Today [2]

[Chase]

Today I solved my very first Windows Update issue which was caused by manifest corruption over at SF. I feel very special! You remember that log I posted, here is the next run:

=================================
Checking System Update Readiness.
Binary Version 6.1.7600.20822
Package Version 10.0
2010-12-05 11:59
 
Checking Windows Servicing Packages
 
Checking Package Manifests and Catalogs
 
Checking Package Watchlist
 
Checking Component Watchlist
 
Checking Packages
 
Checking Component Store
(f)    CSI Manifest All Zeros    0x00000000     winsxs\Manifests\amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.20753_none_c35b3960c9fe4842.manifest      amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.20753_none_c35b3960c9fe4842     
(fix)    CSI Manifest All Zeros    CSI File Replaced    File:  amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.20753_none_c35b3960c9fe4842.manifest  From: C:\windows\CheckSur\v1.0\windows6.1-rtm-client-enus-amd64.cab
(f)    CSI Manifest All Zeros    0x00000000     winsxs\Manifests\amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.16634_none_c2e83cb7b0cf89ed.manifest      amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.16634_none_c2e83cb7b0cf89ed     
(fix)    CSI Manifest All Zeros    CSI File Replaced    File:  amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.16634_none_c2e83cb7b0cf89ed.manifest  From: C:\windows\CheckSur\v1.0\windows6.1-rtm-client-enus-amd64.cab
 
Summary:
Seconds executed: 364
 Found 2 errors
 Fixed 2 errors
  CSI Manifest All Zeros Total count: 2
  Fixed: CSI Manifest All Zeros.  Total count: 2
Customer Experience report successfully uploaded.  Thank you for  participating.  For more information, see the Microsoft Customer  Experience Improvement Program on the Microsoft web site.

What is shows is 2 unfixable errors, followed by the fix because I put replacements in the drop box.

Maybe this was a pointless post, but it has made my evening.

Congrats.

 

[ilikefree]

All last night I spent removing a trojan.goldun and root kit from my computer.
Couldn't work out why it kept comming back. Root kit made a registry file called
HKLM-Software\Microsoft\WindowsNT\Current Version\Winlogon Taskman
which was found with Super-Antispyware and removed manually.
Trojan.Goldun was found by MalwareBytes and was trying to steal passwords.
Waste of time here as only forum passwords are on this computer.
After removal I did scans with Super-Antispyware,MalwareBytes,E-Set Nod32,Trend Micro Housecall,BlackLight anti root kit and had nothing found.
Made 3 restore points and did a disc cleanup leaving the last restore point only.
I have scanned the whole computer 5 times and think it is all clear now.
Didn't feel like going to sleep so it was good to have something to do other than watching movies.

These type of infections (especially these types - trojans and rootkits) are insidious and can live on despite their removal by having already modified, added, or otherwise affected your system and/or program files. I would recommend the following:

1. Download and run Hijack This HijackThis - Trend Micro USA (the full version and not the beta) and save the report to your desktop.

2. Post this situation in the Security Forum attaching the Hijack This file and let Jacee take a look - include all the infection names and locations like you did here (maybe even just copy this as a start and add to it there) - (I'll look as well, but I'm not really qualified to read it though I'm getting better each time - especially after reading Jacee's analyses of other reports). We're all (you know, I mean the regulars) pretty good at this type of thing, but none of us are in her league - not even Richard who is probably the closest. You may also want to send her a PM requesting her to check out the thread (she'll then get an e-mail and will probably show up quicker) and provide any advice or opinions or suggestions she sees appropriate - I've found she sometimes is away for quite a while if she gets no alerts, but an e-mail with your PM should get her here ASAP. She has many tools we don't consider or know about or are "above our pay grade" that may help either confirm you're OK or identify any problems that remain. She may also tell you to do a clean install - but better to have her help and opinion than risk a problem that still exists and may be getting worse all the time despite the "clean" scans. If she does suggest a clean install, it doesn't mean you have to do it - it just means that if you don't you're running a risk which you may or may not be willing to take.

She helped me when I was infected - but it turned out to be minor (yours does NOT sound minor IMHO). Still, she showed me some tricks and I now have tools I didn't know about before for the next time (and to help prevent the next time).

Anyway, I think she can either help you or set your mind more at ease (or both) and strongly recommend you do this. But, as always, it's up to you. You probably think all is now well and it's over. I would be genuinely concerned and would absolutely without question seek her assistance.

I sincerely hope you take my advice.

Best wishes!

Yes on looking into it deeper I find a program that makes random program names, Looks like it came from some sort of World of Warcraft site (I have never been to one, or played any games) so will be reformatting today. Nuke and pave.

 

[niemiro]

Today I solved my very first Windows Update issue which was caused by manifest corruption over at SF. I feel very special! You remember that log I posted, here is the next run:

=================================
Checking System Update Readiness.
Binary Version 6.1.7600.20822
Package Version 10.0
2010-12-05 11:59
 
Checking Windows Servicing Packages
 
Checking Package Manifests and Catalogs
 
Checking Package Watchlist
 
Checking Component Watchlist
 
Checking Packages
 
Checking Component Store
(f)    CSI Manifest All Zeros    0x00000000     winsxs\Manifests\amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.20753_none_c35b3960c9fe4842.manifest      amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.20753_none_c35b3960c9fe4842     
(fix)    CSI Manifest All Zeros    CSI File Replaced    File:  amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.20753_none_c35b3960c9fe4842.manifest  From: C:\windows\CheckSur\v1.0\windows6.1-rtm-client-enus-amd64.cab
(f)    CSI Manifest All Zeros    0x00000000     winsxs\Manifests\amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.16634_none_c2e83cb7b0cf89ed.manifest      amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.16634_none_c2e83cb7b0cf89ed     
(fix)    CSI Manifest All Zeros    CSI File Replaced    File:  amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.16634_none_c2e83cb7b0cf89ed.manifest  From: C:\windows\CheckSur\v1.0\windows6.1-rtm-client-enus-amd64.cab
 
Summary:
Seconds executed: 364
 Found 2 errors
 Fixed 2 errors
  CSI Manifest All Zeros Total count: 2
  Fixed: CSI Manifest All Zeros.  Total count: 2
Customer Experience report successfully uploaded.  Thank you for  participating.  For more information, see the Microsoft Customer  Experience Improvement Program on the Microsoft web site.

What is shows is 2 unfixable errors, followed by the fix because I put replacements in the drop box.

Maybe this was a pointless post, but it has made my evening.

Congrats.

Awww thanks!

 

[ilikefree]

Nice fresh install now, all done 120 updates as well.

 

[Lorien]

Today I plan to spend most of the day on VF (except I need to finish watching Avatar as today is the last day it's schedule to run on cable and I only have about 30 minutes left after 3 attempts). I'm 6 points from my final gold pip before going for the next badge and hope it will occur today if I'm lucky (or at least in the next day or two). I've also passed the 1300 post mark, so only 200 more to go before the Gold Badge (probably a few more weeks but I think less than a month).

Congrats, Richard - but you already know that since you noticed I visited SF to recognize the achievement.

Sorry to hear you started from scratch ilikefree, but chances are good (given a rootkit) that Jacee would probably have recommended that anyway - and I just edited this as I see you've finished all the updates (so good progress).

See y'all out there in the threads!

 

[asullivan]

Today, Sunday, preparing for tomorrow, Monday.

Today, weekend, preparing for next weekend.

Today Monday, prepar'in fer last Saturday night at tha' barn dance....and today is Triggers thursday.....He has better horse sense,,,,

Today I solved my very first Windows Update issue which was caused by manifest corruption over at SF. I feel very special! You remember that log I posted, here is the next run:

=================================
Checking System Update Readiness.
Binary Version 6.1.7600.20822
Package Version 10.0
2010-12-05 11:59
 
Checking Windows Servicing Packages
 
Checking Package Manifests and Catalogs
 
Checking Package Watchlist
 
Checking Component Watchlist
 
Checking Packages
 
Checking Component Store
(f)    CSI Manifest All Zeros    0x00000000     winsxs\Manifests\amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.20753_none_c35b3960c9fe4842.manifest      amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.20753_none_c35b3960c9fe4842     
(fix)    CSI Manifest All Zeros    CSI File Replaced    File:  amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.20753_none_c35b3960c9fe4842.manifest  From: C:\windows\CheckSur\v1.0\windows6.1-rtm-client-enus-amd64.cab
(f)    CSI Manifest All Zeros    0x00000000     winsxs\Manifests\amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.16634_none_c2e83cb7b0cf89ed.manifest      amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.16634_none_c2e83cb7b0cf89ed     
(fix)    CSI Manifest All Zeros    CSI File Replaced    File:  amd64_microsoft-windows-diskdump_31bf3856ad364e35_6.1.7600.16634_none_c2e83cb7b0cf89ed.manifest  From: C:\windows\CheckSur\v1.0\windows6.1-rtm-client-enus-amd64.cab
 
Summary:
Seconds executed: 364
 Found 2 errors
 Fixed 2 errors
  CSI Manifest All Zeros Total count: 2
  Fixed: CSI Manifest All Zeros.  Total count: 2
Customer Experience report successfully uploaded.  Thank you for  participating.  For more information, see the Microsoft Customer  Experience Improvement Program on the Microsoft web site.

What is shows is 2 unfixable errors, followed by the fix because I put replacements in the drop box.

Maybe this was a pointless post, but it has made my evening.

Well congrats Sire niemiro, I'm glad ya' can read all that stuffy.... me?? I just start push'in buttons and thingy's.... ironically enough, I did have a major long last'in malfunction with M.S. updates not downloading.....hit a few buttions...typed a bunch of stuffy and now tha' mach'in loads em' down like I download duff!!

Speak'in of such i gotta' download my avatar picture thingy of my most handsome mug....

Oh No!!!!! we gotta' get ready fer' lecture....

Trigger ya's know what ta' do!!!!!
Getty boy!!!

 

[Imperfect1]

I'm doing a little traveling this week --- Milwaukee to L.A. via Chicago. All great cities and I'll be seeing great friends and my family --- very low key and enjoyable! And this is such a nice time of year to visit -- with the holidays and all. Everyone seems to be in a very festive mood. . .

 

[Chase]

Long day at college.

 

[Smurfyy]

Last night I opened a "Today" thread over on Andromada Forums. Lol.
Today I have some surprise exams, maths and philosophy & ethics, I think the maths one is real and the other one is a mock. Congrats on the school for giving us the exam timetables yesterday .
I'll just go with it and see what happens...

 

[Lorien]

I'm doing a little traveling this week --- Milwaukee to L.A. via Chicago. All great cities and I'll be seeing great friends and my family --- very low key and enjoyable! And this is such a nice time of year to visit -- with the holidays and all. Everyone seems to be in a very festive mood. . .

We'll miss you here, but have a safe and happy time! I'm not much for travel myself, but those who are seem to enjoy it immensely - especially if visiting friends and relatives rarely seen.

 

[Lorien]

Very little progress yesterday unfortunately (on almost anything - only one cleared backlogged thread and only a dismal 13 posts overall - though I did finally finish watching Avatar and it was as great as I'd been told) but I hope for more today on all fronts assuming this current exacerbation passes. Still 6 points away from the pip just like yesterday - instead of hoping for it today, I'm now going to hope for it by the end of this week (and I'll even make that until Sunday), and perhaps then I won't jinx myself.

 

[niemiro]

Very little progress yesterday unfortunately (on almost anything - only one cleared backlogged thread and only a dismal 13 posts overall - though I did finally finish watching Avatar and it was as great as I'd been told) but I hope for more today on all fronts assuming this current exacerbation passes. Still 6 points away from the pip just like yesterday - instead of hoping for it today, I'm now going to hope for it by the end of this week (and I'll even make that until Sunday), and perhaps then I won't jinx myself.

Well I liked Avatar too!

 

[Lorien]

Still 6 points away from the pip just like yesterday - instead of hoping for it today, I'm now going to hope for it by the end of this week (and I'll even make that until Sunday), and perhaps then I won't jinx myself.

EGAD! It worked! I guess I should have hoped for the end of the week yesterday.

 

[Chase]

Very little progress yesterday unfortunately (on almost anything - only one cleared backlogged thread and only a dismal 13 posts overall - though I did finally finish watching Avatar and it was as great as I'd been told) but I hope for more today on all fronts assuming this current exacerbation passes. Still 6 points away from the pip just like yesterday - instead of hoping for it today, I'm now going to hope for it by the end of this week (and I'll even make that until Sunday), and perhaps then I won't jinx myself.

Well I liked Avatar too!

I still have not seen that!

 

[Smurfyy]

Very little progress yesterday unfortunately (on almost anything - only one cleared backlogged thread and only a dismal 13 posts overall - though I did finally finish watching Avatar and it was as great as I'd been told) but I hope for more today on all fronts assuming this current exacerbation passes. Still 6 points away from the pip just like yesterday - instead of hoping for it today, I'm now going to hope for it by the end of this week (and I'll even make that until Sunday), and perhaps then I won't jinx myself.

Well I liked Avatar too!

I still have not seen that!

Same. Lol.
Last night I made a temporary sig for Andromada Forum since it's easy, I'll get round to doing one for here and SF, so for now, I'm gunna upload the Andromada one, even though it is completely OT. Lmao.

 

[Lorien]

Well I liked Avatar too!

I still have not seen that!

Same. Lol.
Last night I made a temporary sig for Andromada Forum since it's easy, I'll get round to doing one for here and SF, so for now, I'm gunna upload the Andromada one, even though it is completely OT. Lmao.

I just registered at Andromada and you have no signature at all there (at least not as of 10 seconds ago).

 

[niemiro]

Today I shall start work on the START HERE guides and tutorials for the Windows Update sub forum.

 

[Smurfyy]

I just registered at Andromada and you have no signature at all there (at least not as of 10 seconds ago).

Hmm.. Their system is awkward, I think I'm gunna have to make a PhotoBucket or Twit Pic account to actually upload it...

 

[asullivan]

Hummmm, I am trying to remove e-mail notifications and trying to put my beautiful golden mug as my avatar thingy with to avail ( intead of werk'in on tonight's lecture)...:D


I have a piture of my most handsome mug in my picture folder, but keep on gett'in a thingy that says "This JPEF image has the incorrect file extention",,,,

Oh well good shall prevail over evil.....

 

[asullivan]

Why Trigger just put his mug in the avatar box thingy, I'm gunna' kill him I is!!!!!

​

Trigger your better not fly away!!!! !!!!!!!


​

​

Come down here now!!! or no more booze and sweet carrots fer a week!!!!!Blast ya'!!!!:eek:​