Windows update has stopped working + can't use any applications

Hi there,

Decided to join up here to ask for advice.

I've recently had a string of viruses including " 32 blaster worm" which
Windows defender managed to clear out. I then had the vista recovery virus which hid all my files I had to purchase "spyware doctor" to finally manage to clear that one out.. But ever since then (this was 3 days ago) my computer will not let me open any programs including; iTunes and uninstaller, it just displays the message "xxxxx has stopped working" and or displays the message "the extended attributes are inconsistent"

Any help with this is much appreciated!

Thanks
Brennan

Hello Brennieboy and welcome to the forums

Malwarebytes Anti-Malware

Download and install MBAM from here
Run a full scan and attach the log with your next post for me to analyse

SFC Scan

1. Open the start menu
2. In the search box, type cmd
3. Right click on cmd and select Run as administrator
4. In command prompt, type:

sfc /scannow

5. Let it run and let me know if it finds any Integrity Violations

OTL

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Under the Standard Registry box change it to All.
Check the boxes beside LOP Check and Purity Check.
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.


Once OTL has completed its first scan it will save notepad copies of the scans in the folder that OTL was started from. Unless set to produce an Extras log it will only produce OTL.txt in subsequent scans.

A copy of an OTL fix log is saved in a text file at

:\_OTL\MovedFiles
in most cases this will be C:\_OTL\MovedFiles

Please attach both OTL.txt and Extras.txt with your next post for me to analyse

CKScanner

Please download CKScanner from here to your Desktop.

Make sure that CKScanner.exe is on the your Desktop before running the application!

Double-click on CKScanner.exe and click Search For Files.
After a very short time, when the cursor hourglass disappears, click Save List To File.
A message box will verify the file saved
Attach the log CKFiles.txt that has been created on your desktop with your next post

Tom

Hey Tom, thanks for the quick response.

I've had a busy weekend so only just started to test the options you posted.

I have already tried the sfc scan but it will not let me "run as admin" and a pop up message will appear saying "the extended attributes are inconsistent"

i managed to download all 3 of those new programs,CKScanner worked and the outcome is attached. The other two programs OTL and Malwarebytes will not install and the same message appears "XXX Has Stopped Working" and "Installer has stopped working".

I fear the worst for my computer... as i type this "Windows problem reporter has stopped working"

Thanks
Brennan

While waiting for Tom, who will give you excellent help, with any possible virus, try this
http://www.vistax64.com/crashes-debugging/287651-extended-attributes-inconsistent.html
If the virus is gone and just its effects remain this should help. If there is a virus, this may get you up and running and then Tom can still remove the virus.
You can of course, too, wait for Tom to complete the Virus check and regardless of the results, you can use this method to see if it gets you up and running it that becomes necessary.

Hmm, can you boot into safe mode? If so, try all of those tools again in safe mode

If not, try scanning your system with the AVG rescue CD:

AVG - Rescue CD | PC Rescue and Repair Toolkit

Use these tutorials as a reference:

How to download and create the AVG rescue CD
How to remove infections with the AVG rescue CD

Tom

hey again,

I managed to boot in safe mode and the aforementioned programs seemed to run fine, attachments as requested (cbs blog would not upload as it was an administrator only file so i screen captured it and saved it as a jpeg)

Malwarebytes was about 40+ mins through its scan and had found 4 infections but my computer turned itself off midscan and was really hot underneath which never usually happens.. is this a normal occurence when running a full scan such as that one. I will try running this again shortly.

cheers
Brennan

Edit: I don't think ive given the right information from the cbs log.. i will have to open it in safe mode again as i can't open notepad files and screen capture it again.

System Look

Please download System Look to your desktop.

In the main text field, copy and paste the following and press the look button.

OTL

In the custom scans/fixes box, copy and paste the following and press run fix at the top. Then run OTL again and copy and paste the log into your next post.


Can you upload this file to VirusTotal for me please?

C:\Windows\Tasks\SCHEDLGU.TXT

Also, can you uninstall PC Tools Security and Rising PC Doctor? And replace them with Microsoft Security Essentials

Tom

I ran system look with that code and it completed but didnt produce a text log i assumed that was correct.

OTL ran with the code and text log is included in post.

I uninstalled RISING PC Doctor but didnt uninstall the other one cos i paid £30 for it. Hope that doesn't have anything to do with it.

File uploaded to Virustotal
VirusTotal - Free Online Virus, Malware and URL Scanner

Sorry, I messed up with the System Look instructions You did everything right, it was me that was in the wrong

In the custom scans/fixes box, copy and paste the following and press run fix at the top. Please upload the log that opens upon completing these tasks.


Can you upload these files to virustotal for me please:

C:\ProgramData\~34004728r
C:\ProgramData\~34004728
C:\ProgramData\34004728

Send me the links for all 3 of them

Tom

Hi there sorry for taking a while to do these. its been very busy at work.

OTL log is attached and 3 files uploaded to virustotal

~34004728r

VirusTotal - Free Online Virus, Malware and URL Scanner

~34004728 (This file had already been analysed when i uploaded it but i chose to reanalyse it)

VirusTotal - Free Online Virus, Malware and URL Scanner

34004728

VirusTotal - Free Online Virus, Malware and URL Scanner

cheers!

I understand the time restraints that people may have and I am more than happy to work around you

Looking better!

Can I have a fresh OTL log please?

Tom

Hi, got back from my holiday 2 weeks ago only getting a chance to get back to this problem now.

new otl log attached.

Brennie

Brennie,

Hope you enjoyed your holiday!

Unfortunately, whilst you were away, I have been accepted into the GeeksToGo University. Part of my agreement is that I am not allowed to assist users with malware removal during my training.

No Malware Removal Until Graduation – As a trainee, you are only allowed to help victims with their malware removal under supervision of an instructor. This includes not only this site, but other sites as well. Until graduation, you only know enough to be dangerous. It also reflects poorly on this site if you’re offering poor advice elsewhere while training here. There’s an exception for anyone that has already graduated from an approved school, and wishes to receive further training here.

Click to expand...

I suggest you start a new thread stating any problems you still have (if any) and someone may be able to help you Also, link them to this thread to see what's already been done

Tom

Thanks for your help Tom, all the best with that course.

My problems still persist so I will take your advice and start a new thread!

Thanks again.
Brennie

Its my pleasure, sorry that I couldn't be of more help to you. Thanks for the kind words Brennie

I will follow your new thread because I'm intrigued about what's causing your problem!

Tom