Highjack this log, please...my first time

[mitch]

hi rambelinrose

you have the two best HJT experts helping you
and it might take a bit of time
i think you will be suprised at the timezone differences
but i do think they can help you so just give it some time and take a deep breath you are in good hands !

NOTE: if SpyDie said stand on your head and gargle peanut butter while humming the MS log on chant i would do it knowing it would fix my trouble ;-)

it will take time so just hang in there ok?

[ramblinrose]

Thank you Mitch for comforting words... I am calmed now...At least I can use my pc but I just didn't like it when I know something is wrong even minor thing like *move this file* I hated it when program hangs. To make matters worse, Avast is working, I still can't click on folders to scan. I am already over at avast forum asking for help and already did email support twice after I installed new avast letting them know their program still hangs when I click on folders . I am waiting to hear from them. Doesn't make sense you know? I am not downloading anything for now not even open emails with attachments. I have to be extra careful now. Rose  :rose:

[mitch]

hi again
if the avast folks have you do anything unusual post it here so spydie will be up to date on what is happening ok?

[SpyDie]

NOTE: if SpyDie said stand on your head and gargle peanut butter while humming the MS log on chant i would do it knowing it would fix my trouble

LOL, thanks mitch! :)

ramblinrose,

Did a Windows XP CD or a Recovery CD come with your computer? If it did, I'll give you some instructions...Windows XP can try and detect any corrupt system files and replace them with fresh copies...

Click Start > Run > type in this and press OK: sfc /scannow

A dialog box will appear saying that basically Windows will try and detect any corrupt system files...if it does come across a corrupt file, it'll prompt you for the location of a fresh copy. If you had a Windows XP or a Recovery CD, put that in when it asks for the location and click OK. If not, then click the 'browse' button and navigate to your I386 folder. This will be either at C:\WINDOWS\I386, C:\WINDOWS\System32\I386 or C:\I386. If still no go, simply click cancel and we'll try something else.

Also one more thing to try for me please, click Start > Run> type in this and press OK: services.msc

Scroll through that list that appeared until you find "Windows Image Acquisition". When you do, double-click on it and it's properties window will appear. Can you tell me if it's started and if it's startup type is set to 'Automatic'? If it isn't started, press the Start button and if it isn't set to Automatic, please change it to Automatic...

See also what the Avast experts can come up with.

Let me know how you get on.

[ramblinrose]

Hi spydie, Sorry I haven't been on pc all day till now I wasn't feeling well and I think that's because I have been at it for 4 days and nites. So here I am ready...I have looked for it what you asked. All I have is reinstallation CD Windows XP Home Edition including service pack 1a from Dell. I brought this pc 2 years ago. Now I have service pack 2 from Microsoft updates. So you still want me to try sfc /scannow? Again I never done that one.

Also I did services.msc and looked. I didn't have to double click on it when I saw windows image acquistion. It says started and automatic...

What did you think about new microsoft updates I had on Tues? I had 7 updates and I was wondering that's what caused it because that's when my problems started. Someone suggested I should uninstall *KB911567 security update* to see if that was the problem. It seemed a lof of people are having problems too. If that update was not the problem then I can go back to microsoft reinstalling update. But  I want to hear what you say about that so I will wait for you. It's just that when I used system restore last time everything worked and then few hours later I went to microsoft.com to install new updates again. Now I have same problems again so I was suspicious that updates might be responsible but I could be wrong....I will be back later to see if you post back... :?

[ramblinrose]

Hi I am back here again to give you more infor...someone contacted me thru other forum and  asked me to check this out that might be the same problems and  I will send a link for you to read... http://forums.techarena.in/showthread.php?t=494711

I do have HP scanner/printer on my pc and funny thing is my laptop do not have HP scanner/printer. So my laptop is running normal with no problems after installed updates Tues. That's why I didn't think it was updates responsible but now I know it was because of HP....please advise me what to do. I will wait for your expertise  :)

[ramblinrose]

http://support.microsoft.com/gp/assistsupport

I got this page blank can anyone see it? I am trying to find out if lastest updates are causing my problems to see if I can get if fixed.

Or I may have to uninstall 2 updates KB908531 and KB912812 but I want to wait to hear what experts have to say

I have Zone Alarm firewall (free) and HP printer/scanner I don't know what else you need to know?

[mitch]

hi ramblinrose

i re read your post and if i was you i would uninstall those two,
worse case you can re-install by ie/tools/windows update

or by going to their download site, or doing a google searck of the KB
. looking at the timeline of the trouble

note i got hit with a update about 3 years ago that was a critial and caused me many days of grief !!!!
now before i do a install of a update i see if it can be removed, and if not i usually wait a week or too and see what is going on ;-)
mitch

you know to go to add/remove programs in the control pannel and at the top of that box to check "show windows updates" sorry i can't quote it as i am on my linux box now but that should be darn close to what it says ;-)

[ramblinrose]

Well I will see if I can uninstall 2 updates KB908531 and KB912812 but I am nervous what will happen. I already did system restore once and then I installed updates again with no problem....but NOW I have same problems again...making me wish I didn't do latest updates right away ....OK I will give it try but I think I will wait few days and see how it goes with others giving me advices...I learned not to rush now. I made few mistakes but no more this time I will wait. Yes mitch I can totally understand what you are going through like I am right now...It's hell!! This is very first time happen to me.

I haven't heard from avast experts yet  :( I think they are avoiding me  :? Rose

[mitch]

ya i read that stuff and got bad vibs from it ;-D


now when the dust settles on this you might want to talk to me about your system and we can do some things to make it safer??
unless you already have spywareblaster and a few other thing? but that is after you are up and running again

those two should be able to be uninstalled with add/remove...i checked before i updated and read that all of this month's "patch tuesday" were uninstallable with add/remove

[ramblinrose]

I clicked to remove KB908531 first...A box came up says that programs might not work properly are ewido, highjackthis, KB911562 and KB912812...I clicked cancel...Sooo now what? I don't care about ewido and highjack I can always download them again. Will you tell me proper way to remove these programs? These programs have backups. Or should I wait for microsoft solving problems? I can't do these registry I don't know what I am doing unless someone can tell me step by step that I copy and paste so I won't miss a step.....that's me  :shock:

Here are my programs I have on my pc:
avast
zone alarm free
spysweeper (paid)
spywareblaster
winpatrol
spybot (no tea timer)
ewido (no guard on)
ad-aware se free
ccleaner
highjackthis

[SpyDie]

Ahhhh, you are correct. It is that update causing the problems;

http://tinyurl.com/n3a5j

Which, led to this MS article being published;

http://support.microsoft.com/?kbid=918165

Uninstalling that update will cause the others to fail because it seems they all rely on each other.  First though, and you try the resolution posted on that MS article above? It's pretty simple but incase you need more detailed step-by-step instructions read below (I made the instructions more detailed and clear). If that resolution posted doesn't work, uninstalling the updates that caused this problem will be the way to go :).

I've written a quick VBS file to do the registry changes for you. It's attached to my post, all you have to do is download it, and run it. It'll display a Message Box saying "Done" when it's done - it will take one second...

Once it's done, as the MS article says:

8.   Use Task Manager to end the Verclsid.exe process or restart the computer.

So, launch Task Manager (one easy way is to click Start > Run > type in taskmgr and click OK). The Windows Task Manager will appear. Click the 'Processes' tab. Try and find this proccess in that list: Verclsid.exe. Once found, click on it once to 'highlight' it, and then click the 'End Process' button. Click Yes to the confirmation prompt & restart the computer. If you can't find Verclsid.exe in that list, keep looking and if you are totally sure you can't find it then just go ahead and restart the computer.

If this doesn't help, then I'll walk you through the proccess of removing the updates.

[attachment deleted by admin]

[ramblinrose]

First I would like to say HAPPY EASTER! As for me , I am still a mess...I read your post carefully...making sure I understand... I am supposed to download your VBS file and when it's done THEN bring up windows task manager and find verclsid.exe and click end process? I can do that but won't that mean I can't use my HP printer/scanner again? Or everytime I restarted, HP printer/scanner will start up again then I have to use windows task manager again? Is that right?

No I didn't try to use what Microsoft suggests I do to go into registry.I am scared to go in there. I know myself I might make it worse. So VBS file of yours is supposed to do that for me? I think it is but I am not sure... I will be back to see if you post back... Rose

[SpyDie]

First I would like to say HAPPY EASTER! As for me , I am still a mess...I read your post carefully...making sure I understand... I am supposed to download your VBS file and when it's done THEN bring up windows task manager and find verclsid.exe and click end process? I can do that but won't that mean I can't use my HP printer/scanner again? Or everytime I restarted, HP printer/scanner will start up again then I have to use windows task manager again? Is that right?

Thank you, Happy Easter to you & your family also :)

Yes you are to do exactly that :) No, you won't have to use the Task Manager again nor will the printer/scanner stop working. VERCLSID.EXE is a program which validates shell extensions before they are ever launched or used by another program. (such as Windows Explorer). This program was created with that latest MS update you installed. This program can have a whitelist , and therefore everything on this whitelist it will ignore & leave it to do it's "thing". Basically, all that is required is adding the HP's Shell extension to this whitelist so the VERCLSID.EXE program won't scan it & stop it from working.

The VBS file I included with my post is indeed going to change the registry for you, as per that article. If the registry changes still dont work (because it seems it hasn't worked for everyone) then uninstalling the update(s) altogether is the next step.

[ramblinrose]

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windowsupdate

I neglected to tell you that I also have HP share to web but I didn't think of it because I don't use it anymore, I didn't like it...It was taking too long to upload pics. Anyway, I have HP share to web icon on my desktop that's how I know I have that...SO I can still go ahead to do your VBS file? or use that patch? I know I am confused but I gotta make sure!!!!