Jump to content

1ssrdr - log1


1ssrdr

Recommended Posts

I have ran all the programs. Known issues are:

1.) Windows installer at startup

2.) Sonic Activation Module (Please wait while windows configures Saonic Activation Module) at start up. You can cancel to get rid of this promt.

3.) Ran Dial a Fix to fix to allow windows update to update. Now I get the dowloads but won't install some of them. Read that this is a know issue with XP SP 3.

Thank you for any advise you can give me.

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 8:14:17 PM, on 1/20/2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.17106)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe

C:\WINDOWS\system32\drivers\KodakCCS.exe

C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe

C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

C:\WINDOWS\system32\stacsv.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe

C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe

C:\Program Files\Dell\MediaDirect\PCMService.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\msiexec.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Documents and Settings\Robin\Desktop\Scanning tools\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=6061025

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.callwave.com/iam/DemoIntro.html?u=0f5aad5d20e557b1a8355eb2c05007ccb277b91465eaf9bd&Ver=3.09.9.0&OS=WinNT:5.1.2600SP:2.0&co=0

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet

O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start

O4 - HKLM\..\Run: [intelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"

O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKLM\..\Run: [iSUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup

O4 - HKCU\..\Run: [setDefaultMIDI] MIDIDef.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL

O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe

O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\WINDOWS\system32\stacsv.exe

O23 - Service: Intel® PROSet/Wireless SSO Service (WLANKEEPER) - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--

End of file - 9237 bytes

Link to comment
Share on other sites

Google toolbar gone.

No more windows update errors on start up. Looks like that did the trick. You guys rock.

Log# 2 below to make sure.

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 3:57:29 PM, on 1/21/2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.17106)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe

C:\WINDOWS\system32\drivers\KodakCCS.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe

C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

C:\WINDOWS\system32\stacsv.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe

C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe

C:\Program Files\Dell\MediaDirect\PCMService.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\msiexec.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe

C:\Documents and Settings\Robin\Desktop\Scanning tools\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=6061025

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.callwave.com/iam/DemoIntro.html?u=0f5aad5d20e557b1a8355eb2c05007ccb277b91465eaf9bd&Ver=3.09.9.0&OS=WinNT:5.1.2600SP:2.0&co=0

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet

O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start

O4 - HKLM\..\Run: [intelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"

O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKLM\..\Run: [iSUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup

O4 - HKCU\..\Run: [setDefaultMIDI] MIDIDef.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe

O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\WINDOWS\system32\stacsv.exe

O23 - Service: Intel® PROSet/Wireless SSO Service (WLANKEEPER) - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--

End of file - 8463 bytes

Link to comment
Share on other sites

  • Administrator

Looks good. Just make sure your Java is up-to-date too. I'd also recommend updating your Internet Explorer to 8.0 so that you have all important updates and can ensure your system is secure.

Once those are taken care of, check Windows Updates again and make sure you have Microsoft Update installed/enabled. Once you're fully up-to-date with all patches installed you should be all set. :)

Link to comment
Share on other sites

This is the second time I have received this error message trying to install the "Security Update for microsoft .Net 1.1 SP 1 for Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2656353).

Some unexpected errors have happened to software you recently used. You were not asked to send these error reports at the time they occured.

I get this when I boot windows after an install at shut down.

Link to comment
Share on other sites

It's error message is not telling me what program it is referring to but after I get this message I get my yellow shield telling me that I need to re-download that above file again so I am assuming that it has something to do with that. If it isn't we still have the fact that the above file is not beling installed or it wouldn't keep asking me to download it after I install on shut down. I have downloaded this same file 5 times now. Something is just not right. This file not wanting to install may not have anything to do with the above error message that I am getting.

I have not been running any programs lately and only getting online to get on FB and your site. Maybe one of the programs that I downloaded from your site just doesn't like my system or one of the programs that I upgraded (IE, Java, and FF). The error message started after I did all of that.

I just shut down to install and when I did a cold reboot I didn't get the message but did get the yellow shield asking me to again re download that same file. What a stubborn little file. Do I absoluetly have to have this file or can I just unchek it and forget about it and see if I have the same problem with a different file?

Link to comment
Share on other sites

1ssrdr, I can see what's happening -- or rather what is not happening -- here.

If I read your last two posts together, Windows Update is reporting that you need to install "Security Update for Microsoft .NET Framework 1.1 Service Pack 1 on Windows XP, Windows Server 2003 (64-bit), Windows Vista, and Windows Server 2008"

This is a Security Update for the .NET framework, (kb2656353 a.k.a. MS11-100) that Microsoft released at the end of December 2011. The update is Critical if you are running a Server. It not Critical if you are running a Desktop Operating System like Windows XP (which you have).

Windows Update is downloading the file and attempting to install it when you shut down your computer.

If the install takes more than a few seconds, you should see the usual message on your screen, something like "Windows is installing updates. Please do not power off..."

The install then fails. Next time you start up your computer, Windows Update runs, notices that kb2656353 is not installed and puts up the "Yellow shield" in the System Tray, showing that you need to download/install kb2656353 again. And again... and again...

This is a failure to install a .NET update.

There are two things you can do

(1) Windows Update maintains a log file on your computer which should list what has gone wrong. The log file is large, sometimes very large, but it can be read by any text editor, like Notepad.

Read your way through the WindowsUpdate log to find the error messages for this update. Each line in the file starts with the date and time. The file you are looking for is c:WINDOWSWindowsUpdate.log.

You can access this file by typing:


Notepad c:\WINDOWS\WindowsUpdate.log

at a command prompt, or by Start -> All Programs -> Accessories -> Notepad and using the File -> Open... dialog.

If you can find the section for this update and any error messages, please cut-and-paste the section and upload it to this forum topic, here. 50 lines, or less, should be about right.

(2) Download the update manually from the Microsoft Download Center and attempt to install the full (non-Windows Update version) of the same update.

The download is here: Security Update for Microsoft .NET Framework 1.1 Service Pack 1 on Windows XP, Windows Server 2003 (64-bit), Windows Vista, and Windows Server 2008 Make a note of where (on your computer) you download the file to.

The file is called NDP1.1sp1-KB2656353-X86.exe Double-click it to install.

If it also fails to install, you will need to re-install the entire .NET Framework 1.1 (NOT .NET Framework 2.0 and NOT .NET Framework 3.5). Let's see if this installs, first.

.

Link to comment
Share on other sites

Wow that's a lot of log. Downloading again and took note of the time so I can better pinpoint where to look.

Just for the record I am not getting that error message everytime I try to install this update. I have only received it twice after trying to install. I will see if I get this message this time after trying to install. Since I am not running a server I just might uncheck this update and see if I ave any trouble with other updates.I will post what lines I get after I get home from work.

Thanks again guys.

Link to comment
Share on other sites

I received that error code again, took a screen shot, and attached it to this post. The error meesage is definitely caused by the install failure. I know a lot about computers but reading error logs is not one of them LOL

Ok tried to upload the image but it's too big. Any suggestions?

Edited by 1ssrdr
Link to comment
Share on other sites

Sorry for the delay in replying.

That screenshot does indeed confirm the diagnosis that the Security Update (NDP1.1sp1-KB2656353-X86.exe) is failing to install. However, I cannot determine exactly which error code is being reported. There is, unfortunately, more than one reason why this particular update (KB2656353) could be failing as new information is emerging from Microsoft about this update failing to install.

The installs, whether failed or successful will have produced (large) log files, which will be in your own TEMP folder (not the WINDOWS Temp folder). Can you please look for files like the following:


C:\Documents and Settings\{name}\Local Settings\Temp\NDP1.1sp1-KB2656353-X86\NDP1.1sp1-KB2656353-X86-xxxxxx.log

where {name} represents your own UserName in Windows and xxxxxx represents a string of characters with the letters "msi" and also a number (0,1,2,3,4....) in it. If you can find the file, can you please open it in Notepad and search for the following:

Final Patch Application Order:

then upload the next 5 or 10 lines to this topic.

The lines will include long strings of numbers & letters inside curly brackets/braces ( { and } ).

The file is in a hidden directory, so you will have to enable Show hidden files to find it.

That will enable me to determine if the error is "Internal Error 2705" (which is simpler to fix) or not.

If not, then the usual fix is to uninstall the .NET Framework, run a .NET Framework cleanup tool, then re-install the complete .NET Framework. :sad:

.

Link to comment
Share on other sites

LOL...thank goodness notepad has a "find" feature. That could have taken awhile. Here are the next 15 lines. Gave you a few extra as they looked like they all belonged together.

Final Patch Application Order:

{411EDCF7-755D-414E-A74B-3DCD6583F589} -

{0213C6AF-5562-4D09-884C-2ADCFC8C2F35} - C:DOCUME~1RobinLOCALS~1TempZNWF1NDP1.1sp1-KB2656353-X86.msp

Other Patches:

Obsolete: {DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D} -

Machine policy value 'DisablePatch' is 0

Machine policy value 'AllowLockdownPatch' is 0

Machine policy value 'DisableLUAPatching' is 0

Machine policy value 'DisableFlyWeightPatching' is 0

Note: 1: 2262 2: _Columns 3: -2147287038

Note: 1: 2205 2: 3: MsiPatchMetadata

Looking for patch transform: T320_11ToU11.MST

Validating transform 'T320_11ToU11.MST' with validation bits 0x923

Note: 1: 2745 2: T320_11ToU11.MST 3: C:WINDOWSInstaller5067.msi 4: 1043 5: 1033

1: 2745 2: T320_11ToU11.MST 3: C:WINDOWSInstaller5067.msi 4: 1043 5: 1033

Note: 1: 2729

DEBUG: Error 2745: Transform T320_11ToU11.MST invalid for package C:WINDOWSInstaller5067.msi. Expected language 1043, found language 1033.

Skipping validation for patch transform #T320_11ToU11.MST. Will not apply because previous transform was invalid

Link to comment
Share on other sites

Thanks for finding that.

You have the line {411EDCF7-755D-414E-A74B-3DCD6583F589} which means that Service Pack 1 for .NET 1.1 is installed and recognised (that's good). However, that also means that the new information about "Internal Error 2705" doesn't apply (not so good).

I think it's time to jump in the deep end and reinstall the .NET Framework. You will need a downloaded copy of .NET 1.1 SP1 which you can find here: Microsoft .NET Framework 1.1 Service Pack 1

(For some reason. the Microsoft links all seem to be out of date and point you only towards the version without the Service Pack)

However, before that is reinstalled, do you have any other versions of the .NET Framework installed?

The Control Panel applet "Add or Remove Programs" should list what's installed

You will find one or more of .NETFramework 4, .NETFramework 3.5, .NETFramework 3.0, .NETFramework 2.0,.NETFramework 1.1 and .NETFramework 1.0

Normally, I would expect 3.5 to show up (as well as 1.1).

If so, it automatically includes 3.0 and 2.0 as well.

1.0 is old and, I hope, will not be listed.

The simplest sequence is:

  • uninstall 1.1
  • uninstall all others
  • run the .NET cleanup tool
  • reinstall everything

The reinstall order will be different if you have (and need) 1.0.

Without 1.0, it's reverse numerical order: 4, then 3.5 SP1, then 1.1 SP1

With 1.0, it's 3.5 SP1, then 1.1 SP1, then 1.0 and 4 last of all

Advanced users can shortcut a lot of this, by use of a few lines typed at the command-line. You can customise the cleanup tool actions, you can repair the other .NET versions instead of downloading them all again and so on.

Post what you want to do and I'll give more details.

.

Link to comment
Share on other sites

I have .Net 1.1, 2.0 SP 2, 3.0 SP 2, and 3.5 SP1. I should run the simplest sequence above, correct?

The simplest sequence is:

  • uninstall 1.1
  • uninstall all others
  • run the .NET cleanup tool
  • reinstall everything

Without 1.0, it's reverse numerical order: 4, then 3.5 SP1, then 1.1 SP1

Link to comment
Share on other sites

Yes, that's right.

No need for 4 if you don't already have it

Both 2.0 SP2 and 3.0 SP2 are included in 3.5 SP1. So, just the one download and install (of 3.5 SP1) gives you all three.

I forgot to post a link to the .NET cleanup tool. Here it is (you can use either link):

http://cid-27e6a35d1...leanup_tool.zip

or

http://blogs.msdn.co...p_5F00_tool.zip

The tool is written by and also maintained by Aaron Stebner (of Microsoft).

Other useful download links, for a manual re-install:

Microsoft .NET Framework Version 1.1 Redistributable Package

Microsoft .NET Framework 3.5 Service Pack 1

(the link to SP1 for .NET 1.1, I've given in my last post)

The link to 3.5 is the so-called web installer, meaning that it will require Internet access to fully install the remaining 50 megabytes or more.

When you run Windows Update, it will immediately find a critical update to 3.5.

If I remember correctly you have to install this first before Windows Update will find all the rest of the Security Updates for .NET

.

Link to comment
Share on other sites

Thank you for the links and instructions to correct this problem. Hopefully it will get resolved. I am going to wait until this weekend when I can give it my full attention. I will post on Saturday or SUnday with an update. Thank you for all your help. I really do appreciate it.

Link to comment
Share on other sites

In theory, no.

However, the Final Patch Application Order in the log-file shows that kb979906/MS10-041 (filename NDP1.1sp1-KB979906-X86.exe) is still applicable, despite a Microsoft Security Bulletin saying it has been superseded.

So, if you are doing it all manually, you could install that update first. Here's the download link:

.NET Framework 1.1 Service Pack 1 CLR Security Update for Windows 2000, Windows XP, Windows 2003 Server x64/IA64 and Windows 2003 Server R2 x64/IA64, Windows Vista, Windows Server 2008

Then install kb2656353/MS11-100 (filename NDP1.1sp1-KB2656353-X86.exe)

But, if you are letting Windows Update figure it out then just let it do its thing.

.

Link to comment
Share on other sites

Got everything updated last night as far as I know. Rebooted last night and no yellow shield and have not seen one yet this morning. I will give it a couple of days to see what shows up on the automatic update and get back with you. Is there anythng that you would like me to do to make sure things are going in the right direection?

Link to comment
Share on other sites

Is there anythng that you would like me to do to make sure things are going in the right direection?

No, nothing from me, unless you feel like double-checking that the update has installed successfully, by reading the latest update install log file again.

About 10 or so lines from the end (after 15,000 lines !!!) you should see:


Product: Microsoft .NET Framework 1.1 -- Configuration completed successfully.

.

Link to comment
Share on other sites

Houston.....we have a problem. OY VEY. lol...only my computers. The file kb979906/MS10-041 (filename NDP1.1sp1-KB979906-X86.exe) did install successfully though. At least there is some good news. :)

Product: Microsoft .NET Framework 1.1 - Update '{0213C6AF-5562-4D09-884C-2ADCFC8C2F35}' could not be installed. Error code 1603. Additional information is available in the log file C:DOCUME~1RobinLOCALS~1TempNDP1.1sp1-KB2656353-X86NDP1.1sp1-KB2656353-X86-msi.0.log.

Note: 1: 1729

Transforming table Error.

Transforming table Error.

Note: 1: 2262 2: Error 3: -2147287038

Transforming table Error.

Transforming table Error.

Note: 1: 2262 2: Error 3: -2147287038

Transforming table Error.

Transforming table Error.

Note: 1: 2262 2: Error 3: -2147287038

Transforming table Error.

Transforming table Error.

Note: 1: 2262 2: Error 3: -2147287038

Product: Microsoft .NET Framework 1.1 -- Configuration failed.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
×
×
  • Create New...