Troubles installing Windows Genuine Advantage Validation Tool

(Follow-up) I still have problems updating my system (XP Home Edition, IE
7.05) due to Windows Genuine Advantage Validation Tool.

For some reason, I am unable to download MS GAV Tool. After I click on
Down/Install, a window pop-up signals that Windows Genuinine Advantage has
not been installed.

I followed the instructions outlined in the following post to ensure that
all dlls were registered
http://groups.google.com/group/micro...68ead96f7419d0

and downloaded packages such as WindowsUpdateAgent30-x86.exe to no avail.
http://www.tutorials-win.com/Windows...enuine-237336/

Both Office and Windows have been successfully validated on line.

I am trying to upgrade XP Home Edition with the SP2 upgrade.

TIA for any hints.

"Mark" <> schrieb:

> (Follow-up) I still have problems updating my system (XP Home Edition, IE
> 7.05) due to Windows Genuine Advantage Validation Tool.
>
> For some reason, I am unable to download MS GAV Tool. After I click on
> Down/Install, a window pop-up signals that Windows Genuinine Advantage has
> not been installed.

Have a look into the "KB892130.log" file to be found in the Windows folder
(Start -> Run -> %windir%\KB892130.log [Enter/OK]).

Which applications are running in the background? Antivirus software,
3rd party "firewall" software and/or Spybot, AdAware and the like are
interesseting and a potential source of updates not installing.

Bye,
Freudi

Freudi, thanks for replying.

Interestingly, I could not locate KB892130.log on my system. Regarding AV
programs, I removed Norton AV and replaced it with ESET NOD32 based on
favorable reviews. I use AdAware (does not run in the background). The
firewall is the standard XP Home Windows firewall.

I ran MS WGA Diagnostic Tool MGADiag.exe. Below is an excerpt of the
diagnostics report. Does this conceal some clues about the WGA installation
issue?

Thanks again.


MGADiag Report:
Diagnostic Report (1.7.0066.0):
-----------------------------------------
WGA Data-->
Validation Status: Genuine
Validation Code: 0
Online Validation Code: N/A
Cached Validation Code: N/A
Windows Product Key: *****-*****-36J2P-HT3T3-QPMFB
Windows Product Key Hash: +NNF346DA3Rr/gGjXZtwAv8AQuM=
Windows Product ID: 76412-OEM-2111907-00100
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 5.1.2600.2.00010300.2.0.hom
CSVLK Server: N/A
CSVLK PID: N/A
ID: {23F3E581-CE63-4844-9219-D7C8ACDE2605}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.7.36.0
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-171-1
Resolution Status: N/A

Notifications Data-->
Cached Result: 0
File Exists: Yes
Version: 1.7.18.5
WgaTray.exe Signed By: Microsoft
WgaLogon.dll Signed By: Microsoft

OGA Data-->
Office Status: 100 Genuine
OGA Version: Registered, 1.6.21.0
Signed By: Microsoft
Office Diagnostics: B4D0AA8B-531-645_7E90FEE8-198-80004005_025D1FF3-171-1

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details:
<GenuineResults><MachineData><UGUID>{23F3E581-CE63-4844-9219-D7C8ACDE2605}</UGUID><Version>1.7.0066.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-QPMFB</PKey><PID>76412-OEM-2111907-00100</PID><PIDType>2</PIDType><SID>S-1-5-21-4177598376-340500911-1672783897</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>TravelMate
2350
</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.70</Version><SMBIOSVersion
major="2"
minor="3"/><Date>20050103000000.000000+000</Date><SLPBIOS>AcerSystem
,AcerSystem
</SLPBIOS></BIOS><HWID>6A883207018400E2</HWID><UserLCID>100C</UserLCID><SystemLCID>040C</SystemLCID><TimeZone>Paris,
Madrid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>2</stat><msppid></msppid><name>Acer
Inc.</name><model>AcerSystem</model></SBID><OEM/><BRT/></MachineData><Software><Office><Result>100</Result><Products><Product
GUID="{9119040C-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft
Office Publisher
2003</Name><Ver>11</Ver><Val>24D37E192D45F8</Val><Hash>L1TrDFceTs5YnchILV90OUFidpk=</Hash><Pid>73206-764-9178082-55332</Pid><PidType>1</PidType></Product></Products></Office></Software></GenuineResults>

"Mark" <> schrieb:

> Interestingly, I could not locate KB892130.log on my system.

Huh? You get an error message when you type "%windir%\KB892130.log"
into "Run" in the Start menu and hit the [Enter] key or click on OK?

> Regarding AV
> programs, I removed Norton AV and replaced it with ESET NOD32 based on
> favorable reviews. I use AdAware (does not run in the background). The
> firewall is the standard XP Home Windows firewall.

Okay, please list *all* applications listed in msconfig and the
System Start tab there (Start -> Run -> msconfig [Enter/OK]).

BTW: Which IE version are you using? IE7 or IE6?

Bye,
Freudi

Hi Freudi, Thanks for replying.

Below is the msconfig output of all start-up programs and services. I used
msinfo32 to produce this output; unfortunately, it is somewhat verbose.

In the services block I edited out the French description field to improve
understanding. (XP Editions come either in G/F/I in Switzerland. English
versions cost extra!)

Currently, the system runs IE 7.0.5730.11

Again many thanks in advance.


Startup Programs:

Adobe Reader Speed
Launch c:\progra~1\adobe\acroba~2.0\reader\reader~1.exe All Users Common
Startup
CTFMON.EXE c:\windows\system32\ctfmon.exe AUTORITE
NT\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe AUTORITE NT\SERVICE
LOCAL HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe AUTORITE NT\SERVICE
RÉSEAU HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe ACER2350\Marc HKU\S-1-5-21-4177598376-340500911-1672783897-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVer sion\Run
HotKeysCmds c:\windows\system32\hkcmd.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
IgfxTray c:\windows\system32\igfxtray.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
LManager c:\progra~1\launch~1\lmanager.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSMSGS "c:\program files\messenger\msmsgs.exe"
/background ACER2350\Marc HKU\S-1-5-21-4177598376-340500911-1672783897-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SoundMan soundman.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Spyware Doctor "c:\program files\spyware doctor\swdoctor.exe" /q AUTORITE
NT\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Spyware Doctor "c:\program files\spyware doctor\swdoctor.exe"
/q .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVer sion\Run
SunJavaUpdateSched "c:\program files\java\jre1.6.0_03\bin\jusched.exe" All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SynTPEnh c:\program files\synaptics\syntp\syntpenh.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SynTPLpr c:\program files\synaptics\syntp\syntplpr.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
desktop desktop.ini AUTORITE NT\SYSTEM Startup
desktop desktop.ini ACER2350\Marc Startup
desktop desktop.ini .DEFAULT Startup
desktop desktop.ini All Users Common Startup
egui "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide
/waitservice All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
epm-dm c:\acer\epm\epm-dm.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


Services:

..NET Runtime Optimization Service
v2.0.50727_X86 clr_optimization_v2.0.50727_32 Stopped Manual Own
Process c:\windows\microsoft.net\framework\v2.0.50727\msco rsvw.exe Ignore LocalSystem 0
ASP.NET State Service aspnet_state Stopped Manual Own
Process c:\windows\microsoft.net\framework\v2.0.50727\aspn et_state.exe Normal NT AUTHORITY\NetworkService 0
HidServ Stopped Disabled Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
(WIA) stisvc Running Auto Share Process c:\windows\system32\svchost.exe -k
imgsvc Normal LocalSystem 0
Messenger Stopped Disabled Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
helpsvc Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
(RPC) RpcSs Running Auto Share Process c:\windows\system32\svchost -k
rpcss Normal LocalSystem 0
Application système COM+ COMSysApp Stopped Manual Own
Process c:\windows\system32\dllhost.exe
/processid:{02d4b3f1-fd88-11d1-960d-00805fc79235} Normal LocalSystem 0
Assistance TCP/IP NetBIOS LmHosts Running Auto Share
Process c:\windows\system32\svchost.exe -k localservice Normal NT
AUTHORITY\LocalService 0
Audio Windows AudioSrv Running Auto Share
Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Alerter Stopped Disabled Share Process c:\windows\system32\svchost.exe -k
localservice Normal NT AUTHORITY\LocalService 0
WmiApSrv Stopped Manual Own
Process c:\windows\system32\wbem\wmiapsrv.exe Normal LocalSystem 0
SCardSvr Running Auto Share
Process c:\windows\system32\scardsvr.exe Ignore NT AUTHORITY\LocalService 0
wscsvc Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
VSS Stopped Manual Own
Process c:\windows\system32\vssvc.exe Normal LocalSystem 0
Client DHCP Dhcp Running Auto Share Process c:\windows\system32\svchost.exe
-k netsvcs Normal LocalSystem 0
Client DNS Dnscache Running Auto Share
Process c:\windows\system32\svchost.exe -k networkservice Normal NT
AUTHORITY\NetworkService 0
Client de suivi de lien distribué TrkWks Running Auto Share
Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
FastUserSwitchingCompatibility Running Manual Share
Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
WZCSVC Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
seclogon Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Ignore LocalSystem 0
Netman Running Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
Cryptainer service ssoftservice Running Auto Own
Process ssoftsrv.exe Normal LocalSystem 0
NetDDE Stopped Disabled Share
Process c:\windows\system32\netdde.exe Normal LocalSystem 0
NetDDEdsdm Stopped Disabled Share
Process c:\windows\system32\netdde.exe Normal LocalSystem 0
Distributed Transaction Coordinator MSDTC Stopped Manual Own
Process c:\windows\system32\msdtc.exe Normal NT AUTHORITY\NetworkService 0
ShellHWDetection Running Auto Share Process c:\windows\system32\svchost.exe
-k netsvcs Ignore LocalSystem 0
EPSONStatusAgent2 Running Auto Own Process c:\program files\fichiers
communs\epson\ebapi\sagent2.exe Normal LocalSystem 0
ProtectedStorage Running Auto Share
Process c:\windows\system32\lsass.exe Normal LocalSystem 0
Eset HTTP Server EhttpSrv Stopped Manual Own Process "c:\program
files\eset\eset nod32 antivirus\ehttpsrv.exe" Normal NT
AUTHORITY\NetworkService 0
Eset Service ekrn Running Auto Own Process "c:\program files\eset\eset nod32
antivirus\ekrn.exe" Normal LocalSystem 0
Browser Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
Fax Running Auto Own
Process c:\windows\system32\fxssvc.exe Normal LocalSystem 0
LM NT NtLmSsp Stopped Manual Share
Process c:\windows\system32\lsass.exe Normal LocalSystem 0
AppMgmt Stopped Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
SamSs Running Auto Share
Process c:\windows\system32\lsass.exe Normal LocalSystem 0
RasAuto Running Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
RasMan Running Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
dmserver Stopped Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
ClipSrv Stopped Disabled Own
Process c:\windows\system32\clipsrv.exe Normal LocalSystem 0
RDSessMgr Stopped Manual Own
Process c:\windows\system32\sessmgr.exe Normal LocalSystem 0
HTTP SSL HTTPFilter Running Manual Share
Process c:\windows\system32\svchost.exe -k httpfilter Normal LocalSystem 0
W32Time Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
Plug-and-Play upnphost Running Manual Share
Process c:\windows\system32\svchost.exe -k localservice Normal NT
AUTHORITY\LocalService 0
winmgmt Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Ignore LocalSystem 0
IDriverT Stopped Manual Own Process "c:\program files\fichiers
communs\installshield\driver\11\intel 32\idrivert.exe" Ignore LocalSystem 0
Eventlog Running Auto Share
Process c:\windows\system32\services.exe Normal LocalSystem 0
SysmonLog Stopped Manual Own
Process c:\windows\system32\smlogsvc.exe Normal NT Authority\NetworkService 0
DcomLaunch Running Auto Share Process c:\windows\system32\svchost -k
dcomlaunch Normal LocalSystem 0
RpcLocator Stopped Manual Own
Process c:\windows\system32\locator.exe Normal NT AUTHORITY\NetworkService 0
MS Software Shadow Copy Provider SwPrv Stopped Manual Own
Process c:\windows\system32\dllhost.exe
/processid:{a62264b0-7560-4ebe-930b-a7133ab440bb} Ignore LocalSystem 0
Microsoft Office Diagnostics Service odserv Stopped Manual Own
Process "c:\program files\fichiers communs\microsoft
shared\office12\odserv.exe" Normal LocalSystem 0

Mises Ã* jour automatiques wuauserv Running Auto Share
Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0

Irmon Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
MySql Stopped Disabled Own Process c:/program
files/mysql/bin/mysqld-nt.exe Normal LocalSystem 0
NLA (Network Location Awareness) Nla Running Manual Share
Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Notebook Manager Service anbmService Running Auto Own
Process c:\acer\emanager\anbmserv.exe Ignore LocalSystem 0
Notification d'événement système SENS Running Auto Share
Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Office Source Engine ose Stopped Manual Own Process "c:\program
files\fichiers communs\microsoft shared\source
engine\ose.exe" Normal LocalSystem 0
UPS Stopped Manual Own Process c:\windows\system32\ups.exe Normal NT
AUTHORITY\LocalService 0
Netlogon Stopped Manual Share
Process c:\windows\system32\lsass.exe Normal LocalSystem 0
PC Tools Spyware Doctor SDhelper Stopped Disabled Own Process c:\program
files\spyware doctor\sdhelp.exe Normal LocalSystem 0
PDEngine Stopped Manual Own Process "c:\program
files\raxco\perfectdisk\pdengine.exe" Normal LocalSystem 0
PDScheduler PDSched Stopped Auto Own Process "c:\program
files\raxco\perfectdisk\pdsched.exe" Normal LocalSystem 0
SharedAccess Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
NetMeeting mnmsrvc Stopped Manual Own
Process c:\windows\system32\mnmsrvc.exe Normal LocalSystem 0
Schedule Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
PlugPlay Running Auto Share
Process c:\windows\system32\services.exe Normal LocalSystem 0
Pml Driver HPZ12 Stopped Disabled Own
Process c:\windows\system32\hpzipm12.exe Normal LocalSystem 0
PSEXESVC Stopped Manual Own
Process c:\windows\psexesvc.exe Ignore LocalSystem 0
QoS RSVP RSVP Stopped Manual Own
Process c:\windows\system32\rsvp.exe Normal LocalSystem 0
RemoteAccess Stopped Disabled Share Process c:\windows\system32\svchost.exe
-k netsvcs Normal LocalSystem 0
SQL Server (SQLEXPRESS) MSSQL$SQLEXPRESS Running Auto Own
Process "c:\program files\microsoft sql
server\mssql.1\mssql\binn\sqlservr.exe" -ssqlexpress Normal NT
AUTHORITY\NetworkService 0
SQL Server Active Directory Helper MSSQLServerADHelper Stopped Disabled Own
Process "c:\program files\microsoft sql
server\90\shared\sqladhlp90.exe" Normal NT AUTHORITY\NetworkService 0
SQL Server Browser SQLBrowser Running Auto Own Process "c:\program
files\microsoft sql server\90\shared\sqlbrowser.exe" Normal NT
AUTHORITY\NetworkService 0
SQL Server VSS Writer SQLWriter Running Auto Own Process "c:\program
files\microsoft sql server\90\shared\sqlwriter.exe" Normal LocalSystem 0
lanmanserver Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
mapiService Stopped Manual Own
Process c:\windows\system32\imapi.exe Normal LocalSystem 0
WMPNetworkSvc Stopped Manual Own Process "c:\program files\windows media
player\wmpnetwk.exe" Normal NT AUTHORITY\NetworkService 0
dmadmin Stopped Manual Share Process c:\windows\system32\dmadmin.exe
/com Normal LocalSystem 0
xmlprov Stopped Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
CiSvc Stopped Manual Share
Process c:\windows\system32\cisvc.exe Normal LocalSystem 0
SSDPSRV Running Manual Share Process c:\windows\system32\svchost.exe -k
localservice Normal NT AUTHORITY\LocalService 0
ALG Running Manual Own Process c:\windows\system32\alg.exe Normal NT
AUTHORITY\LocalService 0
WmdmPmSN Stopped Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
ERSvc Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Ignore LocalSystem 0
srservice Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0

BITS Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0

Services IPSEC PolicyAgent Running Auto Share
Process c:\windows\system32\lsass.exe Normal LocalSystem 0
Services Terminal Server TermService Running Manual Share
Process c:\windows\system32\svchost -k dcomlaunch Normal LocalSystem 0
Services de cryptographie CryptSvc Running Auto Share
Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Spooler Running Auto Own
Process c:\windows\system32\spoolsv.exe Normal LocalSystem 0
lanmanworkstation Running Auto Share Process c:\windows\system32\svchost.exe
-k netsvcs Normal LocalSystem 0
NtmsSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
EventSystem Running Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
Themes Running Auto Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
TapiSrv Running Manual Share Process c:\windows\system32\svchost.exe -k
netsvcs Normal LocalSystem 0
WebClient Running Auto Share Process c:\windows\system32\svchost.exe -k
localservice Normal NT AUTHORITY\LocalService 0
Webcam Corp. Service Starter Stopped Manual Own Process c:\program
files\trials\webcam\webcam123\dogsvc.exe Normal LocalSystem 0
Windows Driver Foundation - User-mode Driver
Framework WudfSvc Stopped Manual Share
Process c:\windows\system32\svchost.exe -k
wudfservicegroup Normal LocalSystem 0
Windows Installer MSIServer Stopped Manual Share
Process c:\windows\system32\msiexec.exe /v Normal LocalSystem 0
wampapache Stopped Manual Own Process "c:\wamp\apache2\bin\httpd.exe" -k
runservice Normal LocalSystem 0
wampmysqld Stopped Manual Own Process c:\wamp\mysql\bin\mysqld-nt.exe
--defaults-file=c:\wamp\mysql\my.ini wampmysqld Normal LocalSystem 0

Sorry, the output really looks messy! Hopefully, this editing makes it
somewhat more intelligible.

Startup Programs:

Adobe Reader Speed
Launch c:\progra~1\adobe\acroba~2.0\reader\reader~1.exe All Users Common
Startup
01. CTFMON.EXE c:\windows\system32\ctfmon.exe AUTORITE
NT\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
02. CTFMON.EXE c:\windows\system32\ctfmon.exe AUTORITE NT\SERVICE
LOCAL HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
03. CTFMON.EXE c:\windows\system32\ctfmon.exe AUTORITE NT\SERVICE
RÉSEAU HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
04.
CTFMON.EXE c:\windows\system32\ctfmon.exe ACER2350\Marc HKU\S-1-5-21-4177598376-340500911-1672783897-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
05.
CTFMON.EXE c:\windows\system32\ctfmon.exe .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVer sion\Run
06. HotKeysCmds c:\windows\system32\hkcmd.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
07. IgfxTray c:\windows\system32\igfxtray.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
08. LManager c:\progra~1\launch~1\lmanager.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
09. MSMSGS "c:\program files\messenger\msmsgs.exe"
/background ACER2350\Marc HKU\S-1-5-21-4177598376-340500911-1672783897-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
10. SoundMan soundman.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
11. Spyware Doctor "c:\program files\spyware doctor\swdoctor.exe"
/q AUTORITE
NT\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
12. Spyware Doctor "c:\program files\spyware doctor\swdoctor.exe"
/q .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVer sion\Run
13. SunJavaUpdateSched "c:\program
files\java\jre1.6.0_03\bin\jusched.exe" All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
14. SynTPEnh c:\program files\synaptics\syntp\syntpenh.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
15. SynTPLpr c:\program files\synaptics\syntp\syntplpr.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
16. desktop desktop.ini AUTORITE NT\SYSTEM Startup
17. desktop desktop.ini ACER2350\Marc Startup
18. desktop desktop.ini .DEFAULT Startup
19. desktop desktop.ini All Users Common Startup
20. egui "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide
/waitservice All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
21. epm-dm c:\acer\epm\epm-dm.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


Services:

01. .NET Runtime Optimization Service
v2.0.50727_X86 clr_optimization_v2.0.50727_32 Stopped Manual
2. ASP.NET State Service aspnet_state Stopped Manual Own Process
02. HidServ Stopped Disabled Share Process
04. (WIA) stisvc Running Auto Share Process

05. Messenger Stopped Disabled Share Process
06. helpsvc Running Auto Share Process 07. (RPC) RpcSs Running Auto Share
Process
08. Application système COM+ COMSysApp Stopped Manual Own Process
09. Assistance TCP/IP NetBIOS LmHosts Running Auto Share Process
10. Audio Windows AudioSrv Running Auto Share Process
11. Alerter Stopped Disabled Share Process
12. WmiApSrv Stopped Manual Own Process
13. SCardSvr Running Auto Share Process
14. wscsvc Running Auto Share Process
15. VSS Stopped Manual Own Process
16. Client DHCP Dhcp Running Auto Share Process
17. Client DNS Dnscache Running Auto Share Process
18. Client de suivi de lien distribué TrkWks Running Auto Share Process
19. FastUserSwitchingCompatibility Running Manual Share Process
20. WZCSVC Running Auto Share Process
21. seclogon Running Auto Share Process
22. Netman Running Manual Share Process
23. Cryptainer service ssoftservice Running Auto Own Process
24. NetDDE Stopped Disabled Share Process
25. NetDDEdsdm Stopped Disabled Share Process
26. Distributed Transaction Coordinator MSDTC Stopped Manual Own Process
27. ShellHWDetection Running Auto Share Process
28. EPSONStatusAgent2 Running Auto Own Process
29. ProtectedStorage Running Auto Share Process
30. Eset HTTP Server EhttpSrv Stopped Manual Own Process
31. Eset Service ekrn Running Auto Own Process
32. Browser Running Auto Share Process
33. Fax Running Auto Own Process
34. LM NT NtLmSsp Stopped Manual Share Process
35. AppMgmt Stopped Manual Share Process
36. SamSs Running Auto Share Process
37. RasAuto Running Manual Share Proces
38. RasMan Running Manual Share Process
39. dmserver Stopped Manual Share Process
40. ClipSrv Stopped Disabled Own Process
41. RDSessMgr Stopped Manual Own Process
42. HTTP SSL HTTPFilter Running Manual Share Process
43. W32Time Running Auto Share Process
44. Plug-and-Play upnphost Running Manual Share Process
45. winmgmt Running Auto Share Process
46. IDriverT Stopped Manual Own Process
47. Eventlog Running Auto Share Process
48. SysmonLog Stopped Manual Own Process
49. DcomLaunch Running Auto Share Process
50. RpcLocator Stopped Manual Own Process
51. MS Software Shadow Copy Provider SwPrv Stopped Manual Own Process
52. Microsoft Office Diagnostics Service odserv Stopped Manual Own Process

53. Mises Ã* jour automatiques wuauserv Running Auto Share Process

54. Irmon Running Auto Share Process
55. MySql Stopped Disabled Own Process
56. NLA (Network Location Awareness) Nla Running Manual Share Process
57. Notebook Manager Service anbmService Running Auto Own Process
58. Notification d'événement système SENS Running Auto Share Process
59. Office Source Engine ose Stopped Manual Own Process
60. UPS Stopped Manual Own Process
61. Netlogon Stopped Manual Share Process
62. PC Tools Spyware Doctor SDhelper Stopped Disabled Own Process
63. PDEngine Stopped Manual Own Process
64. PDScheduler PDSched Stopped Auto Own Process
65. SharedAccess Running Auto Share Process
66. NetMeeting mnmsrvc Stopped Manual Own Process
67. Schedule Running Auto Share Process
68. PlugPlay Running Auto Share Process
69. Pml Driver HPZ12 Stopped Disabled
70. PSEXESVC Stopped Manual Own Process
71. QoS RSVP RSVP Stopped Manual Own Process
72. RemoteAccess Stopped Disabled Share Process
73. SQL Server (SQLEXPRESS) MSSQL$SQLEXPRESS Running Auto Own Process
74. SQL Server Active Directory
Helper MSSQLServerADHelper Stopped Disabled Own Process
75. SQL Server Browser SQLBrowser Running Auto Own Process
76. SQL Server VSS Writer SQLWriter Running Auto Own Process
77. lanmanserver Running Auto Share Process
78. mapiService Stopped Manual Own Process
79. WMPNetworkSvc Stopped Manual Own Process
80. dmadmin Stopped Manual Share Process
81. xmlprov Stopped Manual Share Process
82. CiSvc Stopped Manual Share Process
83. SSDPSRV Running Manual Share Process
84. ALG Running Manual Own Process
85. WmdmPmSN Stopped Manual Share Process
86. ERSvc Running Auto Share Process
87. srservice Running Auto Share Process

88. BITS Running Auto Share Process

89. Services IPSEC PolicyAgent Running Auto Share Process
90. Services Terminal Server TermService Running Manual Share Process
91. Services de cryptographie CryptSvc Running Auto Share Process
92. Spooler Running Auto Own Process
93. lanmanworkstation Running Auto Share Process
94. NtmsSvc Stopped Manual Share Process
95. EventSystem Running Manual Share Process
96. Themes Running Auto Share Process
97. TapiSrv Running Manual Share Process
98. WebClient Running Auto Share Process
99. Webcam Corp. Service Starter Stopped Manual Own Process
100. Windows Driver Foundation - User-mode Driver
Framework WudfSvc Stopped Manual Share Process
101. Windows Installer MSIServer Stopped Manual Share Process
102. wampapache Stopped Manual Own Process
103. wampmysqld Stopped Manual Own Process

"Mark" <> schrieb:

> Below is the msconfig output of all start-up programs and services. I used
> msinfo32 to produce this output; unfortunately, it is somewhat verbose.

That's why I asked you to simply type the entries into your reply

> Startup Programs:
[...]
> Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> Spyware Doctor "c:\program files\spyware doctor\swdoctor.exe" /q AUTORITE
> NT\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> Spyware Doctor "c:\program files\spyware doctor\swdoctor.exe"

Dingdong, that may be the culprit. Disable that one from running on Windows
start, reboot Windows and try to apply KB892130 from Windows Update again.
If that alone doesn't help, shut down NOD32 *completely* while trying to
install an update.

Bye,
Freudi

Freudi, Thanks for your suggestions. I removed SpyDoctor to no avail. I
believe the problem may be related to an Office 2003 application (MS
Publisher 2003) I installed a few months ago. Up to that point, Windows
Updates worked smoothly.

To run MS Publisher 2003, I needed at the time to download a ton of updates
I had trouble installing (system was and is still running with Office 2K). I
finally got Publisher to work albeit with some quirks.

Now that I have a back-up machine, I tried to remove Publisher 2003 via the
control pane w/o success. Some of the ancillary files appear to be
un-removable. Additionnally, it seems there is no tool to remove Office
2003 components (ork.exe fails). I followed the hints in the post below w/o
success.
http://www.officearticles.com/misc/r...om_your_pc.htm

I guess I will end up having to reformat the system. Figuring this out is
taking way too much time. Again, thanks for your assistance.

"Mark" <> schrieb:

> Freudi, Thanks for your suggestions. I removed SpyDoctor to no avail.

Hm, have you tried a manuall download and installation of KB892130 yet?
http://www.download.windowsupdate.co...5f8eef14aa.exe

You may want to completely shut down NOD32 while installing the update
too.

BTW: Does your system have an Intel Chipset Graphic onboard?
http://www.file.net/process/igfxtray.exe.html

Bye,
Freudi

Freudi, again thanks for following up on this.

Yes, I installed KB892130 before w/o success (ESET disabled.) Also, the
system runs igfxtray.exe (danger or a mere nuisance?)

I believe failure to install the Genuine Advantage Valiation tool is most
likely related to Office 2003. (MS Publisher 2003 requires a product key.) As
I said before I had difficulties installing this program. In the process it
probably messed up my configuration. Now, it cannot even be deleted! When I
attempt to remove MS Pub via the control panel, a message pops up stating
that the corrective package cannot be opened.

I really would like to delete MS Pub 2003 and all associated Office 2003
components (I'm happy running Office 2k). So I guess the question should be
rephrased as: How to completely remove Office 2003 on an XP system? and then
check if system updating proceeds correctly. Is this the right forum? Thanks
for letting me know.

Regards