[happyrock]

during my research on your problem several people reported their problem, like yours, was gone AFTER running ad-aware..
this was a fix for IE...

Edited by happyrock, 23 March 2009 - 07:03 PM.

[Advertisements]

Thanks for the explanation. I like clear and concise intructions (which you guys at GTG are really good at giving) and have no problem following them, but I like to learn a little along the way too.

Just wanted to let you know that I've completed all your steps:

Ran Ad Aware - nothing dectected

Ran ATF

Ran ERUNT

Ran MBAM - 1 item, Disabled.SecurityCenter. It was a quick scan, I'm puzzled over this and wonder if it's not some kind of false positive. I run MBAM quite often and it's never showed this before. My firewall is Comodo and seems to be functioning fine. The full explanation in the log was this:

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Rebooted

Ran Avast (Full Scan) - Nothing detected.

Rebooted

Still have the problem with IE.

Ran RooterRootKit, got error message:

Windows -No Disk Exception Processing Message c0000013 Parameters 75b6bf7c 4 75b6bf7c 75b6bf7c, with the options to Cancel, Try Again, Continue. Tried each of these kept getting the same error sound. So I X'd the message off the screen. And it continued to run the "scan". And gave the report afterwards.

I will mention that Comodo was sending up alerts right and left (as usual) when I got the above error message from Rooter and I was answering them as fast as I could to accept, finally chose to recognize as an updater or installer and switched it to Installation Mode and I didn't get any more alerts from Comodo after that and Rooter was able as I said to run to completion. This is the thing that bugs me about Comodo, you can't do anything without getting a ton of alerts, the thing can't think for itself at all. I'm not a computer expert by any means but I feel you have to be to answer some of the alerts. When I'm installing something or updating, I usually just set it to installation mode so it'll leave me alone. Tried Zone Alarm before Comodo and it was not compatible for some reason, that was a couple years ago.

So do you still want me to post the RooterRootKit and OldTimerListIt logs in the malware forum. If so, what do I name the topic?

Thanks again for the time you're putting into answering all my questions.

[jen147]

Thanks for the explanation. I like clear and concise intructions (which you guys at GTG are really good at giving) and have no problem following them, but I like to learn a little along the way too.

Just wanted to let you know that I've completed all your steps:

Ran Ad Aware - nothing dectected

Ran ATF

Ran ERUNT

Ran MBAM - 1 item, Disabled.SecurityCenter. It was a quick scan, I'm puzzled over this and wonder if it's not some kind of false positive. I run MBAM quite often and it's never showed this before. My firewall is Comodo and seems to be functioning fine. The full explanation in the log was this:

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Rebooted

Ran Avast (Full Scan) - Nothing detected.

Rebooted

Still have the problem with IE.

Ran RooterRootKit, got error message:

Windows -No Disk Exception Processing Message c0000013 Parameters 75b6bf7c 4 75b6bf7c 75b6bf7c, with the options to Cancel, Try Again, Continue. Tried each of these kept getting the same error sound. So I X'd the message off the screen. And it continued to run the "scan". And gave the report afterwards.

I will mention that Comodo was sending up alerts right and left (as usual) when I got the above error message from Rooter and I was answering them as fast as I could to accept, finally chose to recognize as an updater or installer and switched it to Installation Mode and I didn't get any more alerts from Comodo after that and Rooter was able as I said to run to completion. This is the thing that bugs me about Comodo, you can't do anything without getting a ton of alerts, the thing can't think for itself at all. I'm not a computer expert by any means but I feel you have to be to answer some of the alerts. When I'm installing something or updating, I usually just set it to installation mode so it'll leave me alone. Tried Zone Alarm before Comodo and it was not compatible for some reason, that was a couple years ago.

So do you still want me to post the RooterRootKit and OldTimerListIt logs in the malware forum. If so, what do I name the topic?

Thanks again for the time you're putting into answering all my questions.

[happyrock]

tell them I sent you there and give a link to this topic...

[Dan]

Hey there Jen,

One of the first things suggested in this thread was to see if there was any difference in Safe Mode; to clarify, this should be Safe Mode with Networking -- it's the same steps for both, just ensure you select Safe Mode with Networking when the option presents itself. Check if the issues with IE remain, or whether that corrected it. It's possible that there is an application on your machine that is causing the issue; or possibly when you removed a program/infection a registry key was corrupted. Safe mode with networking should give you an indication of which it is.

This is the thing that bugs me about Comodo, you can't do anything without getting a ton of alerts, the thing can't think for itself at all. I'm not a computer expert by any means but I feel you have to be to answer some of the alerts.

It may be annoying, but this generally indicates to me that you are using a good firewall. While you may not think so, Comodo is indeed making many, many decisions on its own every second behind the scenes. I know what you're saying, but the hard part from a software stand-point is that there's no way to differentiate between a "requested" change and a "automated change" (such as malicious software may do). That's why it needs to ask you all the time.

When I'm installing something or updating, I usually just set it to installation mode so it'll leave me alone.

That's what it's there for It even reverts back on it's own

If you decide to move to Zone Alarm, I'd have to say you are doing your machine an injustice -- Comodo is far superior in my opinion.

--- BACK ON TOPIC ---
So, please let us know how things go in Safe mode with networking.

Thanks,
- Dan

[jen147]

Hello! Thanks for your help.

Safe Mode went very well. IE opened 100%.

For some strange reason it's only hung on me once all day today. I just don't get it. It's never behaved this good since the problem started. I hesitated even coming on and reporting that, because sure enough it'll start up again tomorrow or the next day, that's usually how it goes, huh.

So what does this mean that it opened (and was extra fast, which was nice) in safe mode?

[Dan]

Without knowing what's running on your machine, the first thing I'd suggest would be to remove all IE toolbars from Add/Remove programs and also remove any add-ons you may have.

If that doesn't do the trick, then please do Step 1.

Step 1 - Generate a startup and uninstall list:
Please download HijackThis (if you do not already have it) and install it -- once it is installed, restart your computer. Once the computer starts up, can you please launch HijackThis and then select the option Open the Misc Tools section -- select Generate StartupList log. Save the startup list in a safe location. Now select the option Open Uninstall Manager and then click Save list -- save it to a safe location. Please post the contents of the startup list and the uninstall list in your next response.

Secondly, I'd like to see what happens in a clean boot; does IE still play up?

Step 2 - Start your machine in a clean boot state:

• Click Start, click Run, type msconfig, and then click OK
• In the new window, select the General tab and then select Selective Startup
• Click to clear the Process SYSTEM.INI File check box.
• Click to clear the Process WIN.INI File check box.
• Click to clear the Load Startup Items check box. Verify that Load System Services and Use Original BOOT.INI are checked.
• Click the Services tab.
• Click to select the Hide All Microsoft Services check box.
• Click Disable All, and then click OK.
• When you are prompted, click Restart to restart the computer.

When the computer reboots, are you able to connect to the Internet?
*Note: To return Windows to a normal startup mode, please do the following:

• Select Start, and then click Run.
• Type msconfig, and then click OK.
• Click the General tab, click Normal Startup - load all device drivers and services, and then click OK. When you are prompted, click Restart to restart the computer.

- Dan

[jen147]

Dan,

I did have google toolbar and removed it via add/remove. Decided to wait before disabling add ons to see if tool bar removal did anything. So far so good. IE is opening every time its asked to. And will open from an email. I did have several add ons but hesitated to do anything further since it seems to be working ok yesterday and so far today, it's early morning here now. But some of the add ons I didn't feel comfortable removing, or better said, I didn't know how to get them back afterward. So do you think the Googl Toolbar was the problem?? I liked it only for the popup blocker, if I can't reinstall it, can you recommend a good free popup blocker?

I have the following BHOs:

AcroIEHelper Library AcroIEHelper.dll
AcroIEHelper Shim Library AcroIEHelperShim.dll
rpbbrowserrecordplugin.dll rpbbrowserrecordplugin.dll
SpywareGuard Download Protection dlprotect.dll
Spybot - Search & Destroy SDHelper.dll
Java™ Platform SE 6 U11 ssv.dll
Java™ Platform SE 6 U12 jp2ssv.dll
Java™ Platform SE 6 U11 jqs_plugin.dll
Messenger msmsgs.exe

Active X:

AutoUpdate Class WMINSTALLMGR.DLL
QuickTime Object QTPlugin.ocx
Wal-Mart Music Downloads Proxy SWEBDLMGR.DLL
Shockwave ActiveX Control SwDir.dll
QuickTime Object QTPlugin.ocx
Snapfish Activia SNAPFISHACTIVIA1000.OCX
Redirect Control REDIRECT.OCX
EPUImageControl Class EPUWALCONTROL.DLL
isInstalled Class wsdetect.dll
Java Plug-in 1.6.0_11 jp2iexp.dll
Keyroute Control KEYROUTE.OCX
FujifilmUploader Class FUJIFILMUPLOADCLIENT.DLL
Wal-Mart Music Downloads Utility ZSWEBDLMGRUTIL.DLL
Adobe PDF Reader AcroPDF.dll
RealPlayer G2 Control rmoc3260.dll
Shockwave Flash Object Flash10b.ocx
iTunesDetector Class ITDETECTOR.OCX
QuickTimeCheck Class QUICKTIMECHECK.OCX
IERPCtl Class ierpplug.dll


I decided to go ahead and give you the Start Up and Uninstall List, as I'm still don't have Java. Although I see it in the add ons.

StartupList report, 4/1/2009, 9:06:56 AM
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP3 (WinNT 5.01.2600)
Detected: Internet Explorer v7.00 (7.00.6000.16791)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Comodo\Firewall\cfp.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Common Files\Desktop Weather Authority\TrueWeather.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Windows Help\Startup]
SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
Desktop Weather Authority.lnk = C:\Program Files\Common Files\Desktop Weather Authority\TrueWeather.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

WinPatrol = C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
SiSPower = Rundll32.exe SiSPower.dll,ModeAgent
Recguard = C:\WINDOWS\SMINST\RECGUARD.EXE
KBD = C:\HP\KBD\KBD.EXE
IgfxTray = C:\WINDOWS\system32\igfxtray.exe
hpsysdrv = c:\windows\system\hpsysdrv.exe
AGRSMMSG = AGRSMMSG.exe
avast! = C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
Windows Defender = "C:\Program Files\Windows Defender\MSASCui.exe" -hide
COMODO Firewall Pro = "C:\Program Files\Comodo\Firewall\cfp.exe" -h
ArcSoft Connection Service = C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
ContentTransferWMDetector.exe = C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe
COMODO Internet Security = "C:\Program Files\Comodo\Firewall\cfp.exe" -h
Adobe Reader Speed Launcher = "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
iTunesHelper = "C:\Program Files\iTunes\iTunesHelper.exe"
Ad-Watch = C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe
SUPERAntiSpyware = C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
WMPNSCFG = C:\Program Files\Windows Media Player\WMPNSCFG.exe
SpybotSD TeaTimer = C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[OptionalComponents]
=

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\system32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
AcroIEHelperStub - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll - {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
(no name) - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll - {3049C3E9-B461-4BC5-8870-4C09146192CA}
SpywareGuard Download Protection - C:\Program Files\SpywareGuard\dlprotect.dll - {4A368E80-174F-4872-96B5-0B27DDD11DB2}
(no name) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - C:\Program Files\Java\jre6\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
(no name) - C:\Program Files\Java\jre6\bin\jp2ssv.dll - {DBC80044-A445-435b-BC74-9C25C1C588A9}
JQSIEStartDetectorImpl - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll - {E7E6F031-17CE-4C07-BC86-EABFE594F69C}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Ad-Aware Update (Weekly).job
AppleSoftwareUpdate.job
MP Scheduled Scan.job

--------------------------------------------------

Enumerating Download Program Files:

[Windows Genuine Advantage Validation Tool]
InProcServer32 = C:\WINDOWS\system32\legitcheckcontrol.dll
CODEBASE = http://go.microsoft....k/?linkid=39204

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\system32\Adobe\Director\SwDir.dll
CODEBASE = http://fpdownload.ma...director/sw.cab

[Snapfish Activia]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\SnapfishActivia1000.ocx
CODEBASE = http://photos.walmar...martActivia.cab

[WUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\wuweb.dll
CODEBASE = http://update.micros...b?1122703680500

[MUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\muweb.dll
CODEBASE = http://update.micros...b?1144095485656

[{74C861A1-D548-4916-BC8A-FDE92EDFF62C}]
CODEBASE = http://mediaplayer.w...ler/install.cab

[Java Plug-in 1.6.0_11]
InProcServer32 = C:\Program Files\Java\jre6\bin\jp2iexp.dll
CODEBASE = http://dl8-cdn-01.su...ows-i586-jc.cab

[{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}]
CODEBASE = http://fpdownload.ma...r/ultrashim.cab

[FujifilmUploader Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\CONFLICT.1\FujifilmUploadClient.dll
CODEBASE = http://photo.walmart...ploadClient.cab

[Get_ActiveX Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\HPGETD~1.OCX
CODEBASE = https://h17000.www1....loadManager.ocx

[ActiveDataInfo Class]
CODEBASE = http://www.symantec....sa/SymAData.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx
CODEBASE = http://fpdownload.ma...ent/swflash.cab

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #5: C:\Program Files\Bonjour\mdnsNSP.dll

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll
WPDShServiceObj: C:\WINDOWS\system32\WPDShServiceObj.dll

--------------------------------------------------
End of report, 9,696 bytes
Report generated in 0.157 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only



UNINSTALL LIST:

3Planesoft Screensaver Manager 1.0
Acrobat.com
Ad-Aware
Ad-Aware
Adobe AIR
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.1
Adobe Shockwave Player 11
Agere Systems PCI Soft Modem
Amazon MP3 Downloader 1.0.3
Apple Mobile Device Support
Apple Software Update
ArcSoft Print Creations
ArcSoft Print Creations - Album Page
ArcSoft Print Creations - Funhouse
ArcSoft Print Creations - Greeting Card
ArcSoft Print Creations - Photo Book
ArcSoft Print Creations - Photo Calendar
ArcSoft Print Creations - Scrapbook
ArcSoft Print Creations - Slimline Card
ArcSoft Software Suite
avast! Antivirus
Bonjour
Bonjour
Bricks of Egypt
CCScore
christmas2005
CleanUp!
COMODO Firewall Pro
Compaq Connections
Content Transfer
Critical Update for Windows Media Player 11 (KB959772)
Desktop Weather Authority
eGames GameButler
ERUNT 1.1j
ESSBrwr
ESSCDBK
ESScore
ESSgui
ESSini
ESSPCD
ESSPDock
ESSTOOLS
essvatgt
GdiplusUpgrade
Google Earth
Help and Support Additions
High Definition Audio Driver Package - KB835221
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Format SDK (KB902344)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB932716-v2)
Hotfix for Windows XP (KB945060-v3)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB961118)
HP Document Viewer 5.3
HP Extended Capabilities 5.3
HP Image Zone 5.3
HP Imaging Device Functions 5.3
HP PSC & OfficeJet 5.3.B
HP Software Update
HP Solution Center & Imaging Support Tools 5.3
Image Resizer Powertoy for Windows XP
iTunes
KBD
Kodak EasyShare software
Luxor Amun Rising (remove only)
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Web Publishing Wizard 1.52
Microsoft Works
MobileMe Control Panel
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 6.0 Parser (KB933579)
netbrdg
OfotoXMI
OpenOffice.org Installer 1.0
PC-Doctor for Windows
Photo Viewer
PictureToTV 1.4.5
PrintMaster 16
PS2
Python 2.2 combined Win32 extensions
Python 2.2.1
QuickTime
RealPlayer
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
SFR
SHASTA
Shockwave
SiS VGA Utilities
SiSAGP driver
skin0001
SKINXSDK
Sonic RecordNow!
Sonic Update Manager
Spelling Dictionaries Support For Adobe Reader 9
Spybot - Search & Destroy
Spybot - Search & Destroy 1.5.2.20
SpywareBlaster 4.1
SpywareGuard v2.2
staticcr
SUPERAntiSpyware Free Edition
tooltips
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VPRINTOL
Wal-Mart Music Downloads Store
Windows Defender
Windows Defender Signatures
Windows Imaging Component
Windows Installer Clean Up
Windows Media Connect
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 11
Windows Media Player 11
Windows Presentation Foundation
Windows XP Service Pack 3
WinPatrol 2009
WIRELESS

[Dan]

Hey Jen,

I'm sorry I've been busy lately.

RE: Google Toolbar.
You could try re-installing it, as it's possible that your previous install simply got corrupted. A fresh/updated copy may not have the same issue.

RE:Java issue.
Could you please give us an update on what's happening with Java? You could try updating it while in Safe Mode with Networking, to rule out software interference.

[jen147]

Dan, that's ok about the wait, I'm in no hurry and sometimes I can't get back to you as soon as I'd like either.

Java needed to be updated, when I'd go into the app and try to update from there it'd say I had the latest download, which was so not true. So I went to the Java site and downloaded the latest that way. Got through the download and then got this error during the installation:

Error 25099. "Unzipping Core Files failed". Tried the trouble shooting advise there on the Java site, it offered an alternative way to download I think, but it didn't help either. Tried to remove old Java using Add/Remove Programs. Had several Java and JRE on there, but it still wouldn't work, got the same error during the Extracting Installer part of install.

Already had Window's Install Cleanup so used it to remove old Java that was left. Same problem. Then came here and happyrock introduced me to JavaRa and used it but still same error at the same point of install. I can no longer find any trace of Java in Add/Remove Programs and it's not listed in Window's Install Cleanup anymore.

There is a Java icon in control panel but when I try to open it it says: Java Virtual Machine Launcher, Could not find the main class: com.sun.deploy.panel.controlPanel. Program will exit.

And there is the link Sun Java Console in the Tools dropdown menu of IE, but it does nothing when clicked. I know there's Java files on my computer because I've seen them in some of the things you've had me run. Just don't know how to get all the old gone so the new can be installed.

Take your time getting back to me if you need to. We are enjoying IE opening when it's supposed to. And have full computer function, so I'd consider the Java thing minor at this point, don't know if there's security issues involved with a partial Java.

Thanks for everything!

[jen147]

Just rereading my original post here's something else happyrock had me try:

try this...
Unregister and re-register the Windows Installer
NOTE THE SINGLE SPACE BEFORE THE /
1. Click Start... click Run... type in MSIEXEC /UNREGISTER...click OK....
Even if you do this correctly... it may look like nothing occurs.

2. Click Start... click Run... type MSIEXEC /REGSERVER... click OK.
Even if you do this correctly... it may look like nothing occurs... or you may briefly see an hourglass....
After you run this command... the operation is complete.
3. Try Windows Installer Cleanup Utility application again....
then go here and test both flash and shockwave...it may offer to install or update them...say yes and REBOOT when done...then go back to the same site and test to make sure they BOTH are working..

[Dan]

Hey Jen,

I found a user with the same/similar issue HERE, so let's see if his fix works for you.

If you still have the "off-line install" file from the Java website (should have been the alternative method), then continue -- if not, please download and save it some where safe. Navigate to C:\Program Files\ -- in here you should see a folder named Java; right-click on it and select Rename. Change its name to Java Backup. Now, shut down your Comodo firewall. Go to where you downloaded the off-line install file and run it. Change the installation directory from the default to C:\Program Files\New Java and then let the installer run.

Do you still get the same error?

- Dan

[jen147]

Dan, Good News! It worked! Thanks so much for the time you and happyrock put into helping me, I really appreciate it.

I do have to say that I got a little trigger happy and clicked right through the part where I was supposed to change the directory to New Java and of course couldn't stop the progress even when I realized it, but it went through anyway.

I guess we can close this one out, hope it helps people in the future who might have this problem(s).

Thanks again!

[Dan]

Good news, indeed I'm happy to hear things appear to be working.

I do have to say that I got a little trigger happy and clicked right through the part where I was supposed to change the directory to New Java and of course couldn't stop the progress even when I realized it, but it went through anyway.

I didn't really think you needed to change the installation directory; the only reason why I kept it in there was on the off-chance that there were some left over registry entries still pointing to that folder, that may have caused issues.

However, if everything is going well, then I wouldn't sweat it. I am a little mortified that after my big speech about how great Comodo was/is, it ended up being the cause of one of your issues Oh well -- I forgive it; it's still one of my favorite free firewalls.

I'm glad we could help. Thanks for taking the time to post how your issue(s) were resolved; feedback is always appreciated.

- Dan