Re: Windows Update 7 Internet Explorer

From: Mark L. Ferguson (marfer_mvpREMOVE_at_hotmail.com)
Date: 12/24/04


Date: Fri, 24 Dec 2004 06:35:21 -0600

The command would run from a command prompt, but the script does it. It
won't help either.

You are probably blocked from the updates by your antivirus app.

-- 
Mark L. Ferguson (NOT an MS-MVP)
marfers notes for windows xp
http://www.geocities.com/marfer_mvp/chatNotes.htm
.
"Andre Max" <amaxi@dodo.com.au> wrote in message
news:OfmRhma6EHA.3756@TK2MSFTNGP14.phx.gbl...
> Att: Mark
>
> when I ran .......ren %systemroot%\system32\catroot2 oldcatroot2......it
> returned an error message.....Windows cannot find ...REN
>
> Im so sorry about this and appreciate your time and effort.....im becoming
a
> bit frustrated by this lol.
>
> I also ran the VB script without any luck...
>
> Regards
> Andre
>
> "Mark L. Ferguson" <marfer_mvpREMOVE@hotmail.com> wrote in message
> news:eWCfITW6EHA.540@TK2MSFTNGP12.phx.gbl...
> > Go to start/run, and enter these commands:
> > net stop cryptsvc
> > ren %systemroot%\system32\catroot2 oldcatroot2
> > net start cryptsvc
> >
> > Try the updates again
> >
> > You can also use a VB script
> > here>http://kellys-korner-xp.com/regs_edits/xp_cryptofix.vbs
> >
> > -- 
> >
> > Mark L. Ferguson (NOT an MS-MVP)
> > marfers notes for windows xp
> > http://www.geocities.com/marfer_mvp/chatNotes.htm
> > .
> > "Andre Max" <amaxi@dodo.com.au> wrote in message
> > news:%23hJSNYV6EHA.2552@TK2MSFTNGP09.phx.gbl...
> >> Thank you for your help but this also failed......I clicked on the
links
> > and
> >> a small page popped up which was blank....it happened with every link
> >>
> >> "Mark L. Ferguson" <marfer_mvpREMOVE@hotmail.com> wrote in message
> >> news:%23XrFPOR6EHA.1564@TK2MSFTNGP09.phx.gbl...
> >> > Try the Windows Update Troubleshooter :
> >> >
http://v5.windowsupdate.microsoft.com/v5consumer/troubleshoot.aspx?ln=en
> >> >
> >> > -- 
> >> >
> >> > Mark L. Ferguson (NOT an MS-MVP)
> >> > marfers notes for windows xp
> >> > http://www.geocities.com/marfer_mvp/chatNotes.htm
> >> > .
> >> > "Andre Max" <amaxi@dodo.com.au> wrote in message
> >> > news:O4KTtl05EHA.2196@TK2MSFTNGP14.phx.gbl...
> >> >> My automatic update will not update the following files set out
below:
> >> >>
> >> >> It returns a FAILED message
> >> >>
> >> >> Security Update for Windows XP (KB873339)
> >> >> Security Update for Windows XP (KB885835)
> >> >> Critical Update for Windows XP (KB886185)
> >> >> Security Update for Windows XP (KB885836)
> >> >>
> >> >> Why Is This?
> >> >>
> >> >> I have registered WINXP
> >> >>
> >> >> I am having trouble opening a new window in Internet Explorer 6.0
SP2
> >> >> Everytime I click on a new window the window won't open but just
> >> >> refreshes.
> >> >>
> >> >> I have also noticed when I opened Internet Options>Programs>Manage
> >> >> Add-Ons.......I see the following code from my Registry.....
> >> >>
> >> >> {CD67F990-D8E9-11D2-98FE-00C0F0318AFE}
> >> >>
> >> >> I disabled it then it seemed to work for awhile then played up
again.
> >> >>
> >> >> I went to Registry and deleted it but still to no avail......
> >> >>
> >> >> On rebooting the above code went back into the Registry...
> >> >>
> >> >> I have run numerous malware programs i.e. PCBug Doctor,
> > NoAdware,Ad-Aware
> >> >> SE, Norton Antivirus, ErrorGaurd as well as running the online
> > antivirus
> >> >> scanner Trend Micro and it hasn't fixed the problem.
> >> >>
> >> >> I hope you can answer my questions and look forward to trying some
of
> >> >> your answers.
> >> >>
> >> >> Kind regards
> >> >> Andre
> >> >>
> >> >> This is a copy of my Hijack Log:
> >> >>
> >> >> Logfile of HijackThis v1.99.0
> >> >> Scan saved at 6:31:54 PM, on 21/12/2004
> >> >> Platform: Windows XP SP2 (WinNT 5.01.2600)
> >> >> MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
> >> >>
> >> >> Running processes:
> >> >> C:\WINDOWS\System32\smss.exe
> >> >> C:\WINDOWS\system32\winlogon.exe
> >> >> C:\WINDOWS\system32\services.exe
> >> >> C:\WINDOWS\system32\lsass.exe
> >> >> C:\WINDOWS\system32\svchost.exe
> >> >> C:\WINDOWS\System32\svchost.exe
> >> >> C:\WINDOWS\system32\spoolsv.exe
> >> >> C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> >> >> C:\Program Files\Norton AntiVirus\navapsvc.exe
> >> >> C:\Program Files\Norton AntiVirus\SAVScan.exe
> >> >> C:\WINDOWS\system32\svchost.exe
> >> >> C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> >> >> C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> >> >> C:\Program Files\Common Files\Symantec Shared\Security
> > Center\SymWSC.exe
> >> >> C:\WINDOWS\system32\winlogon.exe
> >> >> C:\WINDOWS\Explorer.EXE
> >> >> C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
> >> >> C:\WINDOWS\AGRSMMSG.exe
> >> >> C:\Program Files\Common Files\Symantec Shared\ccApp.exe
> >> >> C:\PROGRA~1\PESTPA~1\PPControl.exe
> >> >> C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
> >> >> C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
> >> >> C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
> >> >> C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
> >> >> C:\Program Files\Archive\archive.exe
> >> >> C:\WINDOWS\SOUNDMAN.EXE
> >> >> C:\WINDOWS\system32\wuauclt.exe
> >> >> C:\PROGRA~1\WINZIP\winzip32.exe
> >> >> C:\Program Files\Messenger\msmsgs.exe
> >> >> C:\Documents and Settings\User\My Documents\Unzipped\HijackThis.exe
> >> >>
> >> >> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
> >> >> HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> >> >> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
> >> >> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
> >> >> O2 - BHO: Yahoo! Companion BHO -
> > {02478D38-C3F9-4efb-9B51-7695ECA05670} -
> >> >> C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
> >> >> O2 - BHO: AcroIEHlprObj Class -
> > {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
> >> >> C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
> >> >> O2 - BHO: CNavExtBho Class -
{BDF3E430-B101-42AD-A544-FADC6B084872} -
> >> >> C:\Program Files\Norton AntiVirus\NavShExt.dll
> >> >> O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD
> >> >> Solution\PowerDVD\PDVDServ.exe"
> >> >> O4 - HKLM\..\Run: [NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe
> >> >> O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
> >> >> O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
> >> >> Shared\ccApp.exe"
> >> >> O4 - HKLM\..\Run: [PestPatrol Control Center]
> >> >> C:\PROGRA~1\PESTPA~1\PPControl.exe
> >> >> O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
> >> >> O4 - HKLM\..\Run: [CookiePatrol]
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
> >> >> O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common
> >> >> Files\Logitech\QCDriver\LVCOMS.EXE
> >> >> O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
> >> >> Files\Java\j2re1.4.2_06\bin\jusched.exe
> >> >> O4 - HKLM\..\Run: [Archive] C:\Program Files\Archive\archive.exe
> >> >> O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
> >> >> O4 - Global Startup: Microsoft Office.lnk = C:\Program
Files\Microsoft
> >> >> Office\Office\OSA9.EXE
> >> >> O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions
> >> >> present
> >> >> O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control
Panel
> >> >> present
> >> >> O6 - HKCU\Software\Policies\Microsoft\Internet
> >> >> Explorer\Toolbars\Restrictions present
> >> >> O9 - Extra button: (no name) -
> >> >> {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
> >> >> C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
> >> >> O9 - Extra 'Tools' menuitem: Sun Java Console -
> >> >> {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
> >> >> Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
> >> >> O9 - Extra button: Messenger -
> >> >> {4528BBE0-4E08-11D5-AD55-00010333D0AD} -
> >> >> C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
> >> >> O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
> >> >> {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program
> >> >> Files\Yahoo!\Messenger\yhexbmes0521.dll
> >> >> O9 - Extra button: (no name) -
> >> >> {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
> >> >> (no file)
> >> >> O9 - Extra button: Messenger -
> >> >> {FB5F1910-F110-11d2-BB9E-00C04F795683} -
> >> >> C:\Program Files\Messenger\msmsgs.exe
> >> >> O9 - Extra 'Tools' menuitem: Windows Messenger -
> >> >> {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
> >> >> Files\Messenger\msmsgs.exe
> >> >> O12 - Plugin for .spop: C:\Program Files\Internet
> >> >> Explorer\Plugins\NPDocBox.dll
> >> >> O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall
> >> >> Control) -
> >> >> http://a840.g.akamai.net/7/840/537/...all/xscan53.cab
> >> >> O17 -
> >> >>
> >
HKLM\System\CCS\Services\Tcpip\..\{25945D9C-FC20-457A-8F58-E02D3B9E48A0}:
> >> >> NameServer = 203.194.27.57 203.194.56.150
> >> >> O23 - Service: Symantec Event Manager - Symantec Corporation -
> > C:\Program
> >> >> Files\Common Files\Symantec Shared\ccEvtMgr.exe
> >> >> O23 - Service: Symantec Password Validation - Symantec Corporation -
> >> >> C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
> >> >> O23 - Service: Symantec Settings Manager - Symantec Corporation -
> >> >> C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> >> >> O23 - Service: Norton AntiVirus Auto Protect Service - Symantec
> >> >> Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
> >> >> O23 - Service: SAVScan - Symantec Corporation - C:\Program
> >> >> Files\Norton
> >> >> AntiVirus\SAVScan.exe
> >> >> O23 - Service: ScriptBlocking Service - Symantec Corporation -
> >> >> C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
> >> >> O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program
> >> >> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> >> >> O23 - Service: SymWMI Service - Symantec Corporation - C:\Program
> >> >> Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
> >> >> O23 - Service: ZESOFT - Unknown - C:\WINDOWS\zeta.exe (file missing)
> >> >>
> >> >>
> >> >>
> >> >
> >> >
> >>
> >>
> >
> >
>
>