From: PA Bear [MS MVP] on
Or she could have pointed you to http://support.microsoft.com/kb/971058

Lost in the registry space wrote:
> Strike the logs, she didn't save them to my computer. Bummer.
> she did create a nifty script to re-register all the dll files that I
> still
> have.
>
> "Regsvr32 wups2.dll /s
> regsvr32 licdll.dll /s
> regsvr32 regwizc.dll /s
> regsvr32 msxml.dll /s
> regsvr32 msxml2.dll /s
> regsvr32 msxml3.dll /s
> regsvr32 comcat.dll /s
> regsvr32 shdoc401.dll /s
> regsvr32 shdoc401.dll /i /s
> regsvr32 asctrls.ocx /s
> regsvr32 oleaut32.dll /s
> regsvr32 shdocvw.dll /I /s
> regsvr32 shdocvw.dll /s
> regsvr32 browseui.dll /s
> regsvr32 browseui.dll /I /s
> regsvr32 msrating.dll /s
> regsvr32 mlang.dll /s
> regsvr32 hlink.dll /s
> regsvr32 mshtmled.dll /s
> regsvr32 urlmon.dll /s
> regsvr32 plugin.ocx /s
> regsvr32 sendmail.dll /s
> regsvr32 scrobj.dll /s
> regsvr32 mmefxe.ocx /s
> regsvr32 corpol.dll /s
> regsvr32 jscript.dll /s
> regsvr32 msxml.dll /s
> regsvr32 imgutil.dll /s
> regsvr32 thumbvw.dll /s
> regsvr32 cryptext.dll /s
> regsvr32 rsabase.dll /s
> regsvr32 inseng.dll /s
> regsvr32 iesetup.dll /i /s
> regsvr32 cryptdlg.dll /s
> regsvr32 actxprxy.dll /s
> regsvr32 dispex.dll /s
> regsvr32 occache.dll /s
> regsvr32 occache.dll /i /s
> regsvr32 iepeers.dll /s
> regsvr32 urlmon.dll /i /s
> regsvr32 cdfview.dll /s
> regsvr32 webcheck.dll /s
> regsvr32 mobsync.dll /s
> regsvr32 pngfilt.dll /s
> regsvr32 licmgr10.dll /s
> regsvr32 icmfilter.dll /s
> regsvr32 hhctrl.ocx /s
> regsvr32 inetcfg.dll /s
> regsvr32 tdc.ocx /s
> regsvr32 MSR2C.DLL /s
> regsvr32 msident.dll /s
> regsvr32 msieftp.dll /s
> regsvr32 xmsconf.ocx /s
> regsvr32 ils.dll /s
> regsvr32 msoeacct.dll /s
> regsvr32 inetcomm.dll /s
> regsvr32 msdxm.ocx /s
> regsvr32 dxmasf.dll /s
> regsvr32 l3codecx.ax /s
> regsvr32 acelpdec.ax /s
> regsvr32 mpg4ds32.ax /s
> regsvr32 voxmsdec.ax /s
> regsvr32 danim.dll /s
> regsvr32 Daxctle.ocx /s
> regsvr32 lmrt.dll /s
> regsvr32 datime.dll /s
> regsvr32 dxtrans.dll /s
> regsvr32 dxtmsft.dll /s
> regsvr32 WEBPOST.DLL /s
> regsvr32 WPWIZDLL.DLL /s
> regsvr32 POSTWPP.DLL /s
> regsvr32 CRSWPP.DLL /s
> regsvr32 FTPWPP.DLL /s
> regsvr32 FPWPP.DLL /s
> regsvr32 WUAPI.DLL /s
> regsvr32 WUAUENG.DLL /s
> regsvr32 ATL.DLL /s
> regsvr32 WUCLTUI.DLL /s
> regsvr32 WUPS.DLL /s
> regsvr32 WUWEB.DLL /s
> regsvr32 wshom.ocx /s
> regsvr32 wshext.dll /s
> regsvr32 vbscript.dll /s
> regsvr32 scrrun.dll mstinit.exe /setup /s
> regsvr32 msnsspc.dll /SspcCreateSspiReg /s
> regsvr32 msapsspc.dll /SspcCreateSspiReg /s
> regsvr32 wups.dll /s
> regsvr32 wuaueng.dll /s
> regsvr32 wucltui.dll /s
> regsvr32 wuweb.dll /s
> regsvr32 msxml.dll /s
> regsvr32 msxml2.dll /s
> regsvr32 msxml3.dll /s
> regsvr32 urlmon.dll /s
> regsvr32 initpki.dll /s
> regsvr32 mssip32.dll /s
> regsvr32 wintrust.dll /s
> regsvr32 dssenh.dll /s
> regsvr32 rsaenh.dll /s
> regsvr32 gpkcsp.dll /s
> regsvr32 sccbase.dll /s
> regsvr32 slbcsp.dll /s
> regsvr32 cryptdlg.dll /s
> regsvr32 jscript.dll /s
> exit"
>
> remove the quotes, and paste into a notepad document.
> Save as update.bat
>
> "Lost in the registry space" wrote:
>
>> "Next, type qmgr.dll in the Start Search field .
>> Right click the file that's found and click the Security tab.
>> Does TrustedInstaller have Full control, Modify, Read&execute, Read, and
>> Write Perms ?
>> Does System and the User Names have Read&execute and Read Perms ?"
>> No. Add to that it wouldn't allow me to take ownership of that file
>> either. So, I finally called the Windows Update help line and spent a
>> little over two hours on the phone with them.
>> They did the remote assistance thing and replace every file we've done so
>> far and they re-registered every .dll in windows it seems like.
>> after two hours of this, they told me that "tier one support is going to
>> call me tomorrow because they want to look at it"
>> The tech copied a bunch of files from it, and said tomorrow they will
>> probably want more.
>> I'm starting to think I should've just blown it away and re-installed.
>> Anyone want to look at the logs they created?
>>
>>
>> "PA Bear [MS MVP]" wrote:
>>
>>> What Mow said.
>>>
>>> Lost in the registry space wrote:
>>>> I have a copy of Windows Vista Ultimate x64 sp2 running here, it's been
>>>> running pretty much flawlessly since I installed it in feb of 2007.
>>>> Anyway, I compared the two copies of QMGR.dll on the two machines, and
>>>> the vista ultimate's version was newer by a year, 1.8.2008 vs 4.10.2009
>>>> both appear to be the same size, but they arn't. windows says the older
>>>> one
>>>> is bigger.
>>>> Being that both OS's are Vista x64 shouldn't the two files be the same?
>>>>
>>>>
>>>> "PA Bear [MS MVP]" wrote:
>>>>
>>>>>> In answer to the question about Kaspersky, I uninstalled it before
>>>>>> installing Microsoft Security Essentials.
>>>>>
>>>>> [Somebody asked a question about Kaspersky?]
>>>>>
>>>>> Had your Kaspersky subscription (or free trial) expired before you
>>>>> installed MSE?
>>>>>
>>>>>
>>>>> Lost in the registry space wrote:
>>>>>> Thanks to all the respondents, I've tried everything suggested thus
>>>>>> far. BiTs was running, so was the Windows Modules Installer.
>>>>>> I tried the clean boot as well, that was something I hadn't
>>>>>> previously
>>>>>> done.
>>>>>> I had already tried the Microsoft Fixit, but this time I tried the
>>>>>> aggressive mode, and it didn't help.
>>>>>> In answer to the question about Kaspersky, I uninstalled it before
>>>>>> installing Microsoft Security Essentials.
>>>>>> I have also tried renaming the Windows Update download folder.
>>>>>> The only thing that has given me an issue so far is the QMGR error.
>>>>>>
>>>>>> "The module "QMGR.DLL" was loaded but
>>>>>> the entry-point Dllregisterserver was not found. Make sure that
>>>>>> "QMGR.DLL"
>>>>>> is a valid DLL or OCX file and try again
>>>>>>
>>>>>>
>>>>>> "MowGreen" wrote:
>>>>>>
>>>>>>> CORRECTION: the Fixit is MicrosoftFixit50202.msi
>>>>>>> not 50502. Sorry about that.
>>>>>>>
>>>>>>> MowGreen
>>>>>>> ================
>>>>>>> *-343-* FDNY
>>>>>>> Never Forgotten
>>>>>>> ================
>>>>>>>
>>>>>>> banthecheck.com
>>>>>>> "Security updates should *never* have *non-security content*
>>>>>>> prechecked
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> .
>>>>>
>>>>> .
>>>
>>> .

From: MowGreen on
Lost in the registry space wrote:
> "Next, type qmgr.dll in the Start Search field .
> Right click the file that's found and click the Security tab.
> Does TrustedInstaller have Full control, Modify, Read&execute, Read, and
> Write Perms ?
> Does System and the User Names have Read&execute and Read Perms ?"
> No. Add to that it wouldn't allow me to take ownership of that file either.
> So, I finally called the Windows Update help line and spent a little over
> two hours on the phone with them.
> They did the remote assistance thing and replace every file we've done so
> far and they re-registered every .dll in windows it seems like.
> after two hours of this, they told me that "tier one support is going to
> call me tomorrow because they want to look at it"
> The tech copied a bunch of files from it, and said tomorrow they will
> probably want more.
> I'm starting to think I should've just blown it away and re-installed.
> Anyone want to look at the logs they created?


And I'm starting to think that Kaspersky changed the Default Perms by
use of alternate data streams and, at the very least, the Perms can't be
edited for qmgr.dll

http://www.thinkdigit.com/General/Hidden-Threat-NTFS-Alternate-Data-Streams-ADS_3328.html

I'll look at any logs you can post, 'Lost in the registry space '.
It may help someone else who encounters this issue.
Thanks for sticking with this issue and *not* reinstalling yet !


MowGreen
================
*-343-* FDNY
Never Forgotten
================

banthecheck.com
"Security updates should *never* have *non-security content* prechecked