Author Topic: Virus? Exploit:Jsvs/CVE-2012-1723  (Read 19361 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #45 on: December 19, 2012, 11:10:11 PM »
OK there should be a 2a. by the looks of that
On the left click on change adapter settings

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #46 on: December 19, 2012, 11:23:34 PM »
I ended up at the same place.  The attached image shows the screen where I am supposed to execute step 6.  This is where there is supposed to be a radio button.  I don't know what to do once I get to the screen you see in the attachment.

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #47 on: December 19, 2012, 11:50:19 PM »
I figured it out.  I guess I am being dense today.

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #48 on: December 19, 2012, 11:51:38 PM »
I just tried windows update again and received the sam error code.

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #49 on: December 20, 2012, 01:29:40 AM »
I had a message in the action center that read "solve a problem with PSIKey".  I opened the message clicked on the link and it resolved it's self.  I had the same thing happen yesterday.  I have included an image.

I also tried the update from the control panel again and received an entirely different code than I have been getting; it read "windows could not search for updates" with error code 80072EFD.   
The  original warning read "windows could not search for new updates" with error code 8024419.  THe word new is left out of the new error.
I don't know if that is relevant or not

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #50 on: December 20, 2012, 03:58:22 PM »
Quote
Was it before or after you installed the VPN ?
These are all connection errors so did the problems first appear after you installed The OpenVPN Project

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #51 on: December 20, 2012, 05:07:21 PM »
I did not recently install an open VPN.

New info.  I ran a disk repair last night.  Afterward I was able to update through my internet connection from Microsoft.  I was not able to do that.  I downloaded and installed 116 updates.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #52 on: December 20, 2012, 05:19:45 PM »
Hmm would not have thought a disc check would have cured it..  But if it works don't knock it  ;D

What other problems need resolving ?

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #53 on: December 20, 2012, 05:50:32 PM »
One thing you should know.  I ran Reimage Repair last night and it seemed to solve some of the remaining problems.  What I can confirm that is not working is:

I cannot open Windows update.  I get error code 8024419.
PlanPlusCOMAddInShim is not loading and I cannot activate it in the options feature in Outlook 2010.
Java does not show up in the in the program list from the start menu.  Java does show up in the control panel.

I am including to screen captures.  In the  capture labeled window update capture you can see the link for "check on line for windows updates"  This is how I have been getting updates.  When I try to use the updater tool I continue to get the same message we have been trying to fix.  This is kinda fixed.

I was curious about the update history link.  The capture labeled update history capture show that the updates I downloaded this morning failed.  I find that odd since last night I was able to install 116 updates.
I cannnot get the planplus addin to work.
Java is working but it still is not listed in the program.

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #54 on: December 20, 2012, 05:53:03 PM »
forgot the screen captures

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #55 on: December 20, 2012, 07:30:17 PM »
kb2505438 has probably been pulled see here http://support.microsoft.com/kb/2505438 this page includes a hotfix to download

For the administrator thing follow the steps here http://www.technibble.com/forums/showthread.php?t=22840

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #56 on: December 20, 2012, 07:59:40 PM »
First direction is complete

Second direction I am having trouble with.  I don't know how to get to  HKLM\Software\Policies\Microsoft\ Windows\WindowsUpdate  from Rdgedit.  Can you provide direction please?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #57 on: December 20, 2012, 08:12:50 PM »
OK lets use OTL to remove the key and then replace with a blank one, follow this up with the msfixit 

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Reg
[-HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate]
[HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate] 

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

2globose

  • Guest
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #58 on: December 20, 2012, 08:48:32 PM »
Ran Otl.  It did not reboot automatically.  I had to manually reboot.

Ran fixit using this link  http://support.microsoft.com/mats/windows_update/     Still getting same error code.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus? Exploit:Jsvs/CVE-2012-1723
« Reply #59 on: December 20, 2012, 08:51:36 PM »
OK bear with me I will ask around