stefanomarco
asked on
unable to install any anti virus programs
unable to install any anti virus programs - scanned the drive on another computer and removed all viruses -
removed all spyware
running Windows XP Pro with SP2
get the following error message when trying to install AVG
Local machine: installation failed
Installation:
Error: Action failed for file avgupsvc.exe: starting service....
The service did not respond to the start or control request in a timely fashion. (1053)
what's interesting though - when I go to msconfig services tab and I hide all microsoft services there's nothing there - bit odd?
I've also run the Nortons removal tool as there was a previous version on there which I had a bit of trouble uninstalling
Help please :)
removed all spyware
running Windows XP Pro with SP2
get the following error message when trying to install AVG
Local machine: installation failed
Installation:
Error: Action failed for file avgupsvc.exe: starting service....
The service did not respond to the start or control request in a timely fashion. (1053)
what's interesting though - when I go to msconfig services tab and I hide all microsoft services there's nothing there - bit odd?
I've also run the Nortons removal tool as there was a previous version on there which I had a bit of trouble uninstalling
Help please :)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Also - I installed zone alarms firewall and avg anti spyware after I was unable to install virus protection
ASKER
Avast installed - which is great :) - I wonder why the others wouldn't install?
I'm doing a full scan now - thanks
Is there anything in the log that looks suspect?
I could only see the unknown ones
I'm doing a full scan now - thanks
Is there anything in the log that looks suspect?
I could only see the unknown ones
Remove these two objects with HijackThis.
O20 - AppInit_DLLs: e1.dll alrsbatt.dll
O20 - Winlogon Notify: zlcocard - C:\WINDOWS\system32\zlcoca rd.dll (file missing).
I also am a big fan of Spybot S+D. If you get AVG installed you might try Spybot.
Let me know what the scan comes up with.
O20 - AppInit_DLLs: e1.dll alrsbatt.dll
O20 - Winlogon Notify: zlcocard - C:\WINDOWS\system32\zlcoca
I also am a big fan of Spybot S+D. If you get AVG installed you might try Spybot.
Let me know what the scan comes up with.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
done - thanks - how'd I go? :)
Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\C urrentCont rolSet\Ser vices\pamt eqks
*******************
Script file located at: \??\C:\WINDOWS\system32\fl vbdywm.txt
Script file opened successfully.
Script file read successfully
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
File C:\WINDOWS\system32\e1.dll deleted successfully.
File C:\WINDOWS\system32\alrsba tt.dll not found!
Deletion of file C:\WINDOWS\system32\alrsba tt.dll failed!
Could not process line:
C:\WINDOWS\system32\alrsba tt.dll
Status: 0xc0000034
Registry value HKLM\Software\Microsoft\Wi ndows NT\CurrentVersion\Windows| AppInit_DL Ls replaced with dummy successfully.
Completed script processing.
*******************
Finished! Terminate.
Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\C
*******************
Script file located at: \??\C:\WINDOWS\system32\fl
Script file opened successfully.
Script file read successfully
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
File C:\WINDOWS\system32\e1.dll
File C:\WINDOWS\system32\alrsba
Deletion of file C:\WINDOWS\system32\alrsba
Could not process line:
C:\WINDOWS\system32\alrsba
Status: 0xc0000034
Registry value HKLM\Software\Microsoft\Wi
Completed script processing.
*******************
Finished! Terminate.
ASKER
Brilliant!!!! - it works
Thank you so much :)
Thank you so much :)
Well done!
Just this entry needs fixing (that rinnej asked you to fix)
O20 - Winlogon Notify: zlcocard - C:\WINDOWS\system32\zlcoca rd.dll (file missing).
Thanks!
Just this entry needs fixing (that rinnej asked you to fix)
O20 - Winlogon Notify: zlcocard - C:\WINDOWS\system32\zlcoca
Thanks!
ASKER
Also downloading Avast now ... I hope I can install this one :)
C:\WINDOWS\System32\smss.e
C:\WINDOWS\system32\winlog
C:\WINDOWS\system32\servic
C:\WINDOWS\system32\lsass.
C:\WINDOWS\system32\svchos
C:\WINDOWS\System32\svchos
C:\WINDOWS\system32\ZoneLa
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spools
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchos
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Java\jre1.5.0_09\bin
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.ex
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon
C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\USER\LOCALS~1\
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-7
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-2
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCh
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.ex
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon
O4 - Global Startup: Smart Wizard Wireless Settings.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-0
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-0
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-0
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-0
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9
O16 - DPF: {215B8138-A3CF-44C5-803F-8
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-0
O16 - DPF: {6414512B-B978-451D-A0D8-F
O16 - DPF: {644E432F-49D3-41A1-8DD5-E
O20 - AppInit_DLLs: e1.dll alrsbatt.dll
O20 - Winlogon Notify: zlcocard - C:\WINDOWS\system32\zlcoca
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLa