Re: can not run windows update

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Chuck (none_at_example.net)
Date: 05/20/04 

Date: 19 May 2004 19:05:15 -0500

On Wed, 19 May 2004 13:54:13 -0700, "polier" <polier@hotmail.com> wrote:

>Hi Chuck,
>
>Thanks for your reply. I apologise for not including the
>user info -- I'm not really that familiar with proper
>etiquette/protocol for these groups.
>Following is my hijackthis log. If there is other info I
>can provide, please let me know. Didn't mean to be vague --
> just freaking out cuz i'm at a loss.

<SNIP HijackThis log>

Stephen,

Don't sweat the small stuff. There are dozens of ways to post to Usenet - and
everybody has a different opinion about something.

I do wish, though, that you hadn't used your email address in the previous post
- that's a perfect way to get email you don't want. Learn to munge your email
address properly, to keep yourself a bit safer when posting to open forums.
Protect yourself and the rest of the internet - never post your address
unmunged.
http://www.mailmsg.com/SPAM_munging.htm

What forums did you post your HJT log? And under what name? A direct URL link
to your posts would be most helpful.

Another thought that you should check out. Search your entire system drive,
including hidden and system folders, for file "hosts". There is one legit copy,
in C:\WINDOWS\system32\drivers\etc\. The others are bogus, and part (but just
part) of the problem. Also, examine the contents of the legit copy, using
Notepad, too.

Anyway, on with the analysis.

I don't see anything that explicitly is known to cause problems with browsing -
like a known browser or dns hijacker. But there is a lot of stuff you need to
get rid of. Or probably can get rid of, with no problem.

Kazaa, as with many P2P applications, is arguably something to remove. Whether
it's causing your problem is questionable.

You'll need to close all applications, start HijackThis, and tick the following
for HJT to remove. After HJT finishes, reboot. Then rerun HJT, and post a new
log.

Do a web search on this - seen by many as spyware related, and not needed with
P2P apps like Kazaa (which you don't need anyway)
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P
Installer) -

Known spyware components:
R3 - URLSearchHook: (no name) - {0428FFC7-1931-45b7-95CB-
3CBB919777E1} - (no file)
O2 - BHO: My Search BHO - {014DA6C1-189F-421a-88CD-
07CFE51CFF10} - C:\Program
Files\MySearch\bar\1.bin\S4BAR.DLL
O3 - Toolbar: My &Search Bar - {014DA6C9-189F-421a-88CD-
07CFE51CFF10} - C:\Program
Files\MySearch\bar\1.bin\S4BAR.DLL

Not recommended:
O4 - HKLM\..\Run: [KAZAA] C:\Program
Files\Kazaa\kazaa.exe /SYSTRAY

Known bad stuff:
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE
Class) -
http://207.188.7.150/22dcd79eebd2bc8fa102/...ip/RdxIE601.cab

Not needed:
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot

Do you have a Zoltrix modem? Otherwise not needed:
C:\WINDOWS\System32\carpserv.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe

Don't need to run at startup - start manually if required:
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program
files\altnet\points manager\points manager.exe -s

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Relevant Pages

  • Re: can not run windows update
    ... >>Following is my hijackthis log. ... >What forums did you post your HJT log? ... >You'll need to close all applications, start HijackThis, ... >Known spyware components: ...
    (microsoft.public.windowsxp.network_web)
  • Re: HIGH CPU Usage ???
    ... here's the latest HiJackThis Log from the PC. ... Anyone see the culprit in here ???? ... You should not post you HJT scan log to this or any newsgroups! ... Registration *is* required prior to posting a log. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: "Memory could not be read" Errors
    ... single time I run them...but sometimes it happens to other applications, ... Here's a HijackThis log: ... Removing & Protecting Yourself From Scumware ...
    (microsoft.public.windowsxp.general)
  • Re: "Memory could not be read" Errors
    ... single time I run them...but sometimes it happens to other applications, ... Here's a HijackThis log: ... Please don't post HijackThis logs here. ...
    (microsoft.public.windowsxp.general)