Hello TommyBoy,
(Quote)
By: Bill Sanderson
Safe mode prevents some, but by no means all--spyware services from running.
It is an excellent way to get started if something is resistant to cleaning
in normal mode, but it may not be all that is needed. Very glad that it
helped you.
(UnQuote)
--
So does the same thing happen when you reboot into Safe Mode to then
eradicate the pest?
If the Windows Malicious Software Tool is not installed nor scanned the
system recently, then suggest you first utilize (in Safe Mode (F8), a Manual
Full Scan) it and see if it detects and removes Vundo. Definitions for Vundo
have been included in it since March '08.
<
http://www.microsoft.com/downloads/...e0-e72d-4f54-9ab3-75b8eb148356&displaylang=en>
1058 0x80070422
ERROR_SERVICE_DISABLED
The service cannot be started. If BITS service is disabled by the
Administrator, or because it has no enabled devices associated with it.
ERROR_SERVICE_DISABLED then this error will be seen.
BITS has been disabled. Enable the BITS service.
Start/Run
Type "services.msc"
Click "OK"
Please check the following are started:
1.Automatic Updªtes
2.Background Intelligent Transfer Service (BITS)
3.Cryptographic Services
4.Remote Procedure Call (RPC)
5.System Restore Service
To verify that BITS is correctly configured :
1.Double-click `Background Intelligent Transfer Service.`
2.In the Startup type box, click Manual, and then Apply.
3. Click the `Log On` tab, and then verify that the service is enabled in
every hardware profile that you have listed.
If the service is disabled in one or more hardware profiles, click the
hardware profile, Enable, and then Apply.
4. Click the General tab and then Start.
If BITS starts successfully, visit the Windows Update Web site or the
Microsoft Update Web site to see if you can obtain updates. If it works OK,
change (2.) to automªtic.
-
If you still receive the same errors, verify that you have correctly
performed steps 1 through 5.
The necessary service "Automatic Updates" (WUAUSERV) is not started or is
unavailable. Error 0x80070422 (Resolution 1)
<
http://www.update.microsoft.com/windowsupdate/v6/showarticle.aspx?articleid=8&ln=en>
The necessary service "Automatic Updates" (WUAUSERV) is not started or is
unavailable. Error 0x80070422 (Resolution 2)
<
http://www.update.microsoft.com/windowsupdate/v6/showarticle.aspx?articleid=46&ln=en>
- -- ---
Download Superantispyware (Home Edition is Free)
<
http://www.superantispyware.com/supe....html?rid=3132>
- -- ---
Winfixer / WinAntiSpyware / WinAntiVirus Popups / Virtumundo victims only
Source:
<
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview>
-- - - -
Also I would suggest running a HijackThis to to ensure that Vundo did not
bring along any uninvited guests. (SDBot and ZLOB, all protected by a
rootkit.)
Please read this guide before actually doing the procedure
And it has all of the links for downloads you need.
Preparation Guide for use before posting a HijackThis Log
<
http://www.bleepingcomputer.com/forums/topic34773.html>
I hope this post is helpful.
Let us know how it works ºut.
Good luck
- -- ---