Can't install updates and sp1 keeps showing also sp3.5 fails
I am having major problems! It seems that i have lost space on my disk and it's down to like 40%,whena few days ago it was 80 %. My av detected spyware : 1. \Program Files\FunWebProducts\2. \Program Files\FunWebProducts\Installr3. \Program Files\FunWebProducts\Installr\1.bin\F3EZ.........DLL4. \Windows\hh.ex.5. \Windows\mib.bin6 \Windows\win.in and another i at the end7. \Windows\WORDPAD. with ini after the dot These have been quarantined. I had the sp2 listed in programs,but it is not listed anymore.My comp info: OS Name Microsoft® Windows Vista™ Home BasicVersion 6.0.6000 Build 6000Other OS Description Not AvailableOS Manufacturer Microsoft CorporationSystem Manufacturer EMACHINESSystem Model W3609System Type X86-based PCProcessor Intel(R) Celeron(R) D CPU 3.33GHz, 3326 Mhz, 1 Core(s), 1 Logical Processor(s)SMBIOS Version 2.4I also found this ,but have removed MSE from my system and am using SecureIT2010 as an antivirus/malware protection.Here is an exploit and trojan report that was found through Msoftsecurity Essentialsbefore i removed it. I am going to run a hijack this scan to see what it finds. Here are the2 things:TrojanDownloader:Java/R--------------- Exploit:Java/CVE-2010-0094.O------------ I would also like to know what conduit.com is and why are there 2 folders for conduit in programsHow do I prevent this ? Here is what showed up on hjt:Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v8.00 (8.00.6001.18928)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\System32\spool\drivers\w32x86\3\EKIJ5000MUI.exeC:\Windows\System32\igfxpers.exeC:\Windows\System32\igfxtray.exeC:\Windows\System32\hkcmd.exeC:\Program Files\SecureIT\SCControlPanel.exeC:\Program Files\Freecorder\FLVSrvc.exeC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\Windows\system32\taskeng.exeC:\Windows\System32\osk.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\wuauclt.exeC:\Users\Ryans\Desktop\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1060933R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dllO1 - Hosts: ::1 localhostO2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dllO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dllO2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dllO2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dllO2 - BHO: SecurityCoverage Popup Blocker - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - C:\Program Files\SecureIT\PopupBlocker.dllO2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dllO3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dllO3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dllO3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dllO3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dllO4 - HKLM\..\Run: [EKIJ5000StatusMonitor] C:\Windows\system32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottimeO4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exeO4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exeO4 - HKLM\..\Run: [Conime] %windir%\system32\conime.exeO4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"O4 - HKLM\..\Run: [SCControlPanel] C:\Program Files\SecureIT\SCControlPanel.exeO4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files\Freecorder\FLVSrvc.exe" /runO4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.htmlO9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dllO9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dllO9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dllO16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dllO23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exeO23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exeO23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: Kodak AiO Network Discovery Service - Eastman Kodak Company - C:\Program Files\Kodak\AiO\Center\ekdiscovery.exeO23 - Service: SecureIT Monitor (SCMonitor) - SecurityCoverage Inc. - C:\Program Files\SecureIT\scmonitor\SCMonitorService.exeO23 - Service: SecureIT Update Service (scupdateservice) - SecurityCoverage Inc. - C:\Program Files\SecureIT\scmonitor\SCUpdateService.exeO23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe--End of file - 6893 bytesI was having problems with adobe and have no idea what getPlus is. Should I just delete adobe and then reinstall it or delete that getPlus thing? 1 person needs an answerI do too
December 22nd, 2010 12:20am

Hi,Do you get any error when the update fails?Method 1: Review the installation historyStep 1: Locate the installation error code:Go to Update history and check for the updates that failed to install.To review the installation history, follow these steps:a. Click Start, point to All Programs, and then click Windows Update or Microsoft Update.b. On the Windows Update Web site or on the Microsoft Update Web site, click Review your update history. A window opens that shows all the updates that have been installed or that have failed to install on the computer. c. In the Status column of this window, locate the update that failed to install, and then click the red X.d. A new window opens that displays the installation error code.e. Provide us the error number.Step 2:Reset Windows Update components by running the fixit tool and then check for the issue.How do I reset Windows Update components?http://support.microsoft.com/kb/971058Step 3:I would recommend you to run online Virus Scan to remove any infections, if present.Follow the link below to run the free online scan:http://onecare.live.com/site/en-us/default.htm Also uninstall getplus, it’s a download manager.Try to install Adobe directly from the Adobe website.http://get.adobe.com/flashplayer/ Regards,Manasa P – Microsoft Support.
Free Windows Admin Tool Kit Click here and download it now
December 23rd, 2010 12:09am

Here are the error codes,but I see no red X and I have alot of errors in my event viewer that have the red circle.(KB951847)x86 Code 57(KB936330) code 80246007I use to have these installed and I noticed that in the event viewer ,alot of things were located under Local.
December 26th, 2010 2:13am

Hi,Try the steps provided in the below article which talks about the error code you are getting:Windows Update error 80246007:http://windows.microsoft.com/en-US/windows-vista/Windows-Update-error-80246007If the issue still persists, then try to reset Windows Update Components given in the above post.Regards, Manasa P – Microsoft Support.
Free Windows Admin Tool Kit Click here and download it now
December 27th, 2010 4:58am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics