Eli Formatoin koneen noin viikko sitten ja en ole saanut konetta päivitettyä. Windows update jää aina jumiin enkä saa tärkeitä suojaispäivityksiä enkä sp2. Että näkyykös lokissa mitään erikoista?
Logfile of HijackThis v1.99.1
Scan saved at 1:15:33, on 27.6.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\ATI-CPanel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\PEX 6.00\Common\FSM32.EXE
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Valve\Steam\Steam.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\PEX6~1.00\backweb\4044983\Program\SERVIC~1.EXE
C:\Program Files\PEX 6.00\Anti-Virus\fsgk32st.exe
C:\Program Files\PEX 6.00\backweb\4044983\program\fsbwsys.exe
C:\Program Files\PEX 6.00\Anti-Virus\FSGK32.EXE
C:\Program Files\PEX 6.00\Common\FSMA32.EXE
C:\WINDOWS\system32\slserv.exe
C:\Program Files\PEX 6.00\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PEX 6.00\Common\FSMB32.EXE
C:\Program Files\PEX 6.00\backweb\4044983\Program\fspex.exe
C:\Program Files\PEX 6.00\Common\FCH32.EXE
C:\Program Files\PEX 6.00\Common\FAMEH32.EXE
C:\Program Files\PEX 6.00\Anti-Virus\fsrw.exe
C:\Program Files\PEX 6.00\FSPC\fspc.exe
C:\Program Files\PEX 6.00\FWES\Program\fsdfwd.exe
C:\Program Files\PEX 6.00\Anti-Virus\fsav32.exe
C:\PROGRA~1\PEX6~1.00\ANTI-S~1\fsaw.exe
C:\Program Files\PEX 6.00\FSGUI\fsguidll.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ville\Työpöytä\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\PEX 6.00\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\PEX 6.00\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\PEX 6.00\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\PEX 6.00\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: F-Secure Personal Express.lnk = C:\Program Files\PEX 6.00\backweb\4044983\Program\fspex.exe
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\PEX 6.00\Anti-Spyware\blockpopups.htm
O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\PEX 6.00\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\PEX 6.00\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\PEX 6.00\FSPC\fspcmsie.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\PEX 6.00\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\PEX 6.00\Anti-Spyware\ieshield.dll
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O23 - Service: F-Secure Personal Express (BackWeb Plug-in - 4044983) - F-Secure Personal Express - C:\PROGRA~1\PEX6~1.00\backweb\4044983\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\PEX 6.00\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\PEX 6.00\backweb\4044983\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\PEX 6.00\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\PEX 6.00\FSPC\fshttps\fshttps.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\PEX 6.00\Common\FSMA32.EXE
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
Logfile of HijackThis v1.99.1
Scan saved at 1:15:33, on 27.6.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\ATI-CPanel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\PEX 6.00\Common\FSM32.EXE
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Valve\Steam\Steam.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\PEX6~1.00\backweb\4044983\Program\SERVIC~1.EXE
C:\Program Files\PEX 6.00\Anti-Virus\fsgk32st.exe
C:\Program Files\PEX 6.00\backweb\4044983\program\fsbwsys.exe
C:\Program Files\PEX 6.00\Anti-Virus\FSGK32.EXE
C:\Program Files\PEX 6.00\Common\FSMA32.EXE
C:\WINDOWS\system32\slserv.exe
C:\Program Files\PEX 6.00\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PEX 6.00\Common\FSMB32.EXE
C:\Program Files\PEX 6.00\backweb\4044983\Program\fspex.exe
C:\Program Files\PEX 6.00\Common\FCH32.EXE
C:\Program Files\PEX 6.00\Common\FAMEH32.EXE
C:\Program Files\PEX 6.00\Anti-Virus\fsrw.exe
C:\Program Files\PEX 6.00\FSPC\fspc.exe
C:\Program Files\PEX 6.00\FWES\Program\fsdfwd.exe
C:\Program Files\PEX 6.00\Anti-Virus\fsav32.exe
C:\PROGRA~1\PEX6~1.00\ANTI-S~1\fsaw.exe
C:\Program Files\PEX 6.00\FSGUI\fsguidll.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ville\Työpöytä\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\PEX 6.00\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\PEX 6.00\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\PEX 6.00\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\PEX 6.00\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: F-Secure Personal Express.lnk = C:\Program Files\PEX 6.00\backweb\4044983\Program\fspex.exe
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\PEX 6.00\Anti-Spyware\blockpopups.htm
O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\PEX 6.00\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\PEX 6.00\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\PEX 6.00\FSPC\fspcmsie.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\PEX 6.00\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\PEX 6.00\Anti-Spyware\ieshield.dll
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O23 - Service: F-Secure Personal Express (BackWeb Plug-in - 4044983) - F-Secure Personal Express - C:\PROGRA~1\PEX6~1.00\backweb\4044983\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\PEX 6.00\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\PEX 6.00\backweb\4044983\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\PEX 6.00\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\PEX 6.00\FSPC\fshttps\fshttps.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\PEX 6.00\Common\FSMA32.EXE
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
Vastaukset 1
Vanhimmat
Eipä näy mitään ainakaan mun silmään.
Koita tota
===============================================
Unregister Windows Update Server Files
================================
1. First of all close all instances of Internet Explorer.
2. Click Start and Run, type Regsvr32 /u jscript.dll in the Open box and click OK.
3. Similarly one by one unregister the files listed below,
Regsvr32 /u wuaueng.dll
Regsvr32 /u wuaueng1.dll
Regsvr32 /u wucltui.dll
Regsvr32 /u wups.dll
Regsvr32 /u wuweb.dll
Regsvr32 /u wuapi.dll
Once these files are unregistered successfully restart the system and now let us register the following files using the Regsvr32 command and check whether the issue is resolved. Please note, there is a space between Regsvr32 and the file name.
Reregister Windows Update Service Files
============================
1. Close all instances of Internet Explorer.
2. Click Start and Run, type Regsvr32 wuapi.dll in the Open box and click OK.
3. Click Start and Run, type Regsvr32 wuaueng.dll in the Open box and click OK.
4. Click Start and Run, type Regsvr32 wuaueng1.dll in the Open box and click OK.
5. Click Start and Run, type Regsvr32 wucltui.dll in the Open box and click OK.
6. Click Start and Run, type Regsvr32 wups.dll in the Open box and click OK.
7. Click Start and Run, type Regsvr32 wuweb.dll in the Open box and click OK.
8. Click Start and Run, type Regsvr32 jscript.dll in the Open box and click OK.
9. Click Start and Run, type Regsvr32 atl.dll in the Open box and click OK. (NOTE: Please register this file only do not attempt to unregister this file)