HD Problem:

[Paul]

I again cheked the Event Viewer for the last time I had to reset the
cvomputer (yesterday) it gave the following error


Type Source
Error Service Control Manager

When I checked the properties of the error it said Event I.D. 7023


In addition whether Spybot or Spywareblaster, the point is that Spybot
should work after I've uninstalled it and re-installed it. I shouldn't
have to go to Spybots forum for anything because I never had to before
and it worked fine. 'Something' has happened to my computer which is
causing Spybot not to function and to act erratically. That is the
root of this problem. Some have suggested it may be a RAM problem and
I've run Memtest twice and passed. Also, I was able to boot normally
today.


Robert

http://www.eventid.net/display.asp?eventid=7023&source=

The <name of the service> service terminated with the
following error: <error description>

What was <name of the service> ?

What was <error description> ?

If you look in the Event Viewer window, at the top level you can see

Event Viewer (Local)
Application
Secutiry
System

You can right-clock on one of the three items, and select "Save As",
and save the entire log to a file. Possible saving formats
include CSV (comma separated) or TXT (tab separated). You should be
able to copy and paste the stuff you need, out of one of those
files, if you want to post some entries.

They aren't the best looking files in the world, but it'll save
you having to type the stuff. You could also have copied and
pasted the text, out of the individual entries. Saving them all
as a file, might speed up the copy and paste part of it.

Paul

 

[Harden Thicke]

HoopleHead Alert.

 

[Harden Thicke]

Illiterate HoopleHead.

 

[MyNews]

Welcome to User Net
For this is not HBO

Illiterate HoopleHead.

 

[glee]

I again cheked the Event Viewer for the last time I had to reset the
cvomputer (yesterday) it gave the following error


Type Source
Error Service Control Manager

When I checked the properties of the error it said Event I.D. 7023


In addition whether Spybot or Spywareblaster, the point is that Spybot
should work after I've uninstalled it and re-installed it. I shouldn't
have to go to Spybots forum for anything because I never had to before
and it worked fine. 'Something' has happened to my computer which is
causing Spybot not to function and to act erratically. That is the
root of this problem. Some have suggested it may be a RAM problem and
I've run Memtest twice and passed. Also, I was able to boot normally
today.

That still is not the error details. Open Event Viewer, find the errors
that correspond with the Time and Date of your shutdown hangs or other
failures, double click one of those errors in the list to bring up the
Properties. On the right side of the Event Properties will be 3
buttons: an Up arrow, a Down arrow, and a picture of two staggered
pieces of paper. Click the 3rd button....it will copy all the error
details to the clipboard.
Open a reply to this message and paste the info from the clipboard into
the body of your reply here.

Do that for all the errors that correspond to a shutdown hang or other
issue you are having, and let us know what the issue was for each
corresponding error you list.

You wrote: "I shouldn't have to go to Spybot's forum for anything
because I never had to before and it worked fine."
Are you kidding? Everyone here in this forum has an issue with
something in XP, yet they all ran XP for a long time before an issue
came up. According to your logic no one should post anything anywhere,
because it "used to work fine". My car stopped going into gear when I
put it in Drive. I shouldn't need to go to a transmission shop because
I never had to before and it worked fine. ;-)

The fact that you reinstalled Spybot doesn't mean anything. First of
all, uninstalling may not have removed all its files or settings.
Secondly, even if the issue is caused by a change made in XP that is
affecting Spybot, the people in the Spybot forums are more likely to be
aware of what might cause the error or incompatibility, since it may be
exclusive to the proper working of Spybot.

 

[Navyguy]

That still is not the error details.  Open Event Viewer, find the errors
that correspond with the Time and Date of your shutdown hangs or other
failures, double click one of those errors in the list to bring up the
Properties.  On the right side of the Event Properties will be 3
buttons: an Up arrow, a Down arrow, and a picture of two staggered
pieces of paper.  Click the 3rd button....it will copy all the error
details to the clipboard.
Open a reply to this message and paste the info from the clipboard into
the body of your reply here.

Do that for all the errors that correspond to a shutdown hang or other
issue you are having, and let us know what the issue was for each
corresponding error you list.

You wrote: "I shouldn't have to go to Spybot's forum for anything

because I never had to before and it worked fine."
Are you kidding?  Everyone here in this forum has an issue with
something in XP, yet they all ran XP for a long time before an issue
came up.  According to your logic no one should post anything anywhere,
because it "used to work fine".  My car stopped going into gear when I
put it in Drive.  I shouldn't need to go to a transmission shop because
I never had to before and it worked fine.  ;-)

The fact that you reinstalled Spybot doesn't mean anything.  First of
all, uninstalling may not have removed all its files or settings.
Secondly, even if the issue is caused by a change made in XP that is
affecting Spybot, the people in the Spybot forums are more likely to be
aware of what might cause the error or incompatibility, since it may be
exclusive to the proper working of Spybot.

--
Glen Ventura
MS MVP  Oct. 2002 - Sept. 2009
CompTIA A+http://dts-l.net/- Hide quoted text -

- Show quoted text -

I did as you said and I clicked the 3rd button with the two pieces of
paper. I didn't know how to access the clipboard any other way so I
opened Word and clicked Edit> Office Clipboard and then I selected
paste all. This is what it gave me. It doesn't look like what I think
your asking for so perhaps I didn't do this correctly?



Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
User: N/A
Computer: DRAGON
Description:
Date: 12/8/2010
Time: 2:17:19 AM
The Application Management service terminated with the following
error:
The specified module could not be found.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

If the above is satisfactory then I can do the same for other errors
but I can't say for certain what they are associated with except that
most of the errors occurred this month. However I'm willing to do
what's neccessary if I can and with help and instructions.

Robert

 

[Paul]

I did as you said and I clicked the 3rd button with the two pieces of
paper. I didn't know how to access the clipboard any other way so I
opened Word and clicked Edit> Office Clipboard and then I selected
paste all. This is what it gave me. It doesn't look like what I think
your asking for so perhaps I didn't do this correctly?



Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
User: N/A
Computer: DRAGON
Description:
Date: 12/8/2010
Time: 2:17:19 AM
The Application Management service terminated with the following
error:
The specified module could not be found.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

If the above is satisfactory then I can do the same for other errors
but I can't say for certain what they are associated with except that
most of the errors occurred this month. However I'm willing to do
what's neccessary if I can and with help and instructions.

Robert

http://www.theeldergeek.com/application_management.htm

"Application Management Service

Used when you modify an application i.e. Add/Remove."

So then the question is, what module ?

The specified module could not be found.

Maybe that is some installer or uninstaller script ?

You might also look at the time reported in that event,
and think back to what you were doing at the time.

Paul

 

[Navyguy]

http://www.theeldergeek.com/application_management.htm

   "Application Management Service

    Used when you modify an application i.e. Add/Remove."

So then the question is, what module ?

    The specified module could not be found.

Maybe that is some installer or uninstaller script ?

You might also look at the time reported in that event,
and think back to what you were doing at the time.

    Paul- Hide quoted text -

- Show quoted text -

Hmmmm, the only thing I can think of is that it may be either when I
was uninstalling Spybot and/or Microsoft Small Business (Word) because
those are the only programs I've removed but I didn't get any errors
when doing so.


Robert

 

[glee]

Hmmmm, the only thing I can think of is that it may be either when I
was uninstalling Spybot and/or Microsoft Small Business (Word) because
those are the only programs I've removed but I didn't get any errors
when doing so.

The Event Viewer error: "Application Management service terminated with
the following error: The specified module could not be found" is normal
in Windows XP Home, because the file Appmgmt.dll is not included with XP
Home. There is an incorrect Registry entry in XP Home that causes this
Event error to appear every time you use Add or Remove Programs in
Control Panel. It is not really an error, does not affect anything, and
is totally UNRELATED to your described issues.

Adding or removing a program may generate Event ID 7023
http://support.microsoft.com/kb/328213

You need to find the errors in Event Viewer that correspond in date and
time to your supposed shutdown issue. You said you can't always shut
down correctly. The next time it happens, write down the time and date,
then start the computer back up and find the corresponding error in
Event Viewer, based on the date and time you wrote down.

 

[Navyguy]

The Event Viewer error: "Application Management service terminated with
the following error: The specified module could not be found" is normal
in Windows XP Home, because the file Appmgmt.dll is not included with XP
Home.  There is an incorrect Registry entry in XP Home that causes this
Event error to appear every time you use Add or Remove Programs in
Control Panel.  It is not really an error, does not affect anything, and
is totally UNRELATED to your described issues.

Adding or removing a program may generate Event ID 7023http://support.microsoft.com/kb/328213

You need to find the errors in Event Viewer that correspond in date and
time to your supposed shutdown issue.  You said you can't always shut
down correctly.  The next time it happens, write down the time and date,
then start the computer back up and find the corresponding error in
Event Viewer, based on the date and time you wrote down.
--
Glen Ventura
MS MVP  Oct. 2002 - Sept. 2009
CompTIA A+http://dts-l.net/- Hide quoted text -

- Show quoted text -

Ok I'll do that and will look through the Event Viewer again to see if
I can discover anything.

Thanks
Robert

 

[Navyguy]

Ok I'll do that and will look through the Event Viewer again to see if
I can discover anything.

Thanks
Robert- Hide quoted text -

- Show quoted text -

I went back and looked at all the errors in Applications and Systems
and put them on the clipboard:

These are the System Errors:


Event Type: Warning
Event Source: avgntflt
Event Category: None
Event ID: 18
Date: 12/6/2010
Time: 3:38:12 AM
User: N/A
Computer: DRAGON
Description:
TIMEOUT<logonui.exe> C:\WINDOWS\system32\msctf.dll
Data:
0000: 00 00 00 00 02 00 5a 00 ......Z.
0008: 00 00 00 00 12 00 07 80 .......
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........



Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 11/29/2010
Time: 2:35:01 AM
User: N/A
Computer: DRAGON
Description:
The time provider NtpClient is configured to acquire time from one or
more time sources, however none of the sources are currently
accessible. No attempt to contact a source will be made for 14
minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 11/27/2010
Time: 4:57:07 AM
User: N/A
Computer: DRAGON
Description:
TCP/IP has reached the security limit imposed on the number of
concurrent TCP connect attempts.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....'..
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........



Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 11/26/2010
Time: 7:10:06 AM
User: N/A
Computer: DRAGON
Description:
The System Restore filter encountered the unexpected error
'0xC000009A' while processing the file 'new' on the volume
'HarddiskVolume1'. It has stopped monitoring the volume.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 06 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........



Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 11/24/2010
Time: 7:11:59 PM
User: NT AUTHORITY\SYSTEM
Computer: DRAGON
Description:
The server {73E709EA-5D93-4B2E-BBB0-99B7938DA9E4} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.




Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 11/24/2010
Time: 6:58:30 PM
User: N/A
Computer: DRAGON
Description:
The System Restore filter encountered the unexpected error
'0xC000009A' while processing the file 'Configuration.ini' on the
volume 'HarddiskVolume1'. It has stopped monitoring the volume.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 04 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........



These are the application errors, it it my belief that the problem
started with the last entries because of the date of last month.

Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 12/8/2010
Time: 3:18:46 AM
User: N/A
Computer: DRAGON
Description:
Fault bucket 86121004.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 38 36 31 32 31 30 30 34 86121004
0010: 0d 0a ..


Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 12/8/2010
Time: 3:18:38 AM
User: N/A
Computer: DRAGON
Description:
Hanging application WINWORD.EXE, version 10.0.6612.0, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 57 49 4e 57 4f 52 WINWOR
0018: 44 2e 45 58 45 20 31 30 D.EXE 10
0020: 2e 30 2e 36 36 31 32 2e .0.6612.
0028: 30 20 69 6e 20 68 75 6e 0 in hun
0030: 67 61 70 70 20 30 2e 30 gapp 0.0
0038: 2e 30 2e 30 20 61 74 20 .0.0 at
0040: 6f 66 66 73 65 74 20 30 offset 0
0048: 30 30 30 30 30 30 30 0000000


Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 12/6/2010
Time: 3:36:45 AM
User: N/A
Computer: DRAGON
Description:
Fault bucket 1180947459.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 31 38 30 39 34 37 34 11809474
0010: 35 39 0d 0a 59..


Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 12/6/2010
Time: 3:35:51 AM
User: N/A
Computer: DRAGON
Description:
Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 38 re.exe 8
0020: 2e 30 2e 36 30 30 31 2e .0.6001.
0028: 31 38 37 30 32 20 69 6e 18702 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 12/6/2010
Time: 3:23:38 AM
User: N/A
Computer: DRAGON
Description:
Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/
static/trustedr/en/authrootseq.txt> with error: This operation
returned because the timeout period expired.


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/28/2010
Time: 9:59:54 PM
User: N/A
Computer: DRAGON
Description:
Hanging application nero.exe, version 7.9.6.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 6e 65 72 6f 2e 65 nero.e
0018: 78 65 20 37 2e 39 2e 36 xe 7.9.6
0020: 2e 30 20 69 6e 20 68 75 .0 in hu
0028: 6e 67 61 70 70 20 30 2e ngapp 0.
0030: 30 2e 30 2e 30 20 61 74 0.0.0 at
0038: 20 6f 66 66 73 65 74 20 offset
0040: 30 30 30 30 30 30 30 30 00000000


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/26/2010
Time: 7:12:51 AM
User: N/A
Computer: DRAGON
Description:
Faulting application rstrui.exe, version 5.1.2600.5512, faulting
module srrstr.dll, version 5.1.2600.5512, fault address 0x00009836.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 72 73 74 ure rst
0018: 72 75 69 2e 65 78 65 20 rui.exe
0020: 35 2e 31 2e 32 36 30 30 5.1.2600
0028: 2e 35 35 31 32 20 69 6e .5512 in
0030: 20 73 72 72 73 74 72 2e srrstr.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 35 35 31 2600.551
0048: 32 20 61 74 20 6f 66 66 2 at off
0050: 73 65 74 20 30 30 30 30 set 0000
0058: 39 38 33 36 0d 0a 9836..



Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 11/26/2010
Time: 7:12:45 AM
User: N/A
Computer: DRAGON
Description:
Fault bucket 743385702.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 37 34 33 33 38 35 37 30 74338570
0010: 32 0d 0a 2..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/26/2010
Time: 7:12:30 AM
User: N/A
Computer: DRAGON
Description:
Faulting application rstrui.exe, version 5.1.2600.5512, faulting
module srrstr.dll, version 5.1.2600.5512, fault address 0x00009836.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 72 73 74 ure rst
0018: 72 75 69 2e 65 78 65 20 rui.exe
0020: 35 2e 31 2e 32 36 30 30 5.1.2600
0028: 2e 35 35 31 32 20 69 6e .5512 in
0030: 20 73 72 72 73 74 72 2e srrstr.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 35 35 31 2600.551
0048: 32 20 61 74 20 6f 66 66 2 at off
0050: 73 65 74 20 30 30 30 30 set 0000
0058: 39 38 33 36 0d 0a 9836..


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 11/26/2010
Time: 7:12:23 AM
User: N/A
Computer: DRAGON
Description:
Fault bucket 743385702.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 37 34 33 33 38 35 37 30 74338570
0010: 32 0d 0a 2..
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/26/2010
Time: 7:12:18 AM
User: N/A
Computer: DRAGON
Description:
Faulting application rstrui.exe, version 5.1.2600.5512, faulting
module srrstr.dll, version 5.1.2600.5512, fault address 0x00009836.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 72 73 74 ure rst
0018: 72 75 69 2e 65 78 65 20 rui.exe
0020: 35 2e 31 2e 32 36 30 30 5.1.2600
0028: 2e 35 35 31 32 20 69 6e .5512 in
0030: 20 73 72 72 73 74 72 2e srrstr.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 35 35 31 2600.551
0048: 32 20 61 74 20 6f 66 66 2 at off
0050: 73 65 74 20 30 30 30 30 set 0000
0058: 39 38 33 36 0d 0a 9836..


Event Type: Error
Event Source: ESENT
Event Category: General
Event ID: 490
Date: 11/24/2010
Time: 11:58:40 PM
User: N/A
Computer: DRAGON
Description:
svchost (876) An attempt to open the file "C:\WINDOWS
\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb" for
read / write access failed with system error 32 (0x00000020): "The
process cannot access the file because it is being used by another
process. ". The open file operation will fail with error -1032
(0xfffffbf8).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Microsoft Office 10
Event Category: None
Event ID: 2001
Date: 11/24/2010
Time: 10:39:27 PM
User: N/A
Computer: DRAGON
Description:
Rejected Safe Mode action : Microsoft Word.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Microsoft Office 10
Event Category: None
Event ID: 2001
Date: 11/24/2010
Time: 8:22:48 PM
User: N/A
Computer: DRAGON
Description:
Rejected Safe Mode action : Microsoft Word.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 11/24/2010
Time: 7:36:35 PM
User: N/A
Computer: DRAGON
Description:
Fault bucket 1229456033.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 32 32 39 34 35 36 30 12294560
0010: 33 33 0d 0a 33..


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/24/2010
Time: 7:36:28 PM
User: N/A
Computer: DRAGON
Description:
Faulting application spybotsd.exe, version 1.6.2.46, faulting module
kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 70 79 ure spy
0018: 62 6f 74 73 64 2e 65 78 botsd.ex
0020: 65 20 31 2e 36 2e 32 2e e 1.6.2.
0028: 34 36 20 69 6e 20 6b 65 46 in ke
0030: 72 6e 65 6c 33 32 2e 64 rnel32.d
0038: 6c 6c 20 35 2e 31 2e 32 ll 5.1.2
0040: 36 30 30 2e 35 37 38 31 600.5781
0048: 20 61 74 20 6f 66 66 73 at offs
0050: 65 74 20 30 30 30 31 32 et 00012
0058: 61 66 62 0d 0a afb..


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/24/2010
Time: 7:36:28 PM
User: N/A
Computer: DRAGON
Description:
Faulting application spybotsd.exe, version 1.6.2.46, faulting module
kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 70 79 ure spy
0018: 62 6f 74 73 64 2e 65 78 botsd.ex
0020: 65 20 31 2e 36 2e 32 2e e 1.6.2.
0028: 34 36 20 69 6e 20 6b 65 46 in ke
0030: 72 6e 65 6c 33 32 2e 64 rnel32.d
0038: 6c 6c 20 35 2e 31 2e 32 ll 5.1.2
0040: 36 30 30 2e 35 37 38 31 600.5781
0048: 20 61 74 20 6f 66 66 73 at offs
0050: 65 74 20 30 30 30 31 32 et 00012
0058: 61 66 62 0d 0a afb..



Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/24/2010
Time: 6:58:20 PM
User: N/A
Computer: DRAGON
Description:
Faulting application sdupdate.exe, version 1.6.0.12, faulting module ,
version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 64 75 ure sdu
0018: 70 64 61 74 65 2e 65 78 pdate.ex
0020: 65 20 31 2e 36 2e 30 2e e 1.6.0.
0028: 31 32 20 69 6e 20 20 30 12 in 0
0030: 2e 30 2e 30 2e 30 20 61 .0.0.0 a
0038: 74 20 6f 66 66 73 65 74 t offset
0040: 20 30 30 30 30 30 30 30 0000000
0048: 30 0d 0a 0..



Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/24/2010
Time: 4:36:14 PM
User: N/A
Computer: DRAGON
Description:
Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 38 re.exe 8
0020: 2e 30 2e 36 30 30 31 2e .0.6001.
0028: 31 38 37 30 32 20 69 6e 18702 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000


Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/24/2010
Time: 3:47:02 PM
User: N/A
Computer: DRAGON
Description:
Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 38 re.exe 8
0020: 2e 30 2e 36 30 30 31 2e .0.6001.
0028: 31 38 37 30 32 20 69 6e 18702 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000



Thoughts/Suggetions?

Robert

 

[Navyguy]

I went back and looked at all the errors in Applications and Systems
and put them on the clipboard:

These are the System Errors:

Event Type:     Warning
Event Source:   avgntflt
Event Category: None
Event ID:       18
Date:           12/6/2010
Time:           3:38:12 AM
User:           N/A
Computer:       DRAGON
Description:
TIMEOUT<logonui.exe> C:\WINDOWS\system32\msctf.dll
Data:
0000: 00 00 00 00 02 00 5a 00   ......Z.
0008: 00 00 00 00 12 00 07 80   .......
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Event Type:     Error
Event Source:   W32Time
Event Category: None
Event ID:       29
Date:           11/29/2010
Time:           2:35:01 AM
User:           N/A
Computer:       DRAGON
Description:
The time provider NtpClient is configured to acquire time from one or
more time sources, however none of the sources are currently
accessible.  No attempt to contact a source will be made for 14
minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type:     Warning
Event Source:   Tcpip
Event Category: None
Event ID:       4226
Date:           11/27/2010
Time:           4:57:07 AM
User:           N/A
Computer:       DRAGON
Description:
TCP/IP has reached the security limit imposed on the number of
concurrent TCP connect attempts.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00   ......T.
0008: 00 00 00 00 82 10 00 80   ....'..
0010: 01 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Event Type:     Error
Event Source:   sr
Event Category: None
Event ID:       1
Date:           11/26/2010
Time:           7:10:06 AM
User:           N/A
Computer:       DRAGON
Description:
The System Restore filter encountered the unexpected error
'0xC000009A' while processing the file 'new' on the volume
'HarddiskVolume1'.  It has stopped monitoring the volume.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 06 00 00 00 04 00 4e 00   ......N.
0008: 00 00 00 00 01 00 00 c0   .......À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Event Type:     Error
Event Source:   DCOM
Event Category: None
Event ID:       10010
Date:           11/24/2010
Time:           7:11:59 PM
User:           NT AUTHORITY\SYSTEM
Computer:       DRAGON
Description:
The server {73E709EA-5D93-4B2E-BBB0-99B7938DA9E4} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type:     Error
Event Source:   sr
Event Category: None
Event ID:       1
Date:           11/24/2010
Time:           6:58:30 PM
User:           N/A
Computer:       DRAGON
Description:
The System Restore filter encountered the unexpected error
'0xC000009A' while processing the file 'Configuration.ini' on the
volume 'HarddiskVolume1'.  It has stopped monitoring the volume.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 04 00 00 00 04 00 4e 00   ......N.
0008: 00 00 00 00 01 00 00 c0   .......À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

These are the application errors, it it my belief that the problem
started with the last entries because of the date of last month.

Event Type:     Error
Event Source:   Application Hang
Event Category: None
Event ID:       1001
Date:           12/8/2010
Time:           3:18:46 AM
User:           N/A
Computer:       DRAGON
Description:
Fault bucket 86121004.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20   Bucket:
0008: 38 36 31 32 31 30 30 34   86121004
0010: 0d 0a                     ..

Event Type:     Error
Event Source:   Application Hang
Event Category: (101)
Event ID:       1002
Date:           12/8/2010
Time:           3:18:38 AM
User:           N/A
Computer:       DRAGON
Description:
Hanging application WINWORD.EXE, version 10.0.6612.0, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 48 61 6e 67   ion Hang
0010: 20 20 57 49 4e 57 4f 52     WINWOR
0018: 44 2e 45 58 45 20 31 30   D.EXE 10
0020: 2e 30 2e 36 36 ...

read more »- Hide quoted text -

- Show quoted text -

I thought I should also relate that since Spybot doesnt seem to be
working normally with the passive immunization today I downloaded
Spywareblaster but found that it won't let me download updates and
gave me this message:

The server may be temporarily unavailable or there may be a conflict
with firewall (Windows) software installed on your pc. The update file
may have gotten corrupted during download.

I tried several times at different times of the day with the same
message.

Robert

 

[Paul]

I thought I should also relate that since Spybot doesnt seem to be
working normally with the passive immunization today I downloaded
Spywareblaster but found that it won't let me download updates and
gave me this message:

The server may be temporarily unavailable or there may be a conflict
with firewall (Windows) software installed on your pc. The update file
may have gotten corrupted during download.

I tried several times at different times of the day with the same
message.

Robert

Did you see my posting a while back, where I gave a possible
recipe for using the Kaspersky offline scanner (I came up with a
method to defeat the EULA screen). Any time you find AV software
is not able to get updates over the Internet, that means
you're infected. (Or for that matter, lots of other
strange behaviors, can have the same root cause.)

(The section at the bottom, if your keyboard is working...)

http://groups.google.com/group/micr...neral/msg/f2ffdb40588b0b8d?hl=en&dmode=source

Paul

 

[glee]

Did you see my posting a while back, where I gave a possible
recipe for using the Kaspersky offline scanner (I came up with a
method to defeat the EULA screen). Any time you find AV software
is not able to get updates over the Internet, that means
you're infected. (Or for that matter, lots of other
strange behaviors, can have the same root cause.)

(The section at the bottom, if your keyboard is working...)

http://groups.google.com/group/micr...neral/msg/f2ffdb40588b0b8d?hl=en&dmode=source

Or, far simpler, he could try a different offline AV disc. His Dell
network adapter is likely causing the freeze he's getting with
Kaspersky...it's a fairly well know issue with older Dells and some
Linux bootable AV discs, such as Avira and Kaspersky. I've had the best
luck in such situations, using the BitDefender rescue disc instead:
http://download.bitdefender.com/rescue_cd/

Using The BitDefender Rescue Cd -
http://forum.bitdefender.com/index.php?s=b4c46f52a01a945d6e873890a87c6085&showtopic=16602

 

[Paul]

Or, far simpler, he could try a different offline AV disc. His Dell
network adapter is likely causing the freeze he's getting with
Kaspersky...it's a fairly well know issue with older Dells and some
Linux bootable AV discs, such as Avira and Kaspersky. I've had the best
luck in such situations, using the BitDefender rescue disc instead:
http://download.bitdefender.com/rescue_cd/

Using The BitDefender Rescue Cd -
http://forum.bitdefender.com/index.php?s=b4c46f52a01a945d6e873890a87c6085&showtopic=16602

Well, I generally promote, what I've tested for myself. And the
Kav CDs run here for me.

I test ISO9660's in VPC2007, to save on the cost of burning CDs.
When I ran the following file a while back (it is based on Knoppix 5.1),
it froze and won't accept input. This is consistent with the Knoppix CD
of the same vintage. Later Knoppix revisions run pretty good, but the
platform trimmings have changed a bit. Now, I might be able to drop down to
single user, and try again, purely for the hell of it. But then, the
recipe could end up just as tortured, as the other one I wrote up.

BitDefenderRescueCD_v2.0.0_3_08_2009.iso

The Kaspersky CDs pass the VPC2007 test. I've also tested a couple
versions of them, as real CDs, as I've used them on machines
other than my main machine.

Since I haven't actually seen BitDefender run yet, I'm a bit
more hesitant to recommend it. I know -- there is a big difference
between virtual and real environments. I've spent the last
couple weeks experimenting with just that (I've tested six distros).
Trying to figure out why certain things don't work as well as they should.
But I also don't plan on burning a CD, for every piece of
free software I happen to see.

So that leaves me with my standard test case. If it
survives VPC2007, software like Linux distros or
offline scanners, make it to my "short list". If
the function they offer is worthwhile, I'll burn a
CD. My CD stack right now, is 6" high. Those are the
ones I use regularly.

(I tried out VirtualBox, as an alternative to VPC2007, but it
has a few rough edges.)

There is another one he could try. That was a product
by F-secure.com that consisted of just the scanning
program (plus it downloaded definitions). The last
time I used that, was a couple years ago. It never
detected anything (but at the time, I wasn't throwing
a copy of EICAR on, just to see if it was actually
doing something). This appears to be the current incarnation.
It's now using Knoppix as a base, and as long as it isn't
5.1 , then it'll likely pass my acid test.

http://www.f-secure.com/en_EMEA-Labs/security-threats/tools/rescue-cd

( A database for it. Some of the files appear current, so this
isn't a stale download. You edit this in a hex editor, tear
the shell script off the front, at just the right place, and then
it opens in 7ZIP. That's if you want to open it in advance in
Windows, rather than waiting to fire up the Linux CD and check
it out. )

http://download.f-secure.com/latest/fsdbupdate9.run

I think I'll download the CD for that one and give it a whirl.

From there, it goes downhill. I remember years ago, running
the Trend Micro online scanner. There were so many error
messages, I could never tell whether it was doing anything
It was a veritable train wreck.

Paul

 

[Navyguy]

Did you see my posting a while back, where I gave a possible
recipe for using the Kaspersky offline scanner (I came up with a
method to defeat the EULA screen). Any time you find AV software
is not able to get updates over the Internet, that means
you're infected. (Or for that matter, lots of other
strange behaviors, can have the same root cause.)

(The section at the bottom, if your keyboard is working...)

http://groups.google.com/group/microsoft.public.windowsxp.general/msg...

    Paul

The EULA problem has been resolved by me uninstalling Windows Small
Business (Word/Excel) and reinstalling them and accepting the EULA and
it hasn't re-appeared since. I thought I noted this on one of my
replies.


Robert

 

[Navyguy]

Or, far simpler, he could try a different offline AV disc.  His Dell
network adapter is likely causing the freeze he's getting with
Kaspersky...it's a fairly well know issue with older Dells and some
Linux bootable AV discs, such as Avira and Kaspersky.  I've had the best
luck in such situations, using the BitDefender rescue disc instead:http://download.bitdefender.com/rescue_cd/

Using The BitDefender Rescue Cd -http://forum.bitdefender.com/index.php?s=b4c46f52a01a945d6e873890a87c...

--
Glen Ventura
MS MVP  Oct. 2002 - Sept. 2009
CompTIA A+http://dts-l.net/- Hide quoted text -

- Show quoted text -

This is what I did, I checked the links you gave me for how to use the
BitDefender CD first but it was rather hard to follow and I didn't see
anything that was of help. In any case, I created a BitDefender CD
and I loaded it so that it would boot off the CD. BitDefender came up
and automatically searched for updates then it automatically did a
full scan of my system with no threats detected.
After it was finished I tried removing the disc but it wouldn't let
me. I believe I selected home when a dialog box appeared and I
selected logoff thinking it would take me back to logging off the
computer, but instead it asked for my name and password and at that
point it hung up on the name and password screen. I tried pressing
Esc, and Ctrl-Alt-Del but nothing I did seemed to have any effect. So
again(ugh) I had to press the reset button to get out of it. The
computer came back up with no apparent problems/issues except that the
Spywareblaster icon had disappeared from my desktop however the
program was still there and I made a new icon.

So, if my computer is indeed infected then BitDefender should have
detected it, correct?

All the programs seem to be working normally, except for the passive
immunization of Spybot not completing, and of Spywareblaster not being
able to update. I apologize if I didn't mention that I had resolved
the Word EULA issue by reinstalling it again and accepting the
agreement on the Admin account. However I had tried this previously
and it didn't work but this last time it did.


Thoughts/Suggestions?
Robert

 

[Paul]

I got the old version of BitDefender working this morning.
You change the boot line to the following, to prevent
input freeze-up in VPC 2007 (and perhaps on some real
systems too).

knoppix i8042.noloop

Once in there, open a Terminal window and run

/usr/sbin/network-setup

The nice thing about that menu based thing, is you
have more options than just DHCP over ethernet. There is
even some kind of option for PPP over a modem.

Due to the age of that CD, it claimed the "free license" had
expired. But for the first time, I got it to fire up and
accept input.

BitDefenderRescueCD_v2.0.0_3_08_2009.iso

*******

The Aug 2010 version of BitDefender booted OK, and didn't need a
custom boot line. It connected to the network OK, and downloaded
about 18MB of files or so (I wasn't watching it that carefully).

In VPC2007, the screen ended up too small, and I needed to use a
custom xorg.conf , kill the "X" server process, drop to single
user terminal, issue "startx", and then I had a 1152x864 sized
virtual window for the scanner to run. The key ingredients of
a custom xorg.conf (for VPC 2007) are things like:

HorizSync 31.5 - 75.0
VertRefresh 50.0 - 100.0
Modeline "1152x864_50.00" 66.25 1152 1208 1320 1488 864 867 871 892 -hsync +vsync

DefaultDepth 16
SubSection "Display"
Depth 16
Modes "1152x864_50.00"
EndSubSection

That gets around problems with the S3 graphics chip emulated
in VPC 2007 (no 24 bit graphics mode, low max clock for VGA).

I keep a copy of the custom xorg.conf file on the virtual hard drive,
for issues like this (that's part of the work I've done over
the last two weeks).

That wouldn't have stopped a real user like Navyguy, as it's
an issue with VPC 2007 and not so much with real computers.

And BitDefender detected the EICAR file I left on the virtual
hard drive, so it passed the most simple minded test.

Which means, some day, if I need it, I'd actually burn a CD
with it

Paul

 

[glee]

I got the old version of BitDefender working this morning.
You change the boot line to the following, to prevent
input freeze-up in VPC 2007 (and perhaps on some real
systems too).

knoppix i8042.noloop

Once in there, open a Terminal window and run

/usr/sbin/network-setup

The nice thing about that menu based thing, is you
have more options than just DHCP over ethernet. There is
even some kind of option for PPP over a modem.

Due to the age of that CD, it claimed the "free license" had
expired. But for the first time, I got it to fire up and
accept input.

BitDefenderRescueCD_v2.0.0_3_08_2009.iso

*******

The Aug 2010 version of BitDefender booted OK, and didn't need a
custom boot line. It connected to the network OK, and downloaded
about 18MB of files or so (I wasn't watching it that carefully).

In VPC2007, the screen ended up too small, and I needed to use a
custom xorg.conf , kill the "X" server process, drop to single
user terminal, issue "startx", and then I had a 1152x864 sized
virtual window for the scanner to run. The key ingredients of
a custom xorg.conf (for VPC 2007) are things like:

HorizSync 31.5 - 75.0
VertRefresh 50.0 - 100.0
Modeline "1152x864_50.00" 66.25 1152 1208 1320 1488 864 867
871 892 -hsync +vsync

DefaultDepth 16
SubSection "Display"
Depth 16
Modes "1152x864_50.00"
EndSubSection

That gets around problems with the S3 graphics chip emulated
in VPC 2007 (no 24 bit graphics mode, low max clock for VGA).

I keep a copy of the custom xorg.conf file on the virtual hard drive,
for issues like this (that's part of the work I've done over
the last two weeks).

That wouldn't have stopped a real user like Navyguy, as it's
an issue with VPC 2007 and not so much with real computers.

And BitDefender detected the EICAR file I left on the virtual
hard drive, so it passed the most simple minded test.

Which means, some day, if I need it, I'd actually burn a CD
with it

Testing them in VPC tells you exactly nothing about compatibility issues
with the various hardware encountered in the field. Because one of them
works on your system, or in VPC on your system, only tests the
usefulness of the app on systems where it runs. You're not testing it
on assorted hardware.

Also, testing an old version (in this case, well over a year old) is a
waste of your time. Improvements made in later versions aren't just to
the scanning engine and defs....bugs are fixed and driver compatibility
is also improved.

As I said a couple of times, I and many others have tested most of the
rescue CDs in the field on dozens of different machines with different
hardware. Some will freeze on certain model laptops, and on many dell
computers. Newer versions of the various rescue CDs have improved their
driver compatibility. This is well documented in support forums for
some of the rescue CDs, moderated by the authors of the CDs.

 

[glee]

This is what I did, I checked the links you gave me for how to use the
BitDefender CD first but it was rather hard to follow and I didn't see
anything that was of help. In any case, I created a BitDefender CD
and I loaded it so that it would boot off the CD. BitDefender came up
and automatically searched for updates then it automatically did a
full scan of my system with no threats detected.
After it was finished I tried removing the disc but it wouldn't let
me. I believe I selected home when a dialog box appeared and I
selected logoff thinking it would take me back to logging off the
computer, but instead it asked for my name and password and at that
point it hung up on the name and password screen. I tried pressing
Esc, and Ctrl-Alt-Del but nothing I did seemed to have any effect. So
again(ugh) I had to press the reset button to get out of it. The
computer came back up with no apparent problems/issues except that the
Spywareblaster icon had disappeared from my desktop however the
program was still there and I made a new icon.

So, if my computer is indeed infected then BitDefender should have
detected it, correct?

All the programs seem to be working normally, except for the passive
immunization of Spybot not completing, and of Spywareblaster not being
able to update. I apologize if I didn't mention that I had resolved
the Word EULA issue by reinstalling it again and accepting the
agreement on the Admin account. However I had tried this previously
and it didn't work but this last time it did.

Sorry, I should have told you how to Exit when done, and given you the
link to the manual that explains its use:
http://download.bitdefender.com/rescue_cd/Old/bd_rescue_cd.pdf

The way you're supposed to exit the BitDefender CD when the scan is
completed and closed, is to right-click the BitDefender desktop, and on
the menu that appears, click EXIT. Then you wait for the GUI to close,
and on the black screen a message will soon appear telling you to remove
the CD and restart.

You computer is almost definitely not infected, if you passed the
BitDefender rescue CD scan. We can TRY again to get back on track with
your original issues. I have some instructions for you to follow
exactly, if you can bear with me and avoid trying the other myriad
suggestions that may be posted by others, until we are done.

I'm going to give you one thing at a time, since you have more than one
issue, based on the Spybot and SpywareBlaster problems, and other issues
evident from your Event Viewer log. If I give instructions for all at
once, I think you will become confused....so we need to do a back and
forth through a few messages.

First: I assume you are using Internet Explorer as your default web
browser. Go to Control Panel> Internet Options> Connections tab ....OR
from within Internet Explorer, click its Tools menu> Internet Options>
Connections tab.

On the Connections tab, click the "LAN Settings" button near the bottom
right.

In the LAN Settings window that appears, in the "Proxy Server" section
on the bottom half, there is a check box for "Use a proxy server for
your LAN.." Make sure there is NO check in that box. There should be
NO checks in ANY boxes in the LAN Settings in a normal broadband setup.
Remove all check marks, and click OK, then back in the main Internet
Properties window, click Apply.

IMPORTANT: Tell me if any of those boxes in LAN Settings had check marks
in them when you looked.

While still in Internet Properties, click the Advanced tab at the top.
In the list there, scroll ALL the way down to the "Security" heading,
and put a check in the box for "Empty temporary Internet files folder
when browser is closed" and click Apply.


Now click the General tab at the top of Internet properties.
In the "Browsing History" section, click the Settings button. In the new
window, use the box of numbers in the Temporary Internet Files section
to set the Disk Space To Use to 50. Click OK. This brings you back to
the General tab.


If you have Internet Explorer 7, in Browsing History, click the Delete
button. Then click the "Delete Files" button for "Temporary Internet
Files" and click OK in the confirmation message that pops up. When it's
done deleting files, click Close, then click OK to close Internet
Options.

If you have Internet Explorer 8, in Browsing History, click the Delete
button. In the Delete Browsing History box that appears, put a check in
ALL the boxes EXCEPT Passwords, and click the Delete button.

Close Internet Explorer if it was open.

Now open SpywareBlaster, go to its Update section and try to update.

Post back with your results.