Author Topic: Virus? Exploit:Jsvs/CVE-2012-1723  (Read 19350 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #30 on: December 19, 2012, 07:26:52 PM »
OK could you reset the router and then try the updates again please

To reset there should be a small hole at the back of the computer marked reset
Using a biro or pin push that in and release

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #31 on: December 19, 2012, 07:34:08 PM »
Rather than a solid green light I now have a flashing amber on the airport.  I googled the solution and apple says I should download new software.  I downloaded it.  It is a setup program.  Before I run it I thought I better check with you.
« Last Edit: December 19, 2012, 07:36:04 PM by 2globose »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #32 on: December 19, 2012, 07:43:19 PM »
If it is the right software then yes

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #33 on: December 19, 2012, 07:57:37 PM »
Ran new Airport Utility, it upgraded my software.  Hahve solid green light.  Ran fixit application and still getting error on windows update.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #34 on: December 19, 2012, 08:17:48 PM »
Run the following OTL fix and then in IE address type http://fe1.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=en-GB

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:OTL
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-3961973716-4210694825-4076522416-1002\Software\Policies\Microsoft\Internet Explorer\Restrictions present


:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #35 on: December 19, 2012, 09:07:03 PM »
Her it is

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #36 on: December 19, 2012, 10:03:13 PM »
Could you try this link now and let me know what happens
http://fe1.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=en-GB

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #37 on: December 19, 2012, 10:05:13 PM »
Same error code.  Can't access windows udates.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #38 on: December 19, 2012, 10:07:49 PM »
Start an elevated command prompt
Go Start > All Programs  > Accessories
Right click command prompt and select run as administrator
In the black box type the following

ipconfig /flushdns

Then try again

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #39 on: December 19, 2012, 10:15:36 PM »
Again same error code

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #40 on: December 19, 2012, 10:20:26 PM »
It is a DNS problem of some sort..  Lets look at the registry next

Run OTL and copy/paste the following script into the custom scans box, then press run scan

hklm\software\clients\startmenuinternet|command /rs
 


2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #41 on: December 19, 2012, 10:32:46 PM »
Here you go.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #42 on: December 19, 2012, 10:38:54 PM »
Well they look good as well ..  I missed one element so I shall kill that now..  When did this first appear ?  Was it before or after you installed the VPN ?

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:OTL
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
Could you try Opendns  to see if that alleviates the problem
http://use.opendns.com/#win7

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #43 on: December 19, 2012, 10:57:26 PM »
Having trouble with step 6.  I don't see a radio button.  Should I click install at this point in step 6 in place of the radio button?

Windows 7
1.   Click the Start Orb, then select Control Panel.
2.   Click on Network and Sharing Center.
3.   Click on your primary connection or Local Area Connection under Active Networks.
4.   Click the Properties button.
Windows 7 may prompt you for permission to make network setting changes.
5.   Highlight 'Internet Protocol Version 4' and click Properties.
6.   Click the radio button 'Use the following DNS server addresses:' and type 208.67.222.222 and 208.67.220.220 in the Preferred DNS server and Alternate DNS server fields.
7.   Click OK button, then the Close button, then Close again. Finally, close the Network and Sharing Center window.
At this point, we highly suggest that you flush your DNS resolver cache and web browser caches to ensure that your new configuration settings take effect

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #44 on: December 19, 2012, 10:59:14 PM »
Forgot to include the log from the last otl fix