[sorrelwood]

Before I start this I still need to do this:

Step 3.

... restore original permissions to C:\Windows\Servicing folder by clicking here and following the instructions.

I get stuck on Step 6:

------------
6. Type in the object name of NT SERVICE\TrustedInstaller and click on the Check Names button. (See screenshot below)
-----------------



What is the "object name" I should be typing there?
Thanks

[Advertisements]

What is the "object name" I should be typing there?

TrustedInstaller

[CompCav]

What is the "object name" I should be typing there?

TrustedInstaller

[CompCav]

Much of this problem was evidenced by the errors with KB2556532.

We need to hide this update and then retry updates.

When it wants to install it again go to windows update
View updates available.
Right click once to highlight KB2556532. and bring up this menu:

Select Hide update
Close updates and reboot the computer.

[sorrelwood]

Your last post doesn't make sense to me,?

Anyway, I have the CBS.log, but the file it too big. I've even split it into 4 smaller files and it still won't seem to post. Any ideas on what to do. The original file is 20MB.

[CompCav]

Did the sfc run and say it completed successfully?

CompCav

[CompCav]

Post #48 concerned the issue you had initially of repeatedly installing that update and if it came up again this is what to do. I apologize for not explaining that in the post.

Regards,

CompCav

[sorrelwood]

It ran fine, but it said there were corrupt files it couldn't repair.
Still have the error also.

[CompCav]

Please create a free account here and upload the file.

Then post me a link so I can download it for review.


Thanks,

CompCav

[sorrelwood]

http://www.mediafire...v0h27mvrh7rgbj6

[CompCav]

Some of the issues that sfc is seeing can be corrected with the system update readiness tool.

Please go here and download the file Windows6.0-KB947821-v19-x64.msu to your desktop.
Once the download is complete, run the tool.
When it completes it will produce two logs:

• %SYSTEMROOT%\Logs\CBS\CheckSUR.log
• %SYSTEMROOT%\Logs\CBS\CheckSUR.persist.log

Please copy and paste the contents of the two logs in your next reply.

Finally, reboot the computer and try Windows update again and give me a status on Windows Updates.

[sorrelwood]

No luck.
It took forever to run that. I gave up and just left my comp on overnight.
Hopefully you still have some tricks in the bag.

=================================
Checking System Update Readiness.
Binary Version 6.0.6002.22574
Package Version 14.0
2012-04-25 23:02

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 3367
No errors detected

----------------------------Persist-------

=================================
Checking System Update Readiness.
Binary Version 6.0.6002.22574
Package Version 13.0
2011-12-07 23:48

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 2360
No errors detected


=================================
Checking System Update Readiness.
Binary Version 6.0.6002.22574
Package Version 13.0
2011-12-17 13:26

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 2463
No errors detected


=================================
Checking System Update Readiness.
Binary Version 6.0.6002.22574
Package Version 14.0
2012-04-25 21:29

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 2721
No errors detected


=================================
Checking System Update Readiness.
Binary Version 6.0.6002.22574
Package Version 14.0
2012-04-25 23:02

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 3367
No errors detected

[CompCav]

Step 1.

Run ESET Online Scan

Note: You can use either Internet Explorer or Mozilla FireFox for this scan.

Vista / 7 users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.

Please go here then click on:

If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
All of the following instructions work with either Internet Explorer or Mozilla FireFox.

• Select the option YES, I accept the Terms of Use then click on:
• When prompted allow Add-On/Active X to install.
• Make sure that the option Scan archives is checked.
• Now click on Advanced Settings and select the following:
  
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
• Now click on:
• The virus signature database will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically. The scan may take several hours.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed select Uninstall application on close, make sure you copy the logfile first!
• Now click on:
• Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
• Copy and paste that log as a reply to this topic.

Step 2.

Security Check
Download Security Check by screen317 from here or here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.


Step 3.

Please post:


eset log
security check log


Please give me an update.

[sorrelwood]

C:\junk\VeohWebPlayerSetup_eng.exe Win32/OpenCandy application deleted - quarantined
C:\Users\abaray\Documents\junk\asc-setup.exe a variant of Win32/Toolbar.Widgi application deleted - quarantined
C:\Users\abaray\Documents\junk\MyPhoneExplorer_Setup_1.8.1.exe Win32/OpenCandy application deleted - quarantined
C:\Users\abaray\Documents\temp\media.player.codec.pack.v3.9.6.setup.exe Win32/Toolbar.Widgi application deleted - quarantined
C:\Users\abaray\Downloads\cnet2_x-flv-converter6-cnet_exe.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined
C:\Users\abaray\Downloads\cnet2_x-flv-converter6-cnet_exe.exe&dlm=0 a variant of Win32/InstallCore.D application cleaned by deleting - quarantined
C:\Users\abaray\Downloads\YouTubeDownloaderSetup35.exe Win32/Toolbar.Widgi application deleted - quarantined
C:\Users\abaray\Downloads\Acoustica Mixcraft v5.2 build 151+Patch\Acoustica Mixcraft v5.2 build 151+patch.exe a variant of Win32/HackTool.Patcher.T application deleted - quarantined
C:\Users\abaray\Downloads\junk\YouTubeDownloaderSetup33.exe a variant of Win32/Toolbar.Widgi application deleted - quarantined

Results of screen317's Security Check version 0.99.32
x64
Internet Explorer 9
``````````````````````````````
Antivirus/Firewall Check:
Windows Security Center service is not running! This report may not be accurate!
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
Java™ 6 Update 5
Java™ 6 Update 7
Java version out of date!
````````````````````````````````
Process Check:
objlist.exe by Laurent
Microsoft Security Client Antimalware MsMpEng.exe
``````````End of Log````````````

[CompCav]

Step 1.


Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.

Upgrading Java:

• Go to this site and click Do I have Java
• It will check your current version and then offer to update to the latest version

Step 2.

run farbar service scanner



Tick "All" options.
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.

Please copy and paste the log to your reply

[sorrelwood]

Farbar Service Scanner Version: 30-04-2012 01
Ran by abaray (administrator) on 30-04-2012 at 18:44:53
Running from "C:\Users\abaray\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2SHQG6D0"
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


File Check:
========
C:\Windows\System32\nsisvc.dll
[2008-01-20 22:49] - [2008-01-20 22:49] - 0024576 ____A (Microsoft Corporation) ACB62BAA1C319B17752553DF3026EEEB

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcsvc.dll
[2010-11-08 13:03] - [2009-04-11 03:11] - 0268288 ____A (Microsoft Corporation) 3ED0321127CE70ACDAABBF77E157C2A7

C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll
[2011-04-30 09:15] - [2011-03-02 12:12] - 0117760 ____A (Microsoft Corporation) 06230F1B721494A6DF8D47FD395BB1B0

C:\Windows\System32\mpssvc.dll
[2010-11-08 13:03] - [2009-04-11 03:11] - 0603136 ____A (Microsoft Corporation) 897E3BAF68BA406A61682AE39C83900C

C:\Windows\System32\bfe.dll
[2010-11-08 13:02] - [2009-04-11 03:11] - 0458240 ____A (Microsoft Corporation) FFB96C2589FFA60473EAD78B39FBDE29

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll
[2008-01-20 22:47] - [2008-01-20 22:47] - 0128000 ____A (Microsoft Corporation) 4FF71B076A7760FE75EA5AE2D0EE0018

C:\Windows\System32\vssvc.exe
[2010-11-08 13:04] - [2009-04-11 03:11] - 1433600 ____A (Microsoft Corporation) B75232DAD33BFD95BF6F0A3E6BFF51E1

C:\Windows\System32\wscsvc.dll
[2010-11-08 13:02] - [2009-04-11 03:11] - 0074752 ____A (Microsoft Corporation) 9EA3E6D0EF7A5C2B9181961052A4B01A

C:\Windows\System32\wbem\WMIsvc.dll
[2010-11-08 13:03] - [2009-04-11 03:11] - 0221696 ____A (Microsoft Corporation) D2E7296ED1BD26D8DB2799770C077A02

C:\Windows\System32\wuaueng.dll
[2009-10-03 20:44] - [2009-08-06 22:24] - 2424024 ____A (Microsoft Corporation) FB3796754FE00F0BDC87A36F164A5F4D

C:\Windows\System32\qmgr.dll
[2010-11-08 13:04] - [2009-04-11 03:11] - 1081856 ____A (Microsoft Corporation) 6D316F4859634071CC25C4FD4589AD2C

C:\Windows\System32\es.dll
[2010-11-08 13:04] - [2009-04-11 03:11] - 0361984 ____A (Microsoft Corporation) E12F22B73F153DECE721CD45EC05B4AF

C:\Windows\System32\cryptsvc.dll
[2010-11-08 13:03] - [2009-04-11 03:11] - 0166912 ____A (Microsoft Corporation) 18918613E63F387CDE4D95CA7D49DCF7

C:\Program Files\Windows Defender\MpSvc.dll
[2008-01-20 22:47] - [2008-01-20 22:47] - 0383544 ____A (Microsoft Corporation) 7D2A43E8FDF725A1133F6C6056A72CDC

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2010-11-08 13:04] - [2009-04-11 03:11] - 0719872 ____A (Microsoft Corporation) CF8B9A3A5E7DC57724A89D0C3E8CF9EF



**** End of log ****