Author Topic: Help needed please.  (Read 6313 times)

0 Members and 1 Guest are viewing this topic.

Offline kenb

  • Jr. Member
  • **
  • Posts: 14
    • View Profile
Help needed please.
« on: December 13, 2005, 06:31:00 PM »
I find it impossible to download and install MS updates. When I go through the normal procedure and try and open the update page the computer locks and I have to reboot to bring it back to life. I am using XP home SP2.
Hoping someone can suggest what can be done to overcome this problem.
Ken. :(

Offline kenb

  • Jr. Member
  • **
  • Posts: 14
    • View Profile
Re: Help needed please.
« Reply #1 on: December 13, 2005, 09:44:47 PM »
Since my last post I have carried out the following.
Scanned with avg free.registry mechanic,error doctor,adaware,spybot. Found no errors.
I have now run out of ideas :( Please someone Help!!
Whatevers happened won't let me open any M/S pages.
System restore fails to operate also.
Thanks in anticipation.
Ken :gah: :uhm:

Offline Die Hard

  • LzD Fallen Heroes
  • Hero Member
  • *****
  • Posts: 971
  • The Northern Berserk
    • View Profile
Re: Help needed please.
« Reply #2 on: December 13, 2005, 10:32:56 PM »
kenb  :)

Do you think you could post a HiJack This log.It might reveal something.

Download HiJack This from here:  http://www.thespykiller.co.uk/files/HJTsetup.exe

This will download HiJack This to your computer, choose "Save" and navigate to the folder where it´s saved and doubleclick upon it.
This is a complete installer that installs Hijackthis onto the computer to C:\Program Files\HijackThis and makes an entry in the start menu & allows you to have a shortcut on desktop as well.

then.......
Doubleclick the HJT icon on your desktop, hit "Do a system scan and save logfile". Save the logfile and a txt-file will be produced.. Copy that one and paste it here and we´ll have a look at it.

Die Hard :)
I create and edit my posts in GS-NOTES

Offline kenb

  • Jr. Member
  • **
  • Posts: 14
    • View Profile
Re: Help needed please.
« Reply #3 on: December 14, 2005, 06:49:27 AM »
HJT
 Logfile as requested
Logfile of HijackThis v1.99.1
Scan saved at 8:42:10 AM, on 14/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\A4Tech\Keyboard\Ikeymain.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\WinPatrol.exe
C:\PROGRA~1\Lavasoft\AD-AWA~2\Ad-Watch.exe
C:\Program Files\C-Media Middleware\CmSkype.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\All Users\Desktop\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ntlworld.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://minisearch.startnow.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://minisearch.startnow.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnow.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

http://minisearch.startnow.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

http://minisearch.startnow.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL =

http://minisearch.startnow.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

http://minisearch.startnow.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program

files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program

files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [iKeyWorks] C:\PROGRA~1\A4Tech\Keyboard\Ikeymain.exe
O4 - HKLM\..\Run: [WinPatrol] "C:\PROGRA~1\BILLPS~1\WINPAT~1\WinPatrol.exe"
O4 - HKLM\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~2\Ad-Watch.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CmSkype] "C:\Program Files\C-Media Middleware\CmSkype.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\nbj.exe"
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~2\Ad-Watch.exe"
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program

files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program

files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program

files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program

files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel -

res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program

files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program

files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} -

C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar -

{09FE188B-6E85-479e-9411-51FB2220DF80} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -

http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -

http://www.pandasoftware.com/activescan/as5/asinst.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive

Software\Diskeeper\DkService.exe
O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program

Files\Ahead\InCD\InCDsrv.exe
O23 - Service: McAfee Firewall - Unknown owner - C:\Program Files\McAfee\McAfee Firewall\CPD.EXE"

/SERVICE (file missing)
O23 - Service: McAfee WSC Integration (McDetect.exe) - Unknown owner - c:\program

files\mcafee.com\agent\mcdetect.exe (file missing)
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - Unknown owner -

c:\PROGRA~1\mcafee.com\agent\mctskshd.exe (file missing)
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Unknown owner -

C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation -

C:\WINDOWS\System32\nvsvc32.exe

Hope this is O.K
Ken

Offline kenb

  • Jr. Member
  • **
  • Posts: 14
    • View Profile
Re: Help needed please.
« Reply #4 on: December 14, 2005, 05:49:01 PM »
Could one of the experts please check my HJT log and Help suggest how to rectify the problem.
I also forgot to mention my PC fails to shutdown in the normal way and has to be turned off at the power switch.
thanks for any help offered,
KenB. :sos:

Offline kenb

  • Jr. Member
  • **
  • Posts: 14
    • View Profile
Re: Help needed please.
« Reply #5 on: December 16, 2005, 10:28:43 AM »
In view of no apparent solution to my problem it may be advisable to do a clean reinstall of XP unless someone knows different.
I have tried everything else with no success so my HJT log is no longer of any use.
Any comments would be appreciated.
Ken. :gah:

Offline jsky

  • Visiting Experts
  • Full Member
  • *****
  • Posts: 53
    • View Profile
    • JSKYs XP & Vista Support
Re: Help needed please.
« Reply #6 on: December 17, 2005, 02:27:56 PM »
Try a system repair first, if you have a XP CD, and not a restore disk.

 There are two types of repair on XP.  When you boot with the XP disk. You will come to the first part that asks if you want to install or do a repair. This first repair is a command prompt type for a specific repair. AT THIS POINT! If you click on install XP instead, you will see XP load files as it get ready to install the OS. When it gets done loading files, you will again be asked to install XP or to repair your current OS. At this second repair option, click to repair and sit back. XP will go through your whole system searching and repairing parts that have been changed or need to be replaced. BUT REMEMBER!! With any repair you will need your CD KEY. And you MUST go to windows update and re-download some of the updates because the repair will remove some of them.

Hope this will help you.
JSKYs

Sometimes the most difficult task, is the task never started, for fear of the task.

Offline kenb

  • Jr. Member
  • **
  • Posts: 14
    • View Profile
Re: Help needed please.
« Reply #7 on: December 19, 2005, 06:18:56 PM »
Thanks jsky,
tried a repair as your suggestion but was unsuccessfull. The problem I am having appears to have started when trying to remove McAfee from my system possibly removing something I should'nt have so reached the conclusion the only solution was to do a clean uninstall and reinstall of XP and update to sp2 which is now complete. Everything seems to be working fine but I'm keeping my fingers crossed.
Thanks again,
Ken. :breakkie:

Offline GR@PH;<'S

  • Administrator
  • Hero Member
  • *****
  • Posts: 20125
    • View Profile
    • http://www.taktmobiles.co.uk
Re: Help needed please.
« Reply #8 on: December 19, 2005, 06:51:59 PM »
kenb,
Glad to here that you have managed to get sorted can I seguest that you take a look at  PhantomPhixer (Mitch's Newbie and Oldie's list)

GR@PH;<'S   :breakkie:
press Enter then have a Brandy then if the problem is still there have another Brandy
Q: does it work
A: It does seem to for a few hours at least.

Offline kenb

  • Jr. Member
  • **
  • Posts: 14
    • View Profile
How to deal with error message
« Reply #9 on: December 27, 2005, 10:06:15 AM »
When I boot up I receive the following message.
One of the files containing the systems Registry Data had to be recovered by use of alog or alternative copy The Recovery was successful.
How can I correct this so it does'nt happen Please?
Any help would be Welcome
Ken. :sos:

Offline Eric the Red

  • ISO/IEC 27001:2013
  • Administrator
  • Hero Member
  • *****
  • Posts: 1618
  • Would somebody please pass me a beer!
    • View Profile
Re: How to deal with error message
« Reply #10 on: December 27, 2005, 07:06:54 PM »
I have only seem this in one of two situations, the first being corrupt RAM. I'm not great with RAM so I would suggest that you start with running Memtest or some other similar utility.

The second situation is described in this Microsoft KB article

http://support.microsoft.com/default.aspx?scid=kb;en-us;843426

Best of luck  :)
"The time to start running is around about the "e" in "Hey, you!" "

The information I provide is provided "AS IS" without warranty, and confers no rights.

Offline GR@PH;<'S

  • Administrator
  • Hero Member
  • *****
  • Posts: 20125
    • View Profile
    • http://www.taktmobiles.co.uk
Re: Help needed please.
« Reply #11 on: December 27, 2005, 07:39:56 PM »
 kenb ,
As this is part of this topic i have merged the two together

GR@PH;<'S   :breakkie:
press Enter then have a Brandy then if the problem is still there have another Brandy
Q: does it work
A: It does seem to for a few hours at least.

Offline Eric the Red

  • ISO/IEC 27001:2013
  • Administrator
  • Hero Member
  • *****
  • Posts: 1618
  • Would somebody please pass me a beer!
    • View Profile
Re: Help needed please.
« Reply #12 on: December 27, 2005, 08:15:50 PM »
Thanks for doing that, Graphics  :thumbsup:

kenb,

Now that I see the whole thread I think that it is likely that the problem lays in the second of the two suggestions that I posted above.

 :breakkie:
"The time to start running is around about the "e" in "Hey, you!" "

The information I provide is provided "AS IS" without warranty, and confers no rights.