Hi, I posted this hijackthis log in the proper forum, and after it was checked over, and appears to be a clean log, I have been sent here to post the problem. So, my original post follows here: (And thank you for anyone who might be able to shed a little light on this one)


Windows explorer encounters a problem, needs to close, and then Dr Watson Postmortem debugger pops up saying it has encountered a problem too! The only way to recover from this visit from Dr. Watson, is to reboot, cause everything just freezes up as soon as he arrives!
I did a system restore recently because this guy won't leave me alone (Dr.Watson)...but to no avail...he won't go away? Just keeps popping up.
I have followed ALL of the directions in the preparation guide and wo here I present to you, my Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 12:30:23 AM, on 03/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Stardock\SDMCP.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI HydraVision\HydraDM.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\CursorXP\CursorXP.exe
C:\Program Files\TheWeatherNetwork\WeatherEye\WeatherEye.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\NetAssistant\bin\mpbtn.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Suzy's\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://updates.installshield.com/GetUpdate...09889DC708FDEAC
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] C:\Program Files\ATI Technologies\ATI HydraVision\HydraDM.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
O4 - HKCU\..\Run: [WeatherEye] C:\Program Files\TheWeatherNetwork\WeatherEye\WeatherEye.exe
O4 - HKCU\..\Run: [PowerBar] "C:\Program Files\CyberLink DVD Solution\Multimedia Launcher\PowerBar.exe" /AtBootTime
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: NetAssistant.lnk = C:\Program Files\NetAssistant\bin\matcli.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {58FC4C77-71C2-4972-A8CD-78691AD85158} (BJA Control) - http://www.worldwinner.com/games/v49/bjattack/bjattack.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1128879976767
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1131721714390
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
O16 - DPF: {A52FBD2B-7AB3-4F6B-90E3-91C772C5D00F} (WoF Control) - http://www.worldwinner.com/games/v46/wof/wof.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: MCPClient - C:\Program Files\Common Files\Stardock\mcpstub.dll
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AutoComplete Service (Autocomplete) - Acesoft - C:\Program Files\Acesoft\Tracks Eraser Pro\autocomp.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe

What were the exact error messages you received?
Did you have the option to send an error report to Microsoft?
If you did, was there any information supplied about the problem, and what was the information?

The error message what "Windows Explorer has encountered a problem and needs to close". Given the option to send the error report, I have done so repeatedly. Following the 'more information' link given, I was told it was Xvid.dll and that there was no solution to this problem, Microsoft suggested I contact Xvid.org to find a solution; Or, remove it through the control panel. ( I would try this, but it isn't listed in the control panel)
Immediately after sending the error report to Microsoft, Dr Watson Postmortem debugger would pop up, telling me "Run a DLL as an App has encountered a problem and needs to close. We are sorry for the inconvenience."
I jumped the gun a little here tho, and took it upon myself to delete the Xvid.dll file from Windows myself - I don't recall it being a file that belongs in the system folder....or system32 folder (can't remember which one it was in now) But that file is gone.
I hope this information is clear enough, I haven't had the error now in a day or two...so I'm hoping I've fixed it for now? But I didn't want to think that deleting one file would solve the problem...it's never that easy.
And I have no clue if these two errors are even related...or completely seperate problems?
I've since discovered a third problem but I am new here and I'm not sure if I should post elsewhere for this part: In Windows Security Center, My Firewall, Updates and Virus protection are all on with green lights (This is great...keeps me happy...lol) BUT, I am not able to change any settings in the automatic updates. It IS turned on, which I want, but I don't have the option to turn this off?? I don't recall a restriction such as this...but it won't let me click to turn them off! It is set to automatic and that's it.
Again, I thank you, your response was very quick!

I may be wrong on this, but some of your symptoms remind me of a rootkit, also you have some very interesting items in your HJT log

I will recommend running only one antivirus, your CA internet security suite includes antivirus, antispyware and a firewall, running more than one antivirus can cause conflicts, this may also be related to your windows security center problem.

C:\Program Files\Common Files\Stardock\SDMCP.exe
C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe
C:\Program Files\CursorXP\CursorXP.exe

If you know what these are, please let us know

try running Superantispyware and let us know what the results are.

here is a link

http://www.superantispyware.com/

OldFart: I ran Superantispyware...did a full scan. The result was 130 Adware.tracking cookies. That's all. I removed them as suggested.

And thank you for the Anti virus info, I will take care of that promptly! I'm going to uninstall AVG and stick with the suite since it has everything. Will let you know if this fixes my Security Center problem.

The running processes...
SDMCP.EXE is --- Stardock Desktop Personalizer: Windowblinds and tools to alter the appearance of the desktop.
CursorXP.exe is --- Stardock Cursor XP: allows the basic 'mouse' pointer to be transformed to my liking lol
MotiveSB.exe is --- NETASSISTANT: This is from my ISP: Sympatico/Bell Canada


Rootkit...that sounds very scary??

Windows Update settings are found here:
http://update.microsoft.com/windowsupdate/...t.aspx?ln=en-us

On the right hand side of the page click on "Pick a time to install updates." At the bottom of Popup click on "More options" and you will see your options for updating times, etc.

Poetchic,

Thank-you

I have never seen those files before,

Like I said "reminds me" check this link http://www.bleepingcomputer.com/tutorials/tutorial124.html

If your windowsupdate issue is not solved let us know.

Thank you Old Fart, I did read the tutorial on F-Secure Blacklight, I'm going to go ahead and give that a try, but I won't know which files can/should be deleted. So I will post in the proper forum should anything be revealed during the scan, and will go from there.

Update on My Security Center Problem: I did uninstall AVG and rebooted. Immediately I received 5 new windows updates (automatically), I installed those.
I followed the link that Buddy215 provided, but there are no options anywhere for me to 'pick a time to install', but in my security center, it is grayed out, and says they are set to automatically check for updates at 5pm daily. It STILL isn't letting me make any changes. I am now receiving the updates...so this 'problem' isn't that big of a deal I guess, I was more concerned as to whether or not this is 'normal' or if it is something that should raise flags to tell me something really is wrong.

If you couldn't access the controls on the other link there is a different route you can take.

Start/ Control Panel/ double click on "Automatic Updates"

Buddy, I went to Control Panel, double clicked it....the settings window that opens, is the one where I cannot make any changes!!! I can click on all the other options, but the Automatic option remains selected. So, I cannot turn them off, I can not be 'notified' first...nothing at all.

I forgot to mention: I did the scan with F-Secure Blacklight, The scan was clean, and found nothing. What a relief!! Ty Oldfart.

Did you click on the button next to "Automatic (Recommended)"? That should remove the little green dot. Then you can change the settings. If that doesn't work, I give up.

Poetchic,

What version of windows xp are you running (Pro, TabletPC, Media Center or Home) ?

Update settings have to do with group policy on all versions except home, if your computer set to be a domain member.

Please let me know.

Thanks

OF

Microsoft Windows XP
Home Edition
Version 2002
Service Pack 2

New problem found!!
I stumbled across Ewido Anti Spyware. I know there are so many programs to run nowadays..but I figured one more couldn't hurt.
Downloaded it, updated, then booted to safe mode and ran a scan.
Found:
Backdoor.Zapchast
High Risk
1 trace detected in the following location: C:\Windows\system\DRIVER\ntauth.dll

I quarantined the file from safe mode, and rebooted as normal.
Shall I post this in another forum now that I have found a virus?

Thanks OldFart!

Congratulations you just found what is preventing you from changing your auto update settings.

1. Make sure that Ewido is completely up to date, if it is not, rescan after all updating is complete

2. Do you have an original XP Home SP 2 Disk?

3. If so, delete/empty the quarantine in Ewido.

4. Turn off system restore, (Start, rclick on my computer, properties, system restore check the turn off box, apply, ok)

5. restart in safe mode.

6. once in safe mode, rescan with ewido, and have all the files it finds deleted.

7. go to start, run, type in sfc /scannow, and follow the prompts do not, I repeat do not do this if you dont have the original XP Home SP2 Disk.

8. DOnt forget to turn systemrestore back on, after you have done what you can.

OF

Ok, I didn't get the e-mail notification...so I didn't realize your post until now. (Or I'd have been here sooner)

Is this also what's been causing the Windows Explorer & Dr Watson errors??

I have a Windows XP Bootable CD. Is that going to work? lol

I will wait for your reply then before I follow your instructions!

Ty.

Poetchic, no worries.

Your computer is running winxphome, sp2. to run the system file checker (SFC /SCANNOW) your bootable cd must be the exact version that your computer is running.

the other steps can be done, if you are not sure about your cd, just skip step 7.

running the system file checker can ruin windows if not done correctly.

once you are done with the other steps, let us know.

after you are done I have one additional scan I would like you to run. I will provide links to the software and exact instructions at that time

OF

Back to the original post - the Xvid.dll is a part of the Xvid codec pack and may have come bundled with some movie software. Here's the link to their FAQ's where I found this entry: http://www.xvidmovies.com/faq/#3.3

Poet chic,

that is part of what turning off system restore is for

to remove all traces of bad files and virii.

the next step

Run CCleaner http://www.filehippo.com/download_ccleaner/

Install it

when the installer runs, uncheck all options except the desktop shortcut.

run the program click cleaner under advanced check old prefetch data >run cleaner

OF

Thank you OF, I did all the steps, including #7

Ewido found nothing but tracking cookies, I emptied the quarantine as directed, and in safe mode, it found nothing for me to delete.

(sfc did not have any prompts...it ran and closed no problem)

System Restore is now back on.

Going to get the CCleaner now, will update shortly!

Ty.

Usasma ~ Thank you for info on this. I'm still sorta lost though over this Xvid thing, because in order to get rid of the Xvid.dll codec, it is suggested this is done through control panel, in add/remove programs.
My problem? lol, There is no Xvid listed in there to uninstall!!
So, I did as I said in a previous post...I simply navigated to the folder it was in, and deleted it.
Not sure where to go with this now....I mean, now that I jumped a step ahead and updating to the newest isn't going to fix it.

Will keep reading, ty!

Poetchic

CCleaner ran smoothly, However, This hasn't fixed my Security Center. I am still unable to make any changes to the automatic updates.

Poet chic, try this to turn off auto updates:

1. Click Start, click Run, type sysdm.cpl, and then press ENTER.
2. Click the Automatic Updates tab, and then click to select Turn off Automatic Updates.
3. Click OK.


Let us know if this works it is directly from M$

OF

No, That doesn't work either..

Dont give up on this yet

I will do some really deep diggging to find a fix for this

OF

Thank you OldFart...and you're right, there has to be an answer somewhere! lol

In the meantime...I've made a discovery, I seem to have a new folder on my desktop (I'm really unsure if it may have just been moved from somewhere else on my system?) I'm confused tho:

Folder: Sp1
Size: 0 Bytes
Inside of this folder, there is another folder named Sp1 and it is empty.

I tried to delete the folder (The main one, and the one inside) and this is what I'm told:

"Error deleting file or folder
Make sure the disk is not full or write-protected and that the file is not currently in use."

In the properties, it says the file/folder was created on October 9th, 2005
Both folders are 'Read Only'

I thought, if it's that old...maybe it just belongs on my system, and It got moved accidentally. BUT ... it's EMPTY??

I'd suggest uninstalling the video program that's causing this problem (but don't have any idea which one it is). This should fix the problem with the faulty codec. (the codec is what the video program uses to interpret the video files so that they can play on your system).

on that folder, try tools>folder options>shoy hidden/system files. see if there any hidden files that are preventing you from deleting this folder.


I am still searching for the solution to the system restore issue.

OF

Usasma - I am unsure as well which program uses it but, I did manage to fully remove all files associated with Xvid (did some reading on how to do a manual uninstall) Thank you for that link!
Anyhow, following the uninstall, I did reinstall the newest version and so far so good. Thx!

OldFart - I have it now showing hidden files...problem is, there aren't any showing. Now, if I open the Sp1 folder on my desktop, then I try to open the 2nd folder that is in it named Sp1, it says: "Sp1 is Not accessible". Ty.

see if you can delete those folders in safe mode of

No I cannot delete it from Safe Mode either....this is quite a puzzle...

How did you log on when in safe mode?

as the Administrator or using the regular log in?

try again, making sure that you log in as the administrator.

run windows explorer (start>all programs>accessories>explorer)

navigate to your regular desktop, it should look something like this:

C:\Documents and Settings\OF-1TH0Z1U\Desktop

in the right pane you should see all the folders of your regular desktop

open the folder that you cannot delete and delete the contents, then go up one level and delete the folder from

your desktop

OF

Ok, Logged in again, as Administrator, followed your instructions to navigate to the folder, I can open the folder to see the 2nd Sp1 folder, but it gives me the same message: Access is denied.

Cannot delete either folder.

Wow, looks like it is locked by the system account, and will have to stay, unless you know how to use the recovery console.

there is an excellent tutorial on how to use it here on bleeping computer.

if your feel comfortable with use of command line, i suggest that you read this tutorial, and go from there.

I still have not found a fix to your auto updates problem.
OF

It sounds like you may have to take ownership of the folder in order to delete it.

In XPHome you'll have to do this in Safe Mode. In XPPro you can usually do it in regular mode:

1) Right click on the folder and select "Properties" and then select the Security tab.
2) First, add your user name to the list in the top box, then ensure that you've got Full Control checked in the bottom box (this may solve your problem without any additional steps - but go on to the next step since this is a deletion)
3) Click on the Advanced button, then on the Owner tab.
4) Double click on your user name to assign it as the owner.
5) Click OK to exit out of all the dialogs, then delete the folder.

CAVEAT: This procedure is a bit flakey at times - so you may have to do it from the bottom up (take ownership of the lowest level first, then the levels above it in succession).

Here's a how-to on Access Denied errors: http://www.bleepingcomputer.com/forums/topic42756.html

Thank you Usasma...I'll give that a try...and let you know if it works.

I was attempting the recovery console, but it seems my original xp cd has vanished, and the other one I have says that I have a newer version of WinXP!!

Be back to report the outcome.

Poetchic

I seem to recall the "fix" for the newer version of XP error message (and I suspect it will be fixed by slipstreaming the old CD with the newer updates) - but I cannot locate the post that mentioned it right now. Perhaps someone else can point us in the right direction?

Usasma ~ I've gone to safe mode and I haven't been able to delete the folders *yet* lol.
On the main folder, I put my name in...and made myself owner etc.. but for the folder that is inside...it won't let me type my name in the top box under the security tab; there is nothing in this box, but it is grayed out. Therefore, I cannot get full control. It will not let me double click on my name to assign as owner.

When I go to the security tab (for the 'child' folder I think you call it), It does pop up with a security message as follows:

Security: "You do not have permission to view or edit the current permission settings for Sp1, but you can take ownership or change audit settings."

I'm off to read the 'How-to on Access denied errors' ...Ty!

Well... tell ya what i'll tell ya how to do something, but keep it on the dl. But before that, there is a nifty thing called unlocker that you can try this http://www.softpedia.com/get/System/System.../Unlocker.shtml and if that doesn't work, follow the directions I send you

Poetchic,
\
I still have not found anything on your problem with the automatic updates settings
\
does anyone else have any ideas?

OF

If SP1 is the Windows Sp1 and you have SP2 installed you cannot delete it.

Is the problem stil the XVID file?

If so, you can download the newest version here:
http://www.xvid.org/

Enthusiast: the Sp1 folders were empty, that's about all I know, Thank you to Gyro, that problem has been resolved.

Xvid - I removed manually, and got the newest version....so far so good.

I seem to get the "Explorer has encountered an error and needs to close" and the "Dr Watson Postmortem Debugger error" when I run NERO...everytime...

The problem that remains is this:

Options in the Security Center are greyed out, and I cannot change whether or not automatic updates are on, or off, or to be prompted when they are ready to install. If this is 'normal'? to not be able to change these settings...I'd love to hear about it, cause I've ALWAYS been able to change this.

OldFart has been digging for the resolution to this one (thank you again for your patience and knowledge), but it's definately an odd situation I've never heard of...hopefully someone knows what is going on? LOL

No- it is not normal for them to be unchangeable or greyed out.

Are you using an administrator level account?

Try the following:

Go to Windows Updates using Internet Explorer and try to set your updates for automatic download and install from there.
You must be using an administrator level account.

If you have a second admin level account (or the default Windows Admin account) available use it.

Did you upgrade to XP or was it the op system that came or was first installed on the computer?

This is just a "feeling", but I'm starting to suspect that "something" has locked you out of these settings.

Most likely a virus, it's cure, or a tweaking/security program installed on your system.

Try downloading Avast

If you do, dont let it restart the machine. inactivate your present Anti virus, run all updates of avast, and make sure that avast is scheduled for a boot time scan. Then restart.

OF

Enthusiast:

Using Admin level account, and used a second one...same thing, it's all greyed out.

Tried the windows updates from IE, again, there are no options available to change the settings for automatic update from here.

As for XPHome...It was installed on my computer when I got it from the factory, and I was instructed when I received it, how to create the XP cd off of the harddrive. So I did, and currently cannot find my CD!!
System has been formatted ONE time, and I used that CD to redo the system. Hope this helps.

Usasma:

I'm afraid to say I think you might be right with your 'feeling'...

Oldfart:

Avast is next thx...will post afterwards.

Ok, Got AVAST, updated, and scheduled the boottime scan & rebooted....it found...Nothing

If you've eliminated the tweaking/security programs from the list - then all we're left with is the "cure" having caused this.

In the rush to get a cure out to users, sometimes the cure will break things when it's attempting to fix an infection. So, you've just gotta figger out what's broke and it can be fixed.

This is very, very complicated (and I don't understand most of it), so probably the easiest thing to do at this point is attempt to do a repair install of XP. Please read these directions carefully before trying to do it: http://www.michaelstevenstech.com/XPrepairinstall.htm

I will fire up the wifes laptop and find the correct registry keys,

poetchic, If i find what I am looking for I will post a registry merge file here,

hopefully this will solve the problem,

again, if anybody thinks otherwise, or has a better idea, feel free to let all of us know.

For the updates issue - have you tried DJLizard's Dial-A-Fix? It's available for free here: http://wiki.djlizard.net/Dial-a-fix#Mirror...2C_and_articles