cannot install WindowsServer2003.WindowsXP-KB969897-x64-ENU ...

and receive error - update\update.exe not valid win32 application.

I ran hijackthis and got the following results:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:55:42 AM, on 7/8/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CSHelper.exe
C:\Program Files\Flip Video\FlipShare\FlipShareService.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBOID. EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Documents and Settings\Kari Horst\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://qwest.live.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://jeffcoweb.jeffco.k12.co.us/connections/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL =
http://www.google.com/ig/dell?hl=en&...us&ibd=2090204
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows
Internet Explorer provided by Qwest
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet
Settings,ProxyOverride = *.local;<local>
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -
c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F}
- C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common
Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper -
{AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat
8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Windows Live Toolbar Helper -
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live
Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper -
{DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program
Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -
C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
- C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support
Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare
Live\winssnotify.exe"
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RemoteControl9] "C:\Program
Files\CyberLink\PowerDVD9\PDVD9Serv.exe"
O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "C:\Program
Files\CyberLink\PowerDVD9\Language\Language.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
-atboottime
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common
Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - Global Startup: TabUserW.exe.lnk =
C:\WINDOWS\system32\WTablet\TabUserW.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program
Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites -
http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Append to existing PDF - res://C:\Program
Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF -
res://C:\Program Files\Adobe\Acrobat
8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF -
res://C:\Program Files\Adobe\Acrobat
8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF -
res://C:\Program Files\Adobe\Acrobat
8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF -
res://C:\Program Files\Adobe\Acrobat
8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF -
res://C:\Program Files\Adobe\Acrobat
8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF -
res://C:\Program Files\Adobe\Acrobat
8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program
Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49}
- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote -
{2670000A-7350-4f3c-8081-5663EE0C6C49} -
C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration -
{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Qwest Live - {76F72F84-8AE5-4547-AD3E-DFB11FAD2150} -
http://qwest.live.com (file missing) (HKCU)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5
Control) -
http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {680285A8-96D3-43DA-9D3D-51DD987D0B77} (NeroVersionCheckerControl
Control) - http://www.nero.com/doc/NeroVersionCheckerControl.cab
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} (JuniperSetupControlXP
Class) - https://office.gscolorado.org/dana-c...erSetupSP1.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O20 - Winlogon Notify: GoToAssist - C:\Program
Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: CopySafe Helper Service (CSHelper) - Unknown owner -
C:\WINDOWS\system32\CSHelper.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. -
C:\Program Files\Common Files\Macrovision Shared\FLEXnet
Publisher\FNPLicensingService.exe
O23 - Service: FlipShare Service - Unknown owner - C:\Program Files\Flip
Video\FlipShare\FlipShareService.exe
O23 - Service: Google Desktop Manager 5.8.809.23506
(GoogleDesktopManager-092308-165331) - Google - C:\Program
Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems,
Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Update Service (gupdate1c9dcafd5898c9e)
(gupdate1c9dcafd5898c9e) - Google Inc. - C:\Program
Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company -
C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO. EXE
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero
7\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program
Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program
Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service
(LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common
Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero
BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common
Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP -
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm1 2.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter)
(sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell
Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program
Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program
Files\Common Files\SupportSoft\bin\ssrc.exe
O23 - Service: TabletService - Wacom Technology, Corp. -
C:\WINDOWS\system32\Tablet.exe

--
End of file - 10867 bytes

khorst wrote:

> and receive error - update\update.exe not valid win32 application.
>
> I ran hijackthis and got the following results:
<snip>

Sorry, there is no HijackThis log analysis done in this newsgroup.
Suggest you contact MS for no-charge support for getting this Security
update installed: http://support.microsoft.com/kb/969897

> How to obtain help and support for this security update
> For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and
> Canada or by contacting your local Microsoft subsidiary. For more information about how to contact
> your local Microsoft subsidiary for support
> issues with security updates, visit the Microsoft International Support Web site:
> http://support.microsoft.com/common/....aspx?rdpath=4
> North American customers can also obtain instant access to unlimited no-charge e-mail support or to
> unlimited individual chat support by visiting the following Microsoft Web site:
> http://support.microsoft.com/oas/def...spx?&prid=7552


MowGreen
===============
*-343-* FDNY
Never Forgotten
===============

[Crosspost to IE General]

Well, you're not running WinXP x64 so it should come as no surpise that the
x64 version of KB969897 throws that error. Furthermore, your HJT log shows
that the correct version of KB969897 for WinXP SP3 (i.e., 7.00.6000.16850)
is already installed.

Is Automatic Updates enabled and offering this specific update package?

Does Windows Update website (http://windowsupdate.microsoft.com) offer this
specific update package?

Are you attempting to install this specific update package manually? If so,
why?
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002


khorst wrote:
> and receive error - update\update.exe not valid win32 application.
>
> I ran hijackthis and got the following results:
> Logfile of Trend Micro HijackThis v2.0.2
> Scan saved at 6:55:42 AM, on 7/8/2009
> Platform: Windows XP SP3 (WinNT 5.01.2600)
> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
> Boot mode: Normal
<snip>

Yes, auto updates attempts to install this but fails on download. I
downloaded manually and it fails, giving me the error.

"PA Bear [MS MVP]" wrote:

> [Crosspost to IE General]
>
> Well, you're not running WinXP x64 so it should come as no surpise that the
> x64 version of KB969897 throws that error. Furthermore, your HJT log shows
> that the correct version of KB969897 for WinXP SP3 (i.e., 7.00.6000.16850)
> is already installed.
>
> Is Automatic Updates enabled and offering this specific update package?
>
> Does Windows Update website (http://windowsupdate.microsoft.com) offer this
> specific update package?
>
> Are you attempting to install this specific update package manually? If so,
> why?
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
>
>
> khorst wrote:
> > and receive error - update\update.exe not valid win32 application.
> >
> > I ran hijackthis and got the following results:
> > Logfile of Trend Micro HijackThis v2.0.2
> > Scan saved at 6:55:42 AM, on 7/8/2009
> > Platform: Windows XP SP3 (WinNT 5.01.2600)
> > MSIE: Internet Explorer v7.00 (7.00.6000.16850)
> > Boot mode: Normal
> <snip>
>
>

How bizarre, especially since your HJT log shows that you're not running
WinXP x64 and that the correct version for WinXP SP3 is already installed!
Are you dual-booting by any chance?

The above notwithstanding, I'd recommend that you...

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates. When you call, clearly state that your problem is related
to a Security Update and cite the update's KB number (e.g., KB969897).

LOOK!! => If your problem relates to a Cumulative Security Update for IE,
call the above number and ask to be transferred to the "Consumer IE queue"
(which is 47830).

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.net


khorst wrote:
> Yes, auto updates attempts to install this but fails on download. I
> downloaded manually and it fails, giving me the error.
>
> "PA Bear [MS MVP]" wrote:
>> [Crosspost to IE General]
>>
>> Well, you're not running WinXP x64 so it should come as no surprise that
>> the
>> x64 version of KB969897 throws that error. Furthermore, your HJT log
>> shows
>> that the correct version of KB969897 for WinXP SP3 (i.e.,
>> 7.00.6000.16850)
>> is already installed.
>>
>> Is Automatic Updates enabled and offering this specific update package?
>>
>> Does Windows Update website (http://windowsupdate.microsoft.com) offer
>> this
>> specific update package?
>>
>> Are you attempting to install this specific update package manually? If
>> so, why?
>>
>> khorst wrote:
>>> and receive error - update\update.exe not valid win32 application.
>>>
>>> I ran hijackthis and got the following results:
>>> Logfile of Trend Micro HijackThis v2.0.2
>>> Scan saved at 6:55:42 AM, on 7/8/2009
>>> Platform: Windows XP SP3 (WinNT 5.01.2600)
>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
>>> Boot mode: Normal
>> <snip>

Not dual booting, just weird. As long as my log looks OK, I'm happy. I've had
problems running auto updates, active X would not install so I had to
re-install IE 7. I can't run IE 8 because I log my work hours online and
their systems don't work with IE8 or firefox. Thanks for you help!

"PA Bear [MS MVP]" wrote:

> How bizarre, especially since your HJT log shows that you're not running
> WinXP x64 and that the correct version for WinXP SP3 is already installed!
> Are you dual-booting by any chance?
>
> The above notwithstanding, I'd recommend that you...
>
> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/de...spx?gprid=6527
>
> For home users, no-charge support is available by calling 1-866-PCSAFETY in
> the United States and in Canada or by contacting your local Microsoft
> subsidiary. There is no-charge for support calls that are associated with
> security updates. When you call, clearly state that your problem is related
> to a Security Update and cite the update's KB number (e.g., KB969897).
>
> LOOK!! => If your problem relates to a Cumulative Security Update for IE,
> call the above number and ask to be transferred to the "Consumer IE queue"
> (which is 47830).
>
> For more information about how to contact your local Microsoft subsidiary
> for security update support issues, visit the International Support Web
> site: http://support.microsoft.com/common/international.aspx
>
> For enterprise customers, support for security updates is available through
> your usual support contacts.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE, OE, Security, Shell/User)
> AumHa VSOP & Admin; DTS-L.net
>
>
> khorst wrote:
> > Yes, auto updates attempts to install this but fails on download. I
> > downloaded manually and it fails, giving me the error.
> >
> > "PA Bear [MS MVP]" wrote:
> >> [Crosspost to IE General]
> >>
> >> Well, you're not running WinXP x64 so it should come as no surprise that
> >> the
> >> x64 version of KB969897 throws that error. Furthermore, your HJT log
> >> shows
> >> that the correct version of KB969897 for WinXP SP3 (i.e.,
> >> 7.00.6000.16850)
> >> is already installed.
> >>
> >> Is Automatic Updates enabled and offering this specific update package?
> >>
> >> Does Windows Update website (http://windowsupdate.microsoft.com) offer
> >> this
> >> specific update package?
> >>
> >> Are you attempting to install this specific update package manually? If
> >> so, why?
> >>
> >> khorst wrote:
> >>> and receive error - update\update.exe not valid win32 application.
> >>>
> >>> I ran hijackthis and got the following results:
> >>> Logfile of Trend Micro HijackThis v2.0.2
> >>> Scan saved at 6:55:42 AM, on 7/8/2009
> >>> Platform: Windows XP SP3 (WinNT 5.01.2600)
> >>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
> >>> Boot mode: Normal
> >> <snip>
>
>

I suspect your earlier problems may have been caused by a hijackware
infection that persists to this day. I would NOT say that everything's OK
and that you can ignore this.

NB: I only glanced at your HJT log. We don't interpret/work with HJT logs
in the public newsgroups. If you'd like to pursue the distinct possibility
of a continuing hijackware infection, keep reading...

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002


khorst wrote:
> Not dual booting, just weird. As long as my log looks OK, I'm happy. I've
> had problems running auto updates, active X would not install so I had to
> re-install IE 7. I can't run IE 8 because I log my work hours online and
> their systems don't work with IE8 or firefox. Thanks for you help!
>
> "PA Bear [MS MVP]" wrote:
>> How bizarre, especially since your HJT log shows that you're not running
>> WinXP x64 and that the correct version for WinXP SP3 is already
>> installed!
>> Are you dual-booting by any chance?
>>
>> The above notwithstanding, I'd recommend that you...
>>
>> Start a free Windows Update support incident request:
>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>
>> For home users, no-charge support is available by calling 1-866-PCSAFETY
>> in
>> the United States and in Canada or by contacting your local Microsoft
>> subsidiary. There is no-charge for support calls that are associated
>> with
>> security updates. When you call, clearly state that your problem is
>> related to a Security Update and cite the update's KB number (e.g.,
>> KB969897).
>>
>> LOOK!! => If your problem relates to a Cumulative Security Update for IE,
>> call the above number and ask to be transferred to the "Consumer IE
>> queue"
>> (which is 47830).
>>
>> For more information about how to contact your local Microsoft subsidiary
>> for security update support issues, visit the International Support Web
>> site: http://support.microsoft.com/common/international.aspx
>>
>> For enterprise customers, support for security updates is available
>> through
>> your usual support contacts.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE, OE, Security, Shell/User)
>> AumHa VSOP & Admin; DTS-L.net
>>
>>
>> khorst wrote:
>>> Yes, auto updates attempts to install this but fails on download. I
>>> downloaded manually and it fails, giving me the error.
>>>
>>> "PA Bear [MS MVP]" wrote:
>>>> [Crosspost to IE General]
>>>>
>>>> Well, you're not running WinXP x64 so it should come as no surprise
>>>> that
>>>> the
>>>> x64 version of KB969897 throws that error. Furthermore, your HJT log
>>>> shows
>>>> that the correct version of KB969897 for WinXP SP3 (i.e.,
>>>> 7.00.6000.16850)
>>>> is already installed.
>>>>
>>>> Is Automatic Updates enabled and offering this specific update package?
>>>>
>>>> Does Windows Update website (http://windowsupdate.microsoft.com) offer
>>>> this
>>>> specific update package?
>>>>
>>>> Are you attempting to install this specific update package manually?
>>>> If
>>>> so, why?
>>>>
>>>> khorst wrote:
>>>>> and receive error - update\update.exe not valid win32 application.
>>>>>
>>>>> I ran hijackthis and got the following results:
>>>>> Logfile of Trend Micro HijackThis v2.0.2
>>>>> Scan saved at 6:55:42 AM, on 7/8/2009
>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600)
>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
>>>>> Boot mode: Normal
>>>> <snip>