[Flrman1]

Is everything OK now?

[daisy flower]

other than getting warning about spyware ( is what I have ok for it or do I need more) Everything else is wonderful

[Byteman]

And, just to throw in this> good work! You need to keep your antivirus program well updated, you can do this automatically with most programs that update detections with their built in Update feature. You may be able to set predetermined times to have it search for updates automatically and download them. The time must conincide with a time you have the computer on or there may be the option for it to try every so often if you are not able to be online right then..it can run at startup (that bugs most people but it is an option with broadband since it runs fairly quickly) or a setting for how long after you start up, there can be many options in the full featured programs.
You can also disable automatic updating for most Antivirus programs and then YOU have to remember to get them done. Updating almost every day is becoming a neccessity with a lot of AVs.
I would get AdAware and SpyBot programs to have in case someone else uses the computer.
And, from info in your previous posts, maybe check the security settings for Outlook Express so your emails do not try to automatically disply in the Preview Pane> here is what I mean.
http://www.webterrace.com/outlook/security.htm

The settings are adjustable, and you may find them changed if there are other users who like things "their" way! So, you will be more aware of what to check for, etc. Feel free to ask if there are any questions...

[Flrman1]

Originally Posted by daisy flower

other than getting warning about spyware

What do you mean? What kind of warning? Is this a popup?

[daisy flower]

I just mean that Trend MIcro is constantly alerting me of spam, and I assume is blocking it.

Log List
"Time","Scan Type","Source Type","Virus Name","Infected Source","First Action","Second Action"
"00:58","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\sysfe.dll","Deny Access",""
"01:17","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\ipob32.dll","Deny Access",""
"08:10","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\sysfe.dll","Deny Access",""
"08:18","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"08:18","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"08:19","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"08:19","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"08:19","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"08:19","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"08:19","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"08:19","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"08:19","Real-time Scan","File","ADW_ISTBAR.II","C:\Program Files\ISTsvc\istsvc.exe","Deny Access",""
"08:19","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"08:19","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"08:20","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"08:20","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"08:20","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"08:20","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"08:20","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"08:20","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"08:20","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"08:20","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"08:27","Real-time Scan","File","ADW_ISTBAR.II","C:\program files\istsvc\istsvc.exe","Deny Access",""
"08:29","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\ipob32.dll","Deny Access",""
"08:32","Real-time Scan","File","ADW_ISTBAR.II","C:\program files\istsvc\istsvc.exe","Deny Access",""
"08:32","Real-time Scan","File","ADW_ISTBAR.II","C:\program files\istsvc\istsvc.exe","Deny Access",""
"10:02","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\sysfe.dll","Deny Access",""
"10:03","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"10:04","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"10:04","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"10:05","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"10:05","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"10:05","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"10:05","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"10:05","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"10:05","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"10:06","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"10:06","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"10:06","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"10:06","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"10:06","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"10:06","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"10:06","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\sysfe.dll","Deny Access",""
"10:06","Real-time Scan","File","SPYW_TWANT.C","C:\WINDOWS\System32\ipob32.dll","Deny Access",""
"10:21","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\ipob32.dll","Deny Access",""
"12:37","Real-time Scan","File","TROJ_DLOADER.F","C:\DOCUME~1\Watkins\LOCALS~1\Temp\rs.exe","Q uarantine Successful",""
"13:24","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\sysfe.dll","Deny Access",""
"13:43","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\ipob32.dll","Deny Access",""

[Flrman1]

Those look like files from the hijack that we just removed. Let's see another Hijack This log.

[daisy flower]

Logfile of HijackThis v1.98.0
Scan saved at 9:25:05 PM, on 7/31/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Watkins\Desktop\hijackthis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Tech-In-A-Box] C:\techbox\techbox.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Titanium Antivirus 2004\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [Lexmark X73 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe
O4 - HKLM\..\Run: [Lexmark X73 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security\pccguide.exe"
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Internet Security\PCClient.exe"
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe" /run
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: StumbleUpon: &Blog This - res://C:\WINDOWS\DOWNLO~1\STUMBL~1.DLL/blogimage
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com.../c381/chat.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yaho...tocomplete.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab

[Flrman1]

The log still looks clean. You said before that you had installed all the critical updates and service packs, but according your log you have not. The header of your log still says this:

Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

With all the updates installed it would look like this:

Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)


As far as those alerts go I'd like for you to update your virus definitions then boot to safe mode and do a full system scan.

[Byteman]

Really strange.....they "had" the SP1 etc: It looks to me that when they got HJT 1.98, things changed...?

The header from the Ist page logfile shows this:

Originally Posted by daisy flower

I have encountered a problem that I have done some research on and believe I have become hijacked with failed attempts to correct it myself. But see that is seems to be a common issue. My home page is http://forums.techguy.org/archive/index.php/t-249504.html" and will return to that even after changing internet options. When it opens it has which when it opens, has "Home Search" in the upper left by a Windows logo/flag and tons of search links. It also opens with a small pop-up window that briefly says "search-all-fast.com" with a form of advertisement or spyware link. Home Search Assistent fails to delete in add/remove programs, with error "looking-for.cc/unistall/HomeSearchAssistant.html"

My hijack log is

Logfile of HijackThis v1.97.7
Scan saved at 6:53:32 PM, on 7/25/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

[daisy flower]

Here is the log from previous updates. Going to do a full scan now..

Updated again just this morning....Error_ Windows XP SP1 is incompatable with this version of windows


Windows XP Service Pack 1 (Express) Successful Sunday, August 01, 2004 Windows Update website

Windows XP Service Pack 1 (Express) Successful Saturday, July 31, 2004 Windows Update website
Cumulative Security Update for Internet Explorer 6 (KB867801) Successful Friday, July 30, 2004 Automatic Updates
Windows XP Service Pack 1 (Express) Successful Friday, July 30, 2004 Windows Update website
Windows XP Service Pack 1 (Express) Successful Friday, July 30, 2004 Windows Update website
Security Update for Windows XP (KB839643) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (KB837001) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (KB839645) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (KB840315) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (KB841873) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (KB828741) Successful Thursday, July 29, 2004 Windows Update website
Critical Update for ADODB.stream (KB870669) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (329834) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (KB835732) Successful Thursday, July 29, 2004 Windows Update website
816093: Security Update Microsoft Virtual Machine (Microsoft VM) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (KB840374) Successful Thursday, July 29, 2004 Windows Update website
Critical Update for Windows Media Player Script Commands (KB828026) Successful Thursday, July 29, 2004 Windows Update website
Cumulative Security Update for Outlook Express 6 (KB837009) Successful Thursday, July 29, 2004 Windows Update website
Cumulative Security Update for Internet Explorer 6 (KB832894) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Microsoft Data Access Components (KB832483) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Microsoft Windows XP (KB828035) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Microsoft Windows XP (KB825119) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Microsoft Windows XP (KB328940) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Microsoft Windows (KB824105) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Microsoft Windows (KB823182) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Microsoft Windows (KB824141) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (KB821557) Successful Thursday, July 29, 2004 Windows Update website
823559: Security Update for Microsoft Windows Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (819696) Successful Thursday, July 29, 2004 Windows Update website
817606: Security Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
Security Update for Windows XP (815021) Successful Thursday, July 29, 2004 Windows Update website
Q329441: Critical Update Successful Thursday, July 29, 2004 Windows Update website
814078: Security Update (Microsoft Jscript version 5.6, Windows 2000, Windows XP) Successful Thursday, July 29, 2004 Windows Update website
811493: Security Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
810577: Security Update Successful Thursday, July 29, 2004 Windows Update website
811630: Critical Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
329170: Security Update Successful Thursday, July 29, 2004 Windows Update website
Q329115: Security Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
Q329390: Security Update Successful Thursday, July 29, 2004 Windows Update website
Security Update, February 13, 2002 (MSXML 3.0) Successful Thursday, July 29, 2004 Windows Update website
Security Update, February 13, 2002 (MSXML 2.6) Successful Thursday, July 29, 2004 Windows Update website
Q324096: Security Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
Q326830: Security Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
Q323172: Security Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
Q313450: Security Update Successful Thursday, July 29, 2004 Windows Update website
Q323255: Security Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
Q324380: Security Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
Q320920: Security Update (Windows Media Player for Windows XP) Successful Thursday, July 29, 2004 Windows Update website
Q329048: Security Update Successful Thursday, July 29, 2004 Windows Update website
Q318138: Security Update (Windows XP) Successful Thursday, July 29, 2004 Windows Update website
Windows XP Application Compatibility Update, April 2002 Successful Thursday, July 29, 2004 Windows Update website
Q311967: Security Update Successful Thursday, July 29, 2004 Windows Update website
System Recovered Error Message Update Successful Thursday, July 29, 2004 Windows Update website
Critical Update, February 10, 2002 Successful Thursday, July 29, 2004 Windows Update website
Security Update, February 14, 2002 (Internet Explorer 6) Successful Thursday, July 29, 2004 Windows Update website
Critical Update, February 9, 2002 Successful Thursday, July 29, 2004 Windows Update website
Security Update, December 17, 2001 Successful Thursday, July 29, 2004 Windows Update website
Remote Assistance Connection Successful Thursday, July 29, 2004 Windows Update website
Windows XP Update Package, October 25, 2001 Successful Thursday, July 29, 2004 Windows Update website
Critical Update, November 19, 2001 Successful Thursday, July 29, 2004 Windows Update website
Update for Background Intelligent Transfer Service (BITS) 2.0 and WinHTTP 5.1 (KB842773)
Realtek Semiconductor Corp. network software update released on April 13 2004. Successful Saturday, July 24, 2004 Windows Update website
NVIDIA display software update released on October 06 2003. Successful Saturday, July 24, 2004 Windows Update website
Advanced Micro Devices processor software update released on December 17 2002. Successful Saturday, July 24, 2004 Windows Update website
Microsoft .NET Framework version 1.1 Successful Saturday, July 24, 2004 Windows Update website
Windows Media 9 Series Codec Install Package Successful Saturday, July 24, 2004 Windows Update website
Windows MovieMaker 2 Successful Saturday, July 24, 2004 Windows Update website
Update for Windows XP Service Pack 1 (KB810243) Successful Saturday, July 24, 2004 Windows Update website
327979: Recommended Update Successful Saturday, July 24, 2004 Windows Update website
Q327405: Recommended Update (Windows XP Home Edition) Successful Saturday, July 24, 2004 Windows Update website
Microsoft Windows Journal Viewer (Windows XP) Successful Saturday, July 24, 2004 Windows Update website
Q322011: Recommended Update Successful Saturday, July 24, 2004 Windows Update website
814995: Recommended Update Successful Saturday, July 24, 2004 Windows Update website
Recommended Update for Windows XP SP1 (817778) Successful Saturday, July 24, 2004 Windows Update website
820291: Recommended Update (Windows XP) Successful Saturday, July 24, 2004 Windows Update website
Windows Error Reporting: Recommended Update (Windows XP) Successful Saturday, July 24, 2004 Windows Update website
Recommended Update for Windows XP SP1 (KB822603) Successful Saturday, July 24, 2004 Windows Update website
Update for Microsoft Windows XP (KB826942) Successful Saturday, July 24, 2004 Windows Update website
Update for Windows XP HighMAT Support in CD Writing Wizard (KB831240) Successful Saturday, July 24, 2004 Windows Update website
Update for Windows XP Shop for Music Online Link (KB833998) Successful Saturday, July 24, 2004 Windows Update website
814078: Security Update (Microsoft Jscript version 5.6, Windows 2000, Windows XP) Successful Saturday, July 24, 2004 Windows Update website
816093: Security Update Microsoft Virtual Machine (Microsoft VM) Successful Saturday, July 24, 2004 Windows Update website
817787: Security Update Windows Media Player for XP Successful Saturday, July 24, 2004 Windows Update website
Security Update for Windows XP (819696) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Microsoft Windows (KB824141) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Microsoft Windows (KB823182) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Microsoft Windows (KB824105) Successful Saturday, July 24, 2004 Windows Update website
Update Rollup 1 for Microsoft Windows XP (KB826939) Successful Saturday, July 24, 2004 Windows Update website
Critical Update for Windows Media Player Script Commands (KB828026) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Microsoft Windows XP (KB825119) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Microsoft Windows XP (KB828035) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Microsoft Data Access Components (KB832483) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Windows XP (KB835732) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Windows XP (KB828741) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Windows XP (KB837001) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Windows XP (KB839645) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Windows XP (KB840374) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Windows XP (KB839643) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Windows XP (KB841873) Successful Saturday, July 24, 2004 Windows Update website
Update for Background Intelligent Transfer Service (BITS) 2.0 and WinHTTP 5.1 (KB842773) Successful Saturday, July 24, 2004 Windows Update website
Security Update for Windows XP (KB840315) Successful Saturday, July 24, 2004 Windows Update website
Cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB832894) Successful Saturday, July 24, 2004 Windows Update website
Critical Update for ADODB.stream (KB870669) Successful Saturday, July 24, 2004 Windows Update website
Cumulative Security Update for Outlook Express 6 SP1 (KB823353) Successful Saturday, July 24, 2004 Windows Update website
Windows XP Service Pack 1 (Express) Successful Saturday, July 24, 2004 Windows Update website

[Byteman]

daisyflower, see if you have the setting shown below set to "Automatic"

Originally Posted by mobo

Go to start / run / services.msc
Once there scroll down to cryptographic services then double click it. Make sure it is set to automatic then>> START it.

And look at this:
http://support.microsoft.com/default...2&Product=wupd

Check for that setting and change "Discuss" as it tells you.

Since that would be a very rare thing to have set, I think this one is probably what would fix your problem.

However it involves manually editing the Registry!
http://support.microsoft.com/default...;EN-US;Q319109
If you want to wait and see what flrman1 advises please do.

Note that the Microsoft article above has you go to Windows Updates again, and scan for any updates, and re-download all that show...
THEN it has directions for what you are to do...restart, and go back to Windows Updates and try again, this is to check that this is a loop kind of thing> to confirm that the site still lists updates again and again.
I would NOT do any Registry changes unless you confirm that Updates are listed when you go back to Windows Updates just after downloading, installing them etc. and they are showing again as if you had never installed them. For IE 6 SP 1, you download it alone> then you can get other updates, but there are some that must be downloaded singly such as Direct X and Media Players....try just the Critical Items and Service Packs. I think XP SP1 would be a single update as well..

[daisy flower]

Run/services/msc already set to automatic start, but clicked restart again

Cannot find option to disable "discuss" under View...nor am I finding browserAid

I will wait for further directions.


Panda-no virus

Micro Trend
Log List
"Time","Scan Type","Source Type","Virus Name","Infected Source","First Action","Second Action"
"03:40","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\sysfe.dll","Deny Access",""
"03:59","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\ipob32.dll","Deny Access",""
"09:18","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\sysfe.dll","Deny Access",""
"09:37","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\ipob32.dll","Deny Access",""
"10:19","Real-time Scan","File","SPYW_TWANT.C","C:\windows\system32\sysfe.dll","Deny Access",""
"10:22","Manual Scan","File","SPYW_TWANT.C","C:\WINDOWS\system32\sysfe.dll","Pass",""
"10:23","Manual Scan","File","SPYW_TWANT.C","C:\WINDOWS\system32\ipob32.dll","Pass",""
"10:24","Manual Scan","File","SPYW_TWANT.C","C:\WINDOWS\vkxwvc.dat","Pass",""
"10:26","Manual Scan","File","SPYW_TWANT.C","C:\WINDOWS\opvvxx.dat","Pass",""
"10:26","Manual Scan","File","SPYW_TWANT.C","C:\WINDOWS\lotvoi.dat","Pass",""
"10:26","Manual Scan","File","SPYW_TWANT.C","C:\WINDOWS\iquetf.dat","Pass",""
"10:26","Manual Scan","File","SPYW_TWANT.C","C:\WINDOWS\ekqxcc.dat","Pass",""
"10:26","Manual Scan","File","SPYW_TWANT.C","C:\WINDOWS\sianib.dat","Pass",""
"10:26","Manual Scan","File","SPYW_TWANT.C","C:\WINDOWS\syhodm.dat","Pass",""
"10:30","Manual Scan","File","ADW_ISTBAR.II","C:\System Volume Information\_restore{6995F97A-0C11-46E7-AD16-F4EBACBCE82E}\RP6\A0000279.exe","Pass",""
"10:31","Manual Scan","File","SPYW_TWANT.C","C:\Recycled\Dc138\backup-20040728-204226-246.dll","Pass",""
"10:31","Manual Scan","File","SPYW_TWANT.C","C:\Recycled\Dc138\backup-20040729-052929-447.dll","Pass",""