:
Hi Joan,
Run a thorough scan by doing the following steps:
# First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html
Run disk clean up on your Drive.
You can download this tool o run clean up:
http://www.ccleaner.com/download/builds/downloading-slim
Then try this:
Updates are not installed successfully from Windows Update, from Microsoft
Update, or by using Automatic Updates after you perform a new Windows XP
installation or you repair a Windows XP installation
http://support.microsoft.com/kb/943144
Open a Notepad and Copy and paste the following into it and save it as
Updates.bat on your Desktop. Double click it toexecute and then Reboot your
machine.
net stop cryptsvc
regsvr32 softpub.dll
regsvr32 Wintrust.dll
regsvr32 Mssip32.dll
regsvr32 Initpki.dll
regsvr32 Gpkcsp.dll
regsvr32 Sccbase.dll
regsvr32 Slbcsp.dll
regsvr32 Urlmon.dll
regsvr32 Cryptdlg.dll
regsvr32 Dssenh.dll
regsvr32 Rsaenh.dll
net start cryptsvc
Reboot your machine and try the next step.
Open a notepad and copy and paste the following into it and save as
update.bat on your desktop. Double click the bat file to excute and click
[Yes to register the dlls and reboot your machine and see if that will help!
regsvr32 wuweb.dll
regsvr32 wuapi.dll
regsvr32 wuaueng.dll
regsvr32 wuaueng1.dll
regsvr32 wucltui.dll
regsvr32 wups.dll
regsvr32 wups2.dll
Or try this fix.
Download Dial-a-Fix:
http://wiki.djlizard.net/Dial-a-fix
# Do you get any error messages in the Event Viewer?
If you do get them back here is what they all about:
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 9/3/2008
Time: 6:47:31 PM
User: N/A
Computer: C4T1L0
Description:
Failed auto update retrieval of third-party root list sequence number from:
<
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.
- Make sure your DNS is set up properly.
- Make sure the account you are using has Admin Privileges.
- Make sure the Time set correctly on the machine.
Open a Notepad and Copy and paste the following into it and save it as
Updates.bat on your Desktop. Double click it toexecute and then Reboot your
machine.
net stop cryptsvc
regsvr32 softpub.dll
regsvr32 Wintrust.dll
regsvr32 Mssip32.dll
regsvr32 Initpki.dll
regsvr32 Gpkcsp.dll
regsvr32 Sccbase.dll
regsvr32 Slbcsp.dll
regsvr32 Urlmon.dll
regsvr32 Cryptdlg.dll
regsvr32 Dssenh.dll
regsvr32 Rsaenh.dll
net start cryptsvc
Reboot your machine and see if the error will be logged after a while.
Manually delete the contents of:
C:\Windows\system32\catroot2 and reboot your machine, does it help?
Event ID 8 is logged in the Application log
http://support.microsoft.com/kb/317541
Restore Cryptographic Service - CryptSvc
http://www.kellys-korner-xp.com/regs_edits/cryptsvc.reg
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 11
Date: 9/3/2008
Time: 6:58:31 PM
User: N/A
Computer: C4T1L0
Description:
Failed extract of third-party root list from auto update cab at:
<
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when
verifying against the current system clock or the timestamp in the signed
file.
Set the Time correct on your Machine, you may need to chnage the CMOD
Battery on the Motherboard.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/27/2008
Time: 4:20:57 PM
User: NT AUTHORITY\SYSTEM
Computer: C4T1L0
Description:
Windows saved user C4T1L0\David registry while an application or service was
still using the registry during log off. The memory used by the user's
registry has not been freed. The registry will be unloaded when it is no
longer in use.
"Troubleshooting profile unload issues"
http://support.microsoft.com/?kbid=837115
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Event Type: Error
Event Source: Automatic LiveUpdate Scheduler
Event Category: (1)
Event ID: 101
Date: 7/27/2008
Time: 4:10:33 PM
User: NT AUTHORITY\SYSTEM
Computer: C4T1L0
Description:
The description for Event ID ( 101 ) in Source ( Automatic LiveUpdate
Scheduler ) cannot be found. The local computer may not have the necessary
registry information or message DLL files to display messages from a remote
computer. You may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The following information is
part of the event: error, Internet connection not detected..
How to troubleshoot problems connecting to Windows Update or to Microsoft
Update
http://support.microsoft.com/kb/818018
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 7/27/2008
Time: 1:26:25 PM
User: N/A
Computer: C4T1L0
Description:
Faulting application hpdj00.exe, version 2.335.5.0, faulting module unknown,
version 0.0.0.0, fault address 0x0012e72c.
San for malware on your compuuter by going through these cleaning steps:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Event Type: Error
Event Source: i8042prt
Event Category: None
Event ID: 27
Date: 10/14/2008
Time: 6:09:39 PM
User: N/A
Computer: C4T1L0
Description:
The operation on the PS/2 keyboard device timed out (time out is
configurable via the registry).
[HKLM\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters]
"CrashOnCtrlScroll"=dword:00000001
i8042prt
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/31480.mspx?mfr=true
if you're using a serial mouse, try disabling the PS/2 mouse option in BIOS.
Open device manager and see if there is/are any malfunctioing devices or IRQ
conflict and see which one.
No Mouse/Keyboard After Updating Microsoft Natural Keyboard Pro Drivers (2k
server)
http://support.microsoft.com/kb/257729
http://support.microsoft.com/kb/262798
I8042prt Driver Reference
http://msdn.microsoft.com/en-us/library/ms792879.aspx
HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ i8042prt \ Start
Set the Value to (0).
Reboot and see if that will solve the problem.
See this article.
http://support.microsoft.com/kb/244139
# If you still having problem try to download Hijackthis and send me the log.
(
http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
my address is : to_you_ross(at remove this and repalce with the
obvious)yahoo.co.uk ( _ is underscore)
HTH,
nass
