>> another computer provided by work.

> >>>>> I am normally a patient man, but am sorely tempted to throw a brick at

> >>>>> the computer. Some unkind colleagues have suggested I install Linux,

> >>>>> but I feel I am only moderately computer literate and not really

> >>>>> sufficient of a nerd to do this.

> >>>>> Any relatively simple solutions? Or would the simplest and easiest

> >>>>> solution be to reinstall Windows and start again? - I have backed up

> >>>>> all essential files so this wouldn't be a total disaster.

> >>>>> HELP!

> >>>> --

> >>>> ====================================

> >>>> TaurArian [MS-MVP] 2005-2008 - Australia

> >>>> ====================================

> >>>> How to make a good post: http://www.dts-l.org/goodpost.htm

> >>>> Defending your machine: http://defendingyourmachine2.blogspot.com/

> >>>> http://taurarian.mvps.org/index.htm

> >>>>

> >>>> Emails will not be acknowledged - please post to the newsgroup so all

> >>>> may benefit. </span></span>

>

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

donotspam wrote:

<span style="color:blue">

> I know. But this is still an ongoing problem. If I ran across this thread

> looking for my problem who's to say someone else couldn't as well. Would

> this one be pulled out of the data base and never get found by query,

> (search). Perhaps you were trying to make a different point and I

> misunderstood you. After all, you found your way here after all this

> time,too. I apologize if I did something inappropriate on this site. I

> just figured a thread still readable, and not fully answered, was a thread

> still open. Let me know if I was wrong. I am still new to this site.</span>

You're wrong only because you didn't realize this isn't a "site" but the web

interface to a newsgroup and therefore the thread may never be downloaded,

depending on how people have set their newsreaders up.

There is absolutely nothing for you to apologize for; you made an honest

mistake (which hurts no one) and one that is made by newcomers to the MS

public newsgroups every day. The web interface is the clunkiest, worst way

to access these groups. Instead, you should consider setting up a

newsreader - extremely easy to do. See the information below:

Since you are using the web interface, you may not realize that this is

really a newsgroup. You will get far more out of this resource if you learn

to use a newsreader. There are many good newsreaders for Windows, but you

can use Outlook Express (XP) or Windows Mail (Vista) since you already have

it. Here are some links to information about newsgroups:

About Usenet:

http://en.wikipedia.org/wiki/Usenet

http://www.faqs.org/faqs/ - Usenet FAQs from the Internet FAQ Archives

http://www.usenetmonster.com/infocenter/

http://www.elephantboycomputers.com/page2.html#Usenet - a brief explanation

of newsgroups

Outlook Express/Windows Mail as Newsreader:

http://michaelstevenstech.com/outlookexpressnewreader.htm

http://rickrogers.org/setupoe.htm

http://vistasupport.mvps.org/accessing_new...indows_mail.htm

How to Post:

http://www.elephantboycomputers.com/page2.html#Usenet

http://support.microsoft.com/default.aspx/kb/555375 - How to Ask a Question

http://users.tpg.com.au/bzyhjr/liszt.htm - How Not to Get Technical Help on

Usenet

http://www.catb.org/~esr/faqs/smart-questions.html

http://aumha.org/nntp.htm - list of MS newsgroups

microsoft.public.test.here - MS group to test if your newsreader is working

properly

http://www3.telus.net/dandemar/munad.htm - how to munge email address

http://en.wikipedia.org/wiki/Crossposting - crossposting

http://www.blakjak.demon.co.uk/mul_crss.htm - multiposting

Other Newsreaders for Windows:

http://www.forteinc.com/main/homepage.php - Forte

http://www.mozilla.org - Thunderbird

http://gravity.tbates.org/

http://www.40tude.com/dialog/

http://xnews.newsguy.com/

Malke

--

MS-MVP

Elephant Boy Computers

www.elephantboycomputers.com

Don't Panic!

Re: repeated crashes and failure to update ... is this Win32/Rusto

A few points to add to my colleague Malke's comments:

The person who started this thread (Original Poster or OP) and who was

having the problem (possibly due to a Win32/Rustock.gen!C infection; cf.

http://groups.google.com/group/microsoft.p...5a61b8d82f36160)

hasn't been heard from since mid-August 2007, so there's little chance he'll

see your reply offering assistance.

It's highly unlikely that the OP would not have been able to successfully

install anything downloaded from the Windows Update Catalog (KB323166). And

in any event, he needed to get Windows fixed, not just install a few

updates.

A machine infected by a W32/Rustock-variant would most likely have other

infections (e.g., Zlob; SDBot; Vundo), all of which affect Windows, not just

updating. Expert assistance would be required and many steps would need to

be taken in order to get the machine clean so that updating can take place;

e.g., http://forums.spywareinfo.com/lofiversion/...php/t97116.html

--

~PA Bear

Barkimmy wrote:<span style="color:blue">

> I know. But this is still an ongoing problem. If I ran across this thread

> looking for my problem who's to say someone else couldn't as well. Would

> this one be pulled out of the data base and never get found by query,

> (search). Perhaps you were trying to make a different point and I

> misunderstood you. After all, you found your way here after all this

> time,too. I apologize if I did something inappropriate on this site. I

> just

> figured a thread still readable, and not fully answered, was a thread

> still

> open. Let me know if I was wrong. I am still new to this site.

><span style="color:green">

>> [This thread is from Aug-07]

>>

>> Barkimmy wrote:<span style="color:darkred">

>>> I believe I can help you with the failed Windows update. Apparently

>>> this

>>> has really become a common problem that I am sure they are working on.

>>> The

>>> fix is fairly easy and has been successful for me on several computers

>>> with

>>> the same problem, always different downloads continue to fail and the

>>> error

>>> codes differ. But, the problem is the same. Sometimes a Windows Update

>>> (or

>>> several) fail to install.

>>>

>>> First, go to the Windows Update site. On the left is an option to view

>>> your

>>> update history. There you will find any and all updates that have

>>> failed.

>>> Write down the KB number of the update. If you click the red button with

>>> the

>>> x near the word fail, you will get the error code. You may want to write

>>> this down just in case it could lead you to a future problem.

>>>

>>> Then take your KB numbers to:

>>>

>>> http://support.microsoft.com/?kbid=323166

>>>

>>> Just follow the step by step directions. It is not as hard as it sounds

>>> and

>>> it worked great for me several times.

>>>

>>> I hope this helps.

>>>

>>>>>>> Possibly related to this I have had major problems with updates

>>>>>>> downloading but not installing. For a week or so I kept getting the

>>>>>>> message that Update installer 3.1 (I think ... from memory) could

>>>>>>> not

>>>>>>> be installed. I Googled re this and found a workaround via regedit

>>>>>>> and

>>>>>>> did install the update installer, after which a number of other

>>>>>>> updates

>>>>>>> could be installed, but now no longer. It keeps hanging when trying

>>>>>>> to

>>>>>>> install IE7 (I currently have IE6), and I need to ctrl/alt/delete

>>>>>>> out

>>>>>>> of it. Even when I try a custom install without IE7 it still

>>>>>>> doesn't

>>>>>>> complete installation, and is currently frozen - I am posting this

>>>>>>> on

>>>>>>> another computer provided by work.

>>>>>>> I am normally a patient man, but am sorely tempted to throw a brick

>>>>>>> at

>>>>>>> the computer. Some unkind colleagues have suggested I install

>>>>>>> Linux,

>>>>>>> but I feel I am only moderately computer literate and not really

>>>>>>> sufficient of a nerd to do this.

>>>>>>> Any relatively simple solutions? Or would the simplest and easiest

>>>>>>> solution be to reinstall Windows and start again? - I have backed up

>>>>>>> all essential files so this wouldn't be a total disaster.

>>>>>>> HELP!

>>>>>> --

>>>>>> ====================================

>>>>>> TaurArian [MS-MVP] 2005-2008 - Australia

>>>>>> ====================================

>>>>>> How to make a good post: http://www.dts-l.org/goodpost.htm

>>>>>> Defending your machine: http://defendingyourmachine2.blogspot.com/

>>>>>> http://taurarian.mvps.org/index.htm

>>>>>>

>>>>>> Emails will not be acknowledged - please post to the newsgroup so all

>>>>>> may benefit. </span></span></span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

Ah well ... just shows how wrong you can be! The original poster is still

around and did read your posts - thank you.

Largely now overtaken by events.

I did eventually get rid of the rustock virus and repaired my installation

from the original CD - just short of a reinstall.

Updates now OK, and no crashes or BSOD for quite a while, but have opted out

of IE7 updates. My broadband is provided by BTYahoo who have their own

browser (an IE6 variant) which is incomptaible (at present) with IE7.

Richard

"PA Bear [MS MVP]" wrote:

<span style="color:blue">

> A few points to add to my colleague Malke's comments:

>

> The person who started this thread (Original Poster or OP) and who was

> having the problem (possibly due to a Win32/Rustock.gen!C infection; cf.

> http://groups.google.com/group/microsoft.p...5a61b8d82f36160)

> hasn't been heard from since mid-August 2007, so there's little chance he'll

> see your reply offering assistance.

>

> It's highly unlikely that the OP would not have been able to successfully

> install anything downloaded from the Windows Update Catalog (KB323166). And

> in any event, he needed to get Windows fixed, not just install a few

> updates.

>

> A machine infected by a W32/Rustock-variant would most likely have other

> infections (e.g., Zlob; SDBot; Vundo), all of which affect Windows, not just

> updating. Expert assistance would be required and many steps would need to

> be taken in order to get the machine clean so that updating can take place;

> e.g., http://forums.spywareinfo.com/lofiversion/...php/t97116.html

> --

> ~PA Bear

>

>

> Barkimmy wrote:<span style="color:green">

> > I know. But this is still an ongoing problem. If I ran across this thread

> > looking for my problem who's to say someone else couldn't as well. Would

> > this one be pulled out of the data base and never get found by query,

> > (search). Perhaps you were trying to make a different point and I

> > misunderstood you. After all, you found your way here after all this

> > time,too. I apologize if I did something inappropriate on this site. I

> > just

> > figured a thread still readable, and not fully answered, was a thread

> > still

> > open. Let me know if I was wrong. I am still new to this site.

> ><span style="color:darkred">

> >> [This thread is from Aug-07]

> >>

> >> Barkimmy wrote:

> >>> I believe I can help you with the failed Windows update. Apparently

> >>> this

> >>> has really become a common problem that I am sure they are working on.

> >>> The

> >>> fix is fairly easy and has been successful for me on several computers

> >>> with

> >>> the same problem, always different downloads continue to fail and the

> >>> error

> >>> codes differ. But, the problem is the same. Sometimes a Windows Update

> >>> (or

> >>> several) fail to install.

> >>>

> >>> First, go to the Windows Update site. On the left is an option to view

> >>> your

> >>> update history. There you will find any and all updates that have

> >>> failed.

> >>> Write down the KB number of the update. If you click the red button with

> >>> the

> >>> x near the word fail, you will get the error code. You may want to write

> >>> this down just in case it could lead you to a future problem.

> >>>

> >>> Then take your KB numbers to:

> >>>

> >>> http://support.microsoft.com/?kbid=323166

> >>>

> >>> Just follow the step by step directions. It is not as hard as it sounds

> >>> and

> >>> it worked great for me several times.

> >>>

> >>> I hope this helps.

> >>>

> >>>>>>> Possibly related to this I have had major problems with updates

> >>>>>>> downloading but not installing. For a week or so I kept getting the

> >>>>>>> message that Update installer 3.1 (I think ... from memory) could

> >>>>>>> not

> >>>>>>> be installed. I Googled re this and found a workaround via regedit

> >>>>>>> and

> >>>>>>> did install the update installer, after which a number of other

> >>>>>>> updates

> >>>>>>> could be installed, but now no longer. It keeps hanging when trying

> >>>>>>> to

> >>>>>>> install IE7 (I currently have IE6), and I need to ctrl/alt/delete

> >>>>>>> out

> >>>>>>> of it. Even when I try a custom install without IE7 it still

> >>>>>>> doesn't

> >>>>>>> complete installation, and is currently frozen - I am posting this

> >>>>>>> on

> >>>>>>> another computer provided by work.

> >>>>>>> I am normally a patient man, but am sorely tempted to throw a brick

> >>>>>>> at

> >>>>>>> the computer. Some unkind colleagues have suggested I install

> >>>>>>> Linux,

> >>>>>>> but I feel I am only moderately computer literate and not really

> >>>>>>> sufficient of a nerd to do this.

> >>>>>>> Any relatively simple solutions? Or would the simplest and easiest

> >>>>>>> solution be to reinstall Windows and start again? - I have backed up

> >>>>>>> all essential files so this wouldn't be a total disaster.

> >>>>>>> HELP!

> >>>>>> --

> >>>>>> ====================================

> >>>>>> TaurArian [MS-MVP] 2005-2008 - Australia

> >>>>>> ====================================

> >>>>>> How to make a good post: http://www.dts-l.org/goodpost.htm

> >>>>>> Defending your machine: http://defendingyourmachine2.blogspot.com/

> >>>>>> http://taurarian.mvps.org/index.htm

> >>>>>>

> >>>>>> Emails will not be acknowledged - please post to the newsgroup so all

> >>>>>> may benefit. </span></span>

>

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

A fascinating insight into how matters may be construed by some, Richard! I

was pleased to hear that you have erradicated your malware without the need

for the procedures carried out by 'Banwar' on the SWI forum, cited as an

example by PA Bear.

I was impressed by Barkimmy (a fellow granddad!) taking the time and trouble

to try to help. Malke responded (I believe Malke is female) with an array of

'links' to other sites. I'd bet real money that Richard and/or Barkimmy

clicked on one or more of those links without giving it a second thought. I

once had a notion that, as this place has Microsoft in its name, someone

would be policing same. As far as I know, this is NOT so - no-one is

responsible for checking that links placed here take one to a 'safe' place.

A wonderful opportunity for 'the bad guys' to prey upon innocent folk, eh?

Here is the signature block of PA Bear, taken from AumHa.net:-

~Robear Dyer (PA Bear)

AumHa VSOP, Admin & Moderator; MS MVP-Internet Explorer, Mail, Consumer

Security, Windows Desktop Experience - since 2002

Steely-eyed Missile Man, Sensei, Mule Skinner & Smart Alex

Wlth so many folk visiting AumHa for assistance with Malware erradication, I

cannot help wondering why Robear cited a Spywareinfo site for his example,

rather than one from AumHa. Perhaps Robear will explain why we should trust

others when they tell us to download 'unknown' programmes onto our machines

without us having any idea what effect they might have.

Dave

"Richard Henderson" <RichardHenderson@discussions.microsoft.com> wrote in

message news:9933CFEF-CA4D-49F3-928B-94DCA4A21F7A@microsoft.com...<span style="color:blue">

> Ah well ... just shows how wrong you can be! The original poster is still

> around and did read your posts - thank you.

> Largely now overtaken by events.

> I did eventually get rid of the rustock virus and repaired my installation

> from the original CD - just short of a reinstall.

> Updates now OK, and no crashes or BSOD for quite a while, but have opted

> out

> of IE7 updates. My broadband is provided by BTYahoo who have their own

> browser (an IE6 variant) which is incomptaible (at present) with IE7.

> Richard</span>

<snip>

Re: repeated crashes and failure to update ... is this Win32/Rusto

"BoaterDave" <BoaterDave@nospam.invalid> after much thought,came up

with this jewel in news:uGk0zJBiIHA.5900@TK2MSFTNGP02.phx.gbl:

<span style="color:blue">

> A fascinating insight into how matters may be construed by some,

> Richard! I was pleased to hear that you have erradicated your

> malware without the need for the procedures carried out by

> 'Banwar' on the SWI forum, cited as an example by PA Bear.</span>

You're not trolling for Bear, are you dave?

<span style="color:blue">

> I was impressed by Barkimmy (a fellow granddad!) taking the time

> and trouble to try to help. </span>

Chances were good that it was a waste of bandwidth since many posters

do not "take the time and trouble" to follow-up.

<span style="color:blue">

> Malke responded (I believe Malke is

> female) with an array of 'links' to other sites. I'd bet real

> money that Richard and/or Barkimmy clicked on one or more of those

> links without giving it a second thought. I once had a notion</span>

I'll bet those two brain cells were pissed off!!!

<span style="color:blue">

> that, as this place has Microsoft in its name, someone would be

> policing same. As far as I know, this is NOT so - no-one is

> responsible for checking that links placed here take one to a

> 'safe' place. A wonderful opportunity for 'the bad guys' to prey

> upon innocent folk, eh? </span>

This is a free, public forum. Even you are allowed to post here.

Messages are not "approved" before posting but some have been removed

from the MS servers for "bad" content and still remain on other

servers.

<span style="color:blue">

> Here is the signature block of PA Bear, taken from AumHa.net:-

>

> ~Robear Dyer (PA Bear)

> AumHa VSOP, Admin & Moderator; MS MVP-Internet Explorer, Mail,

> Consumer Security, Windows Desktop Experience - since 2002

> Steely-eyed Missile Man, Sensei, Mule Skinner & Smart Alex</span>

and what is your sig? troll wanabe????

<span style="color:blue">

>

>

> Wlth so many folk visiting AumHa for assistance with Malware

> erradication, I cannot help wondering why Robear cited a

> Spywareinfo site for his example, rather than one from AumHa.</span>

Could be simple, it was the first entry using google?

<span style="color:blue">

> Perhaps Robear will explain why we should trust others when they

> tell us to download 'unknown' programmes onto our machines without

> us having any idea what effect they might have. </span>

Who to trust? An age-old question.(or is that old-age)

<span style="color:blue">

>

> Dave</span>

is this supposed to be some kind of delimiter????<span style="color:blue">

>

> </span>

<span style="color:blue">

> "Richard Henderson" <RichardHenderson@discussions.microsoft.com>

> wrote in message

> news:9933CFEF-CA4D-49F3-928B-94DCA4A21F7A@microsoft.com... <span style="color:green">

>> Ah well ... just shows how wrong you can be! The original poster

>> is still around and did read your posts - thank you.

>> Largely now overtaken by events.

>> I did eventually get rid of the rustock virus and repaired my

>> installation from the original CD - just short of a reinstall.

>> Updates now OK, and no crashes or BSOD for quite a while, but

>> have opted out

>> of IE7 updates. My broadband is provided by BTYahoo who have

>> their own browser (an IE6 variant) which is incomptaible (at

>> present) with IE7. Richard</span>

>

> <snip> </span>

max

--

Virus Removal http://max.shplink.com/removal.html

Keep Clean http://max.shplink.com/keepingclean.html

Tools http://max.shplink.com/tools.html

Change nomail.afraid.org to gmail.com to reply by email.

I was lost,but now I'm blind.

Re: repeated crashes and failure to update ... is this Win32/Rusto

When I replied to the post I realized that the original poster had made

his/her question in 2 or more parts. As his/her W32/Rustock question had been

answered, and I had not run across that as of yet, I didn't see any reason

for me to answer that part. But I did notice that his/her question about not

being able to install some updates had not been answered yet. I had run

across that one, on several computers, each with different updates being

obstinate and each coming up with a different error code. I was able to

manually download and install the troublesome updates and solved that problem

on each computer that I found it on.

--

When you have 15 grandchildren you don''t let a persnickity obnoxious

computer get you down. There are times I wish I could just reboot the kids,

though.

"PA Bear [MS MVP]" wrote:

<span style="color:blue">

> A few points to add to my colleague Malke's comments:

>

> The person who started this thread (Original Poster or OP) and who was

> having the problem (possibly due to a Win32/Rustock.gen!C infection; cf.

> http://groups.google.com/group/microsoft.p...5a61b8d82f36160)

> hasn't been heard from since mid-August 2007, so there's little chance he'll

> see your reply offering assistance.

>

> It's highly unlikely that the OP would not have been able to successfully

> install anything downloaded from the Windows Update Catalog (KB323166). And

> in any event, he needed to get Windows fixed, not just install a few

> updates.

>

> A machine infected by a W32/Rustock-variant would most likely have other

> infections (e.g., Zlob; SDBot; Vundo), all of which affect Windows, not just

> updating. Expert assistance would be required and many steps would need to

> be taken in order to get the machine clean so that updating can take place;

> e.g., http://forums.spywareinfo.com/lofiversion/...php/t97116.html

> --

> ~PA Bear

>

>

> Barkimmy wrote:<span style="color:green">

> > I know. But this is still an ongoing problem. If I ran across this thread

> > looking for my problem who's to say someone else couldn't as well. Would

> > this one be pulled out of the data base and never get found by query,

> > (search). Perhaps you were trying to make a different point and I

> > misunderstood you. After all, you found your way here after all this

> > time,too. I apologize if I did something inappropriate on this site. I

> > just

> > figured a thread still readable, and not fully answered, was a thread

> > still

> > open. Let me know if I was wrong. I am still new to this site.

> ><span style="color:darkred">

> >> [This thread is from Aug-07]

> >>

> >> Barkimmy wrote:

> >>> I believe I can help you with the failed Windows update. Apparently

> >>> this

> >>> has really become a common problem that I am sure they are working on.

> >>> The

> >>> fix is fairly easy and has been successful for me on several computers

> >>> with

> >>> the same problem, always different downloads continue to fail and the

> >>> error

> >>> codes differ. But, the problem is the same. Sometimes a Windows Update

> >>> (or

> >>> several) fail to install.

> >>>

> >>> First, go to the Windows Update site. On the left is an option to view

> >>> your

> >>> update history. There you will find any and all updates that have

> >>> failed.

> >>> Write down the KB number of the update. If you click the red button with

> >>> the

> >>> x near the word fail, you will get the error code. You may want to write

> >>> this down just in case it could lead you to a future problem.

> >>>

> >>> Then take your KB numbers to:

> >>>

> >>> http://support.microsoft.com/?kbid=323166

> >>>

> >>> Just follow the step by step directions. It is not as hard as it sounds

> >>> and

> >>> it worked great for me several times.

> >>>

> >>> I hope this helps.

> >>>

> >>>>>>> Possibly related to this I have had major problems with updates

> >>>>>>> downloading but not installing. For a week or so I kept getting the

> >>>>>>> message that Update installer 3.1 (I think ... from memory) could

> >>>>>>> not

> >>>>>>> be installed. I Googled re this and found a workaround via regedit

> >>>>>>> and

> >>>>>>> did install the update installer, after which a number of other

> >>>>>>> updates

> >>>>>>> could be installed, but now no longer. It keeps hanging when trying

> >>>>>>> to

> >>>>>>> install IE7 (I currently have IE6), and I need to ctrl/alt/delete

> >>>>>>> out

> >>>>>>> of it. Even when I try a custom install without IE7 it still

> >>>>>>> doesn't

> >>>>>>> complete installation, and is currently frozen - I am posting this

> >>>>>>> on

> >>>>>>> another computer provided by work.

> >>>>>>> I am normally a patient man, but am sorely tempted to throw a brick

> >>>>>>> at

> >>>>>>> the computer. Some unkind colleagues have suggested I install

> >>>>>>> Linux,

> >>>>>>> but I feel I am only moderately computer literate and not really

> >>>>>>> sufficient of a nerd to do this.

> >>>>>>> Any relatively simple solutions? Or would the simplest and easiest

> >>>>>>> solution be to reinstall Windows and start again? - I have backed up

> >>>>>>> all essential files so this wouldn't be a total disaster.

> >>>>>>> HELP!

> >>>>>> --

> >>>>>> ====================================

> >>>>>> TaurArian [MS-MVP] 2005-2008 - Australia

> >>>>>> ====================================

> >>>>>> How to make a good post: http://www.dts-l.org/goodpost.htm

> >>>>>> Defending your machine: http://defendingyourmachine2.blogspot.com/

> >>>>>> http://taurarian.mvps.org/index.htm

> >>>>>>

> >>>>>> Emails will not be acknowledged - please post to the newsgroup so all

> >>>>>> may benefit. </span></span>

>

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

Thanks for responding Max - nice of you to 'pop in'! style_emoticons/

I found someone else with your name, here: http://maxwachtel.blog.com/

Dave

--------------------------------------- (better?)

"What's in a Name?" <maxwachtel@nomail.afraid.org> wrote in message

news:Xns9A64EEC02D751whatsinaname@207.46.248.16...<span style="color:blue">

> "BoaterDave" <BoaterDave@nospam.invalid> after much thought,came up

> with this jewel in news:uGk0zJBiIHA.5900@TK2MSFTNGP02.phx.gbl:

><span style="color:green">

>> A fascinating insight into how matters may be construed by some,

>> Richard! I was pleased to hear that you have erradicated your

>> malware without the need for the procedures carried out by

>> 'Banwar' on the SWI forum, cited as an example by PA Bear.</span>

>

> You're not trolling for Bear, are you dave?

><span style="color:green">

>> I was impressed by Barkimmy (a fellow granddad!) taking the time

>> and trouble to try to help.</span>

>

> Chances were good that it was a waste of bandwidth since many posters

> do not "take the time and trouble" to follow-up.

><span style="color:green">

>> Malke responded (I believe Malke is

>> female) with an array of 'links' to other sites. I'd bet real

>> money that Richard and/or Barkimmy clicked on one or more of those

>> links without giving it a second thought. I once had a notion</span>

>

> I'll bet those two brain cells were pissed off!!!

><span style="color:green">

>> that, as this place has Microsoft in its name, someone would be

>> policing same. As far as I know, this is NOT so - no-one is

>> responsible for checking that links placed here take one to a

>> 'safe' place. A wonderful opportunity for 'the bad guys' to prey

>> upon innocent folk, eh?</span>

>

> This is a free, public forum. Even you are allowed to post here.

> Messages are not "approved" before posting but some have been removed

> from the MS servers for "bad" content and still remain on other

> servers.

>

><span style="color:green">

>> Here is the signature block of PA Bear, taken from AumHa.net:-

>>

>> ~Robear Dyer (PA Bear)

>> AumHa VSOP, Admin & Moderator; MS MVP-Internet Explorer, Mail,

>> Consumer Security, Windows Desktop Experience - since 2002

>> Steely-eyed Missile Man, Sensei, Mule Skinner & Smart Alex</span>

>

> and what is your sig? troll wanabe????

><span style="color:green">

>>

>>

>> Wlth so many folk visiting AumHa for assistance with Malware

>> erradication, I cannot help wondering why Robear cited a

>> Spywareinfo site for his example, rather than one from AumHa.</span>

>

> Could be simple, it was the first entry using google?

><span style="color:green">

>> Perhaps Robear will explain why we should trust others when they

>> tell us to download 'unknown' programmes onto our machines without

>> us having any idea what effect they might have.</span>

>

> Who to trust? An age-old question.(or is that old-age)

><span style="color:green">

>>

>> Dave</span>

>

> is this supposed to be some kind of delimiter????<span style="color:green">

>>

>> </span>

><span style="color:green">

>> "Richard Henderson" <RichardHenderson@discussions.microsoft.com>

>> wrote in message

>> news:9933CFEF-CA4D-49F3-928B-94DCA4A21F7A@microsoft.com...<span style="color:darkred">

>>> Ah well ... just shows how wrong you can be! The original poster

>>> is still around and did read your posts - thank you.

>>> Largely now overtaken by events.

>>> I did eventually get rid of the rustock virus and repaired my

>>> installation from the original CD - just short of a reinstall.

>>> Updates now OK, and no crashes or BSOD for quite a while, but

>>> have opted out

>>> of IE7 updates. My broadband is provided by BTYahoo who have

>>> their own browser (an IE6 variant) which is incomptaible (at

>>> present) with IE7. Richard</span>

>>

>> <snip></span>

>

> max

> --

> Virus Removal http://max.shplink.com/removal.html

> Keep Clean http://max.shplink.com/keepingclean.html

> Tools http://max.shplink.com/tools.html

> Change nomail.afraid.org to gmail.com to reply by email.

> I was lost,but now I'm blind.

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

"BoaterDave" <BoaterDave@nospam.invalid> after much thought,came up

with this jewel in news:uI5m5dMiIHA.5780@TK2MSFTNGP06.phx.gbl:

<span style="color:blue">

> Thanks for responding Max - nice of you to 'pop in'! style_emoticons/

>

> I found someone else with your name, here:

> http://maxwachtel.blog.com/ </span>

That's what we need in this family-less attorneys and more doctors.

<span style="color:blue">

>

> Dave

>

> --------------------------------------- (better?)</span>

No. A good delimiter looks like this

--

Get it now?

A proper newsreader will strip everything below it when repling.

If you must use Outlook Express,this tool will help-

http://home.in.tum.de/~jain/software/oe-quotefix/

<span style="color:blue">

>

> "What's in a Name?" <maxwachtel@nomail.afraid.org> wrote in

> message news:Xns9A64EEC02D751whatsinaname@207.46.248.16...<span style="color:green">

>> "BoaterDave" <BoaterDave@nospam.invalid> after much thought,came

>> up with this jewel in news:uGk0zJBiIHA.5900@TK2MSFTNGP02.phx.gbl:

>><span style="color:darkred">

>>> A fascinating insight into how matters may be construed by some,

>>> Richard! I was pleased to hear that you have erradicated your

>>> malware without the need for the procedures carried out by

>>> 'Banwar' on the SWI forum, cited as an example by PA Bear.</span>

>>

>> You're not trolling for Bear, are you dave?

>><span style="color:darkred">

>>> I was impressed by Barkimmy (a fellow granddad!) taking the time

>>> and trouble to try to help.</span>

>>

>> Chances were good that it was a waste of bandwidth since many

>> posters do not "take the time and trouble" to follow-up.

>><span style="color:darkred">

>>> Malke responded (I believe Malke is

>>> female) with an array of 'links' to other sites. I'd bet real

>>> money that Richard and/or Barkimmy clicked on one or more of

>>> those links without giving it a second thought. I once had a

>>> notion </span>

>>

>> I'll bet those two brain cells were pissed off!!!

>><span style="color:darkred">

>>> that, as this place has Microsoft in its name, someone would be

>>> policing same. As far as I know, this is NOT so - no-one is

>>> responsible for checking that links placed here take one to a

>>> 'safe' place. A wonderful opportunity for 'the bad guys' to prey

>>> upon innocent folk, eh?</span>

>>

>> This is a free, public forum. Even you are allowed to post here.

>> Messages are not "approved" before posting but some have been

>> removed from the MS servers for "bad" content and still remain on

>> other servers.

>>

>><span style="color:darkred">

>>> Here is the signature block of PA Bear, taken from AumHa.net:-

>>>

>>> ~Robear Dyer (PA Bear)

>>> AumHa VSOP, Admin & Moderator; MS MVP-Internet Explorer, Mail,

>>> Consumer Security, Windows Desktop Experience - since 2002

>>> Steely-eyed Missile Man, Sensei, Mule Skinner & Smart Alex</span>

>>

>> and what is your sig? troll wanabe????

>><span style="color:darkred">

>>>

>>>

>>> Wlth so many folk visiting AumHa for assistance with Malware

>>> erradication, I cannot help wondering why Robear cited a

>>> Spywareinfo site for his example, rather than one from AumHa.</span>

>>

>> Could be simple, it was the first entry using google?

>><span style="color:darkred">

>>> Perhaps Robear will explain why we should trust others when they

>>> tell us to download 'unknown' programmes onto our machines

>>> without us having any idea what effect they might have.</span>

>>

>> Who to trust? An age-old question.(or is that old-age)

>><span style="color:darkred">

>>>

>>> Dave</span>

>>

>> is this supposed to be some kind of delimiter????<span style="color:darkred">

>>>

>>> </span>

>><span style="color:darkred">

>>> "Richard Henderson" <RichardHenderson@discussions.microsoft.com>

>>> wrote in message

>>> news:9933CFEF-CA4D-49F3-928B-94DCA4A21F7A@microsoft.com...

>>>> Ah well ... just shows how wrong you can be! The original

>>>> poster is still around and did read your posts - thank you.

>>>> Largely now overtaken by events.

>>>> I did eventually get rid of the rustock virus and repaired my

>>>> installation from the original CD - just short of a reinstall.

>>>> Updates now OK, and no crashes or BSOD for quite a while, but

>>>> have opted out

>>>> of IE7 updates. My broadband is provided by BTYahoo who have

>>>> their own browser (an IE6 variant) which is incomptaible (at

>>>> present) with IE7. Richard

>>>

>>> <snip></span></span></span>

max

--

Virus Removal http://max.shplink.com/removal.html

Keep Clean http://max.shplink.com/keepingclean.html

Tools http://max.shplink.com/tools.html

Change nomail.afraid.org to gmail.com to reply by email.

I was lost,but now I'm blind.

Re: repeated crashes and failure to update ... is this Win32/Rusto

OK Max - I appreciate your help.

For others looking in:-

OE-QuoteFix will extend the functionality of MS Outlook Express in numerous

ways! Its main purpose is to modify message composition windows on-the-fly

to allow for correct quoting and to change the appearance of your plain-text

replies and forwards in general: move your signature, use compressed

indentation, have RFC compliant signatures, etc.

But the second feature is equally practical: OE-QuoteFix can instantly color

quoted passages (according to the level of indentation), fix bad quoting and

generally beautify messages as you view them in Outlook Express.

Dave

-- (better now?)

"What's in a Name?" <maxwachtel@nomail.afraid.org> wrote in message

news:Xns9A6565B256311whatsinaname@207.46.248.16...<span style="color:blue">

> "BoaterDave" <BoaterDave@nospam.invalid> after much thought,came up

> with this jewel in news:uI5m5dMiIHA.5780@TK2MSFTNGP06.phx.gbl:

><span style="color:green">

>> Thanks for responding Max - nice of you to 'pop in'! style_emoticons/

>>

>> I found someone else with your name, here:

>> http://maxwachtel.blog.com/</span>

>

> That's what we need in this family-less attorneys and more doctors.

><span style="color:green">

>>

>> Dave

>>

>> --------------------------------------- (better?)</span>

>

> No. A good delimiter looks like this

>

> --

>

> Get it now?

>

> A proper newsreader will strip everything below it when repling.

> If you must use Outlook Express,this tool will help-

> http://home.in.tum.de/~jain/software/oe-quotefix/

><span style="color:green">

>>

>> "What's in a Name?" <maxwachtel@nomail.afraid.org> wrote in

>> message news:Xns9A64EEC02D751whatsinaname@207.46.248.16...<span style="color:darkred">

>>> "BoaterDave" <BoaterDave@nospam.invalid> after much thought,came

>>> up with this jewel in news:uGk0zJBiIHA.5900@TK2MSFTNGP02.phx.gbl:

>>>

>>>> A fascinating insight into how matters may be construed by some,

>>>> Richard! I was pleased to hear that you have erradicated your

>>>> malware without the need for the procedures carried out by

>>>> 'Banwar' on the SWI forum, cited as an example by PA Bear.

>>>

>>> You're not trolling for Bear, are you dave?

>>>

>>>> I was impressed by Barkimmy (a fellow granddad!) taking the time

>>>> and trouble to try to help.

>>>

>>> Chances were good that it was a waste of bandwidth since many

>>> posters do not "take the time and trouble" to follow-up.

>>>

>>>> Malke responded (I believe Malke is

>>>> female) with an array of 'links' to other sites. I'd bet real

>>>> money that Richard and/or Barkimmy clicked on one or more of

>>>> those links without giving it a second thought. I once had a

>>>> notion

>>>

>>> I'll bet those two brain cells were pissed off!!!

>>>

>>>> that, as this place has Microsoft in its name, someone would be

>>>> policing same. As far as I know, this is NOT so - no-one is

>>>> responsible for checking that links placed here take one to a

>>>> 'safe' place. A wonderful opportunity for 'the bad guys' to prey

>>>> upon innocent folk, eh?

>>>

>>> This is a free, public forum. Even you are allowed to post here.

>>> Messages are not "approved" before posting but some have been

>>> removed from the MS servers for "bad" content and still remain on

>>> other servers.

>>>

>>>

>>>> Here is the signature block of PA Bear, taken from AumHa.net:-

>>>>

>>>> ~Robear Dyer (PA Bear)

>>>> AumHa VSOP, Admin & Moderator; MS MVP-Internet Explorer, Mail,

>>>> Consumer Security, Windows Desktop Experience - since 2002

>>>> Steely-eyed Missile Man, Sensei, Mule Skinner & Smart Alex

>>>

>>> and what is your sig? troll wanabe????

>>>

>>>>

>>>>

>>>> Wlth so many folk visiting AumHa for assistance with Malware

>>>> erradication, I cannot help wondering why Robear cited a

>>>> Spywareinfo site for his example, rather than one from AumHa.

>>>

>>> Could be simple, it was the first entry using google?

>>>

>>>> Perhaps Robear will explain why we should trust others when they

>>>> tell us to download 'unknown' programmes onto our machines

>>>> without us having any idea what effect they might have.

>>>

>>> Who to trust? An age-old question.(or is that old-age)

>>>

>>>>

>>>> Dave

>>>

>>> is this supposed to be some kind of delimiter????

>>>>

>>>>

>>>

>>>> "Richard Henderson" <RichardHenderson@discussions.microsoft.com>

>>>> wrote in message

>>>> news:9933CFEF-CA4D-49F3-928B-94DCA4A21F7A@microsoft.com...

>>>>> Ah well ... just shows how wrong you can be! The original

>>>>> poster is still around and did read your posts - thank you.

>>>>> Largely now overtaken by events.

>>>>> I did eventually get rid of the rustock virus and repaired my

>>>>> installation from the original CD - just short of a reinstall.

>>>>> Updates now OK, and no crashes or BSOD for quite a while, but

>>>>> have opted out

>>>>> of IE7 updates. My broadband is provided by BTYahoo who have

>>>>> their own browser (an IE6 variant) which is incomptaible (at

>>>>> present) with IE7. Richard

>>>>

>>>> <snip></span></span>

> max

> --

> Virus Removal http://max.shplink.com/removal.html

> Keep Clean http://max.shplink.com/keepingclean.html

> Tools http://max.shplink.com/tools.html

> Change nomail.afraid.org to gmail.com to reply by email.

> I was lost,but now I'm blind.

> </span>

Re: repeated crashes and failure to update ... is this Win32/Rusto

"BoaterDave" <BoaterDave@nospam.invalid> after much thought,came up

with this jewel in news:#nbBg#SiIHA.4764@TK2MSFTNGP02.phx.gbl:

<span style="color:blue">

> OK Max - I appreciate your help.

>

> For others looking in:-

>

> OE-QuoteFix will extend the functionality of MS Outlook Express in

> numerous ways! Its main purpose is to modify message composition

> windows on-the-fly to allow for correct quoting and to change the

> appearance of your plain-text replies and forwards in general:

> move your signature, use compressed indentation, have RFC

> compliant signatures, etc. But the second feature is equally

> practical: OE-QuoteFix can instantly color quoted passages

> (according to the level of indentation), fix bad quoting and

> generally beautify messages as you view them in Outlook Express.

>

> Dave

>

> -- (better now?)</span>

snip

Yes and no. You put the delimiter in the wrong place(it should be at

the end of your message,above your sig) and you put your reply above

the quoted material instead of below. If you need some assistance,let

me know.

max

--

Virus Removal http://max.shplink.com/removal.html

Keep Clean http://max.shplink.com/keepingclean.html

Tools http://max.shplink.com/tools.html

Change nomail.afraid.org to gmail.com to reply by email.

I was lost,but now I'm blind.