3 Problems

[kirsch59]

I'm experiencing the following problems:

1. Microsoft Updates do not install. The last update to successfully install was on 2/14/07. I manually go the Microsoft's web site to do the download/installation.

2. ccApp.exe does end properly when I shut down Windows. Many times I get the program is not responding dialog box. I believe ccApp.exe is a Symantec program. I'm running Norton System Works 2003.

3. msmsgs.exe does not end properly when I shutdown Windows. This normally happens after the ccApp.exe error. I must do an End Now for Windows to shutdown.

Lastly, my PC takes a long time booting up.

I did the following steps before running HijackThis:

1. Run ATF Cleaner
2. Ran Windows Defender
3. Run SpyBot S&D

Attached is the HijackThis log.

Any help is appreciated.

Thanks,
Mark

[jholland1964]

From what I can find this ccApp.exe shutdown problem is common.
The ccApp.exe problem [has been fixed] ... in the latest Common Client and Norton AntiSpam program updates. To install the update, start your Norton product, run LiveUpdate, download the updates (including any Common Client updates and the Norton AntiSpam program update if it is listed), and then restart the computer when you are asked to do so.

The msmsgs.exe shutdown problem should be able to be fixed by going to Start, Control Panel, Administrative Tools, Services and then go to Messenger and disable it. This is Windows Messenger NOT MSN Messenger.

Now that said; You do have a lot of unnecessary programs running in the background AND some running at Start up that are unnecessary but before we deal with those you have a couple of items running that I cannot find info for so I would like you to go and run the Kaspersky Online Virus Scanner
This program will not fix anything but it will note anything that must be fixed and it's location. Run the scan, save the log that it generates and post back here with that log.

[kirsch59]

Thanks for your quick reply.

I ran Norton's LiveUpdate and nothing downloaded. The virus definitions date is 3/2/07. My guess the software is up to date.

I disabled the Messenger service about a week ago and the msmsgs.exe shutdown error still happens.

Attached is the Kaspersky log file.

Do you have any idea why Microsoft's Updates do not install?

Thanks,
Mark

[jholland1964]

One thing you should do is update your Java. It is way out of date.
Go to Add/Remove and uninstall ALL entries indicating Java.
Then go to Java Software
download and manually install the latest version.

Now as far as your Windows Updates, are you using Internet Explorer to download? They will not download with another browser. You also should turn off all unnecessary programs while doing the downloads, this includes Windows Defender and possibly your firewall and anti-virus program. Try this and see if this works.
What sort of message do you receive when the downloads WON'T install? Do your reboot immediately after the downloads? Some downloads require a reboot before they will install.

I disabled the Messenger service about a week ago and the msmsgs.exe shutdown error still happens.

Messenger is not disabled. It WAS running during your HJT scan as shown by this entry in running processes;
C:\Program Files\Messenger\msmsgs.exe
***************
Additional Info;
I have just checked through ALL available updates for XP ....I do not see any that would apply to your computer; All available updates that I see that would apply to what I see in your log are dated February 13, 2007. You say you did download and install successfully on Feb. 14 so I would have to assume that you do all ready have all updates which apply to your computer.

There ARE updates for IE 7, which you do not have installed, so even if you tried to download they would not install because you do not have Internet Explorer 7 on the computer.
But otherwise I don't see any which would apply to you. All security updates are dated BEFORE Feb. 14 so you should all ready have those.

[kirsch59]

I uninstalled and manually installed Java.

I am using IE 6 to install the MS updates. I've shutoff all unnecessary programs. I've tried to install the following updates:

Windows Messenger 4.7
Update for WMDRM-enabled Media Players (KB902344)
Microsoft Base Smart Card Cryptographic Service Provider Package: x86 (KB909520)
Update for Windows XP (KB904942)
Update for Windows XP (KB920342)
Microsoft .NET Framework 3.0: x86 (KB928416)
Windows Media Player 11
Remote Desktop Connection (Terminal Services Client 6.0) for Windows XP (KB925876)
Windows Genuine Advantage Notification (KB905474)
Root Certificates Update

They all failed with the following message generic message:
Problem: A problem on your computer is preventing updates from being downloaded or installed
Solution: To fix the problem, try installing the updates again. If that doesn't work, use the Troubleshooter to try solve the problem.

I've tried re-installing and rebooting my PC with no success.

The Messenger Service (msmsgs.exe) has a startup type "Disable". When I look at the task manager I can see the process running. Is it possible that some startup program calls and starts the Messenger service?

I appreciate your help.

Mark

[jholland1964]

Did you disable Windows Defender, your Firewall and your anti-virus program while trying the downloads?

[kirsch59]

Yes, I disabled the above programs.

[jholland1964]

Did you do the troubleshooter? Before you begin the updates go to your taskmanger and turn off anything that isn't needed.
Have you installed anything SINCE Feb. 14?....hardware, software? Change internet providers...anything?

[jholland1964]

There is at least one entry in your log which concerns me as I can find absolutely no information about it at all and it is this one;
O4 - HKCU\..\Run: [blrwf] C:\WINDOWS\system32\fwgeea.exe reg_run

I would like you to download the AVG Anti-spyware v.7.5
RightClick the AVG Anti-Spy Icon in your system tray and do the following:

-- Uncheck Resident Shield
-- Uncheck Automatic Updates
-- Uncheck Start with Windows
* You can reset the above to their defaults AFTER your machine has been deemed “clean,” if you so desire. For now, we need them disabled.

-- Click Run online update and allow it to run until you see the Update Successful message. If you are unable to do this, please let us know. Then, exit out of AVG Anti-Spyware.

Update your anti-virus program.

Reboot to SAFE MODE.

Once in SAFE MODE then do the following, in this order;
RUN ATF-Cleaner.exe.
-- Click on ATF-Cleaner to run it
-- Where it says Select Files To Delete, Check the Select All Option
-- Click Empty Selected > OK > EXIT

Run a FULL SYSTEM scan with your anti-virus program. Fix anything found.
Next
lease Launch AVG Anti-Spyware.
-- Click on the Scanner button and choose the Settings Tab.
---> Under How to act?, click on Recommended action and choose Quarantine to set default action for detected malware.
--->Under Reports make sure Automatically generate report after every scan is selected and UNCHECK the Only if threats were found box.
-- Leave everything else at their default settings and Select the Scan tab and CLICK Complete System Scan to scan your machine.
-- Upon completion of the scan, Click Apply all actions to place any detected baddies in Quarantine.
-- AFTER clicking Apply all actions, Click on Save Report and select Save the report to your Desktop.
Reboot the computer and run a new HJT scan. Save the log and post back here with the AVG log and the new HJT log.

[Junije]

hey...this information is also very helpful to me. Thanks