Author Topic: DLL. files eliminated as suspects are responsible for the problems of WUD Vista?  (Read 4710 times)

0 Members and 1 Guest are viewing this topic.

Ger67

  • Guest
Good morning.

For some time (can not remember if since upgrading to Avast 14) has started giving me problems some Windows Updates, specifically with NET framework.
I do not remember how and when it happened (or which came first). I uninstalled the McAfee antivirus, which normally use at work, to install Avast (Avast home with I have no problem). Later, I tried to install an application (from a CD) that I demanded in college (where I'm temporarily) to access the Internet.

Avast detected some files as suspicious and sent to the trunk:

C: \ Windows \ system32 \ drivers \ niarbk.dll (Win32: Evo-gen [Susp])
C: \ Windows \ system32 \ drivers \ nidmmk.dll (Win32: Evo-gen [Susp])
C: \ Windows \ system32 \ drivers \ niSTCk.dll (Win32: Evo-gen [Susp])
C: \ Users \ user1 \ Downloads \ unconfirmed 300149.crdownload (Win32: Evo-gen [Susp])

I gave you analyze each and now reads "- no viruses -"

The Windows Update started giving me problems with error NET.Framework 4.0. What I did was uninstall all previous versions of NET Frameworks and start installing version 4.0.
Normally I use Revo Uninstaller, with deep cleansing to uninstall programs, but I also use CCleaner, Argente RegCleane Argente Utilities and cleaning of the remains. I use almost one after the other (obsessively) for a "good housekeeping" and gives me security panic and worries me the garbage that accumulates the computer.

I do not know if this problem with Windows updates due to this, because I tried all the ways suggested in the Microsoft support but not sulucionó nothing!. I entered a few forums, but they suggest typing commands that I'm not sure to make ...

I send you the information that I have the history of updates from Windows Update.
I want to know if the files that are in quarantine (in the trunk) I can report them to the service of Avast as false positives.

Microsoft. NET Framework 3.5 Service Pack 1 (KB951847) x86 Language Pack
Installation date: 06/11/2013 11:30
Installation status: Errors
Error details: Code 80240016
Update type: Recommended

Service Pack 4 for Microsoft SQL Server 2005 Express Edition (KB2463332)
Installation date: 06/11/2013 11:30
Installation status: Errors
Error details: Code 11170
Update type: Important

The truth is that the computer I do well, it slows down a bit to open Mozilla Firefox and access the yahoo mail and when I open the pdf from it.

I UNINSTALLED ALL NET.FRAMEWORKS AND SQL.

Also I attached reports: AdwCleaner, MBAM, OTL.
For aswMBR, this stopped working and attached a screenshot and the information of the Windows

Excuse the writing, which has been nearly a literal translation time Google translator (I do not speak English)

Thanks for the help...

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
What's your native/mothertongue language?

http://forum.avast.com/index.php?board=21.0

You might find it there if you wish to get help in your native language. Remover notified
« Last Edit: November 11, 2013, 01:35:36 PM by alan1998 »
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Commands
[CREATERESTOREPOINT]

:OTL
IE - HKU\S-1-5-21-3424810415-2226244729-273107294-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60429
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\webbooster@iminent.com: C:\Program Files\Iminent\webbooster@iminent.com
O3 - HKU\S-1-5-21-3424810415-2226244729-273107294-1006\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-3424810415-2226244729-273107294-1006\..\Toolbar\WebBrowser: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - No CLSID value found.
O33 - MountPoints2\{e0985c7d-1ba6-11df-b000-001f298a7121}\Shell\open\Command - "" = kmj.exe

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
THEN

Download and run the dotnet removal tool from here.  This will clear all versions of dotnet http://blogs.msdn.com/b/astebner/archive/2008/08/28/8904493.aspx

Ger67

  • Guest
Yes alan1998, I opened the topic in this blog at the suggestion of a expert in the Spanish blog. ;)

Thanks essexboy. I made the suggestion, log attached after making quick scan. Also ran the dotnet removal tool...

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Could you now try windows update again please

Ger67

  • Guest
nothing ... >:(
After insisting several times ...NOTHING!

Were updated

Security Update for Microsoft . NET Framework 3.5 SP1 on Windows XP , Windows Server 2003 , Windows Vista, Windows Server 2008 for x86 -based Systems ( KB2861697 )
Upgrading to . NET Framework 3.5 Service Pack 1 for . NET Framework Assistant 1.0 x86 ( KB963707 )
Security Update for Microsoft . NET Framework 3.5 SP1 on Windows XP , Windows Server 2003 , Windows Vista, Windows Server 2008 for x86 -based Systems ( KB2736416 )
Security Update for Microsoft . NET Framework 3.5 SP1 on Windows XP , Windows Server 2003 , Windows Vista, Windows Server 2008 for x86 -based Systems ( KB2840629 )
Security Update for Microsoft . NET Framework 3.5 SP1 on Windows XP , Windows Server 2003 , Windows Vista, Windows Server 2008 for x86 -based Systems ( KB2604111 )
Microsoft . NET Framework 4 Client Profile for Windows Vista x86 ( KB982670 )


But it is giving error :

Microsoft . NET Framework 3.5 Service Pack 1 ( KB951847 ) x86 Language Pack ( Error code 80240016 )
Service Pack 4 for Microsoft SQL Server 2005 Express Edition ( KB2463332 ) ( error code 1170 )

Is a loop. Automatic updates appear but fail to install... :(

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes

Ger67

  • Guest
nothing, nothing, nothing ...
I downloaded the Service Pack 4 for Microsoft SQL Server 2005 Express Edition from Microsift page.
I can install it manually??
What do you think?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Yes try that and let me know of any error produced

Ger67

  • Guest
nothing, nothing ... I have not solved anything ... I give up... >:(
I also asked in the technical support of "microsoft" and in the forum "Tech Support", and have not been able to find the solution.
In answer to a similar error, I have read that it is a problem with the Office security and would have to reeinstalar "Windows".
I have hidden the updates and hopefully not give me problems. ::)

If you think of another possible solution, please do not hesitate to give it to me. ;)

Thanks for the time spent. :)

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Hiding the updates is probably the best bet as they are not critical ..  I will keep looking though