still no news on sp1 for Vista - anybody heard anything?

Bit of a nightmare morning. Any suggestions welcome:
Am running Windows XP on a laptop. Also AVG, ZoneAlarm & Adaware.
Went on to the Windows update site for the latest updates. It prompted me to download the Genuine validation Tool (which I thought I already had as regularly download updates), which I did. Then downloaded 4 security updates & 1 IE cumulative update. No problem, then rebooted.
Then went on to the Net & having looked at MoneyAM baords, went on to goldoilplc.com website which loaded the home page & then immediately froze, with a toolbar request asking me if I wanted to accept & download a Microsoft Data file (at this point I could hear the processor working flat out). I didn't download it but manually shut down & rebooted. Then I ran AVG which found Virus JS/Psyme which it deleted from the Temporary Internet File. I also ran Adaware which found 4 corrupt registry files which it deleted & also 2 files which it said it couldn't delete. These files were C:\windows\system32\wsnpoem\audio.dll and also same file name but video.dll
I tried to find them manually but am unable to find them.
The end result is my machine is working again, but mysteriously the history file has been deleted, but otherwise no problems so far.
Does anyone one know if this particular virus is a bad one, or if the windows files above are genuine windows or corruptions, please?

This is the technical spec on the above virus. I'm none the wiser!!!
"Troj/Psyme-AN is a JavaScript downloader Trojan (usually HTML-based) which exploits the ADODB stream and CODEBASE vulnerabilties associated with certain versions of Microsoft Internet Explorer to silently download a file from a remote website to the affected computer and run it.

When Troj/Psyme-AN is run on Windows 95 or Windows 98 it tries to download and run an executable via the CODEBASE attribute of an object element.

When run on Windows NT, 2000 or XP Troj/Psyme-AN first uses the ADODB Stream exploit to download the remote executable to C:\Program Files\Internet Explorer\.exe where is a random character string consisting of 1-8 random characters (typically 8 characters) within the range A-Z. It then tries to execute the downloaded file via the CODEBASE exploit.

Troj/Psyme-AN can arrive on the computer via HTML pages containing a link to an infected page. "

HARRYCAT
Im no expert but you could try downloading and running SpybotS&D.
I replaced Adaware with SuperAntiSpyware, as it picked up bugs
missed by Adaware.
Also have SpyWareBlaster loaded.
mac
PS All free.

Thanks. Have now downloaded & paid for Xoft which has found the bugs & quarantined them, but when I run Ad-Aware again it says they are still there!
Have sent e-mail to Xoft tech dept, so hopefully will have answer soon.

Is it possible to firewall a phone socket?

Why? Are you trying to stop the mother-in-law calling? :-)

Na, I'm trying to cheekily set up my broadband on my laptop at work. All the lights are on as say should be but no joy.

Not sure what you're trying to do exactly, do you mean that you have had broadband connected on a socket at work and you are trying to get it to work through a router?

I ave bought (another!) new laptop.
2 trouble free weeks and its fooked!
It did an overnight auto update 2 days ago, ever since then iv'e been getting error messages.
If you look under "view text" it always says this...

C:/DOCUME1/NEILJE1/LOCALS1/Temp\a33c_appcompat.txt

(with a few squiggles in it, that havent got a key for)

Help! I have sent (reported to Microsoft) 100s of them over the past 2 days but nothing changes.

Thanks.
d.

That's exactly when my troubles started, Dailos. Downloading the latest updates/ patches from Microsoft. I only update from them once a month, manually, so I know it was the updates which were highjacked by a virus. I don't trust auto.
Not much help, I know, but maybe a pattern emerging!

Oh, dear.

I've altered my automatic updates to 'notify me but don't download' until further notice.

In fact I will be off air for ten days from tomorrow - Christmas hol - so I'll re-visit this thread on the 28th to see whether you whiz kids have found a solution.

Bye

TP

Got a problem when windows starts up, it is running 2 Internet Explorers at once in Task Manager, which is eatting up a load of memory and making the pc crash, checked for viruses and Adware etc found some, but its still happening, any ideas how to fix it???

Richgit

Do you mean that the IE sessions are being initiated on startup?

If so, go Start Button - Run, type in msconfig followed by Enter. Go to the startup tab which will list (most of) the startup processes and their source. You can then dissable them to check the effect before you delete them.

If anyone still has a problem with the MS update causing problems with IE I found this comment from Microsoft. It seems that this problem only effects IE6 so the answer is to upgrade to IE7.

Vista SP1 Release Candidate availible here.

It is only a beta version so DYOR.

Thanks for your post #6445, Optimist. Yes I have IE v6, but it's interesting to note that Microsoft have acknowledged a loophole. I normally wait for software to be out for a while until the bugs have been ironed out, but now v7 may be the answer.

Optimist, yes as soon as Windows boots up, in the background it starts Internet Explorer, so when I start my own IE session it means two or three are running at once but only notice the one I've started and only found the others were running by accident thru Task Manager

Harrycat

IE7 has been a lot better than IE6 for well over a year upgrade ASAP.

Richgit

IE should not start with Windows. If you look in the startup tab of msconfig you should be able to find it, look for a refference to Internet Explorer or a file with a .htm or .html extension. If it is not easy to find then I suspect that you have some sort of virus/trojan/adware.

Anybody using Safari on a Mac to view Stockwatch?
Suddenly (I think) I have to deselect "block pop-up windows" in order to view Charts/Trades/News
I am sure this wasn't necessary until recently
Safari should only block pop-up from page loads or exits