CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 940
Comments: 25
block bottom
spacer spacer

Can't update windows, can't search, & other problems

 
Post new topic   Reply to topic       All -> FavForums -> Windows NT/2000/2003/XP [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
gldmontana

Cadet
Cadet


Joined: May 24, 2008
Posts: 3
Location: USA

PostPosted: Tue Jun 10, 2008 11:48 pm    Post subject: Can't update windows, can't search, & other problems
Reply with quote

Hi,
I'm running XP SP2 and just recently found that I can't update windows or add microsoft update. Each time it shows this message (in part) "Please change your Internet Explorer security settings...Under Userdata persistence , select Enable". It already is
enabled so that doesn't help. I've followed further instructions offered to no avail. When the Microsoft site suggested going to Administrator Tools...Local Security Policy...Local Policies...User Rights Assignment...Impersonate a client (etc), I don't find Local Security Policy under Admin Tools.
I also get no response when I click on Start...Search.
To further complicate matters, for some time I've had a WMI issue. I can't access system info nor can I log on as administrator except when I am in Safe Mode.
I have Kaspersky Antivirus, Windows Defender (which wasn't updating for awhile), installed MalwareBytes' AntiMalware and SuperAntiSpyware recently, run HJT frequently and see no problems there (except NvCplDaemon which I deleted today and doesn't show up any more after a reboot.)
I'm at the end of my rope and hope someone can help!
Thanks ahead of time.
gldmontana[/u]

Back to top
View users profile Send private message
k027

Special Response Team
Guest Forums Host
Guest Forums Host

Joined: Aug 25, 2003
Posts: 8337

1st Responders SRT

PostPosted: Wed Jun 11, 2008 12:37 am    Post subject:
Reply with quote

You may have malware. Try working through the MRP:

http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview

Back to top
View users profile Send private message
gldmontana

Cadet
Cadet


Joined: May 24, 2008
Posts: 3
Location: USA

PostPosted: Wed Jun 11, 2008 6:40 am    Post subject:
Reply with quote

Thanks, k027, but I've already run all of those. I'm wondering if having SP3 installed April 14 could be causing some problems. I noticed a number of 'anonymous logons' under security in component services starting on that date. I found a workaround to do a 'search' and saw that SP3 went in on that date. I had also installed and run MalwareBytes' AntiMalware on that date. I don't know if anonymous logons are anything to worry about but I don't like the sound of them. Also saw spnpinst.exe (peer-to-peer) in the list of installs on that date and don't know where that came from.
I'm uninstalling SP3 to see what happens.
BTW, I forgot to mention in my first post that Windows Media Player doesn't work...freezes up my computer to the point that I have to manually turn it off on the back of the tower.
Hope there is more help out there. Thanks!

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7273

Moderators MVP Premium SRT Team F@H

PostPosted: Wed Jun 11, 2008 12:12 pm    Post subject:
Reply with quote

gldmontana wrote:
Thanks, k027, but I've already run all of those.
Where did you post your logs?


_________________
Never stop learning
Back to top
View users profile Send private message
gldmontana

Cadet
Cadet


Joined: May 24, 2008
Posts: 3
Location: USA

PostPosted: Wed Jun 11, 2008 4:51 pm    Post subject:
Reply with quote

I haven't posted my logs yet. However, some of the issues have gone away with the uninstall of SP3.
However, I still can't access System Info even when logged on as administrator in Safe Mode. Earlier this morning my computer froze up for no apparent reason so I ran CCleaner again. I haven't tried Windows Media Player again since I have work to do and don't want to go thru another freeze just yet.
Should I post my most recent HJT log here. Which other logs?
Thanks for your reply!

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7273

Moderators MVP Premium SRT Team F@H

PostPosted: Wed Jun 11, 2008 8:22 pm    Post subject:
Reply with quote

Hi gldmontana,

BTW Welcome to CastleCops! Very Happy

Ideally you need to post your initial log from Step 1 of the MRP and a final one after completing Step 9. Just post the last one if you didn't keep the first.

Please read the instructions at the top of this page and follow these instructions before posting. One of our trained 1st Responders or Security Experts will be along help you. That forum is the only one in which logs are read - if they are posted anywhere else then they are moved or removed.

Good Luck! Smile


_________________
Never stop learning
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Windows NT/2000/2003/XP All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer