Adaware has gone and I can't reinstall it.

Adaware has gone missing from my computer. Also I can't access System Restore, and I couldn't get Windows Live Messenger to start up.

I seem to be able to download some programs but with Adaware and another couple of things I've tried I get a message
Error 2894 Internal Error 2894.126 and
"Installation was unable to be completed
Fatal Error. "

I have broadband but also am finding that I am needing to reconnect to the net over and over.

I would be grateful for any help with this.

 

Hello and welcome to WindowsBBS Forums.

Please download HijackThis! SetUp from here. Save the file to your desktop.

Double-click the HijackThis! SetUp icon to begin the installation. Follow the prompts for the default install location of:'C:\Program Files\HijackThis'. Tick the 'Create a desktop' button when the option appears. Select next, then allow HijackThis! to start.

Then press the [Scan] button. You will notice the [Scan] button will turn into a [Save Log] button. Click the [Save Log] button and notepad will open up with the contents of the scan. Right-click in the saved log, and select 'copy'. Then proceed to your original thread, unless otherwise instructed and click the '[Reply]' button and paste the saved contents to be reviewed. Do not make any modifications to the log or perform any 'fixes' until told to do so.


Someone will be along to look at your log soon as possible, we appreciate your patience. Remember, we are ALL VOLUNTEERS, those of us who help. And we do the best we can to answer posts as soon as we can. Logs are generally looked at in the order in which they are posted.

 

Thank you very much for your reply.

I think it's quite likely that whatever has got to me this time can't be fixed but I'd like to try before I abandon ship.

Here is the log.

Logfile of HijackThis v1.99.1
Scan saved at 11:06:18 AM, on 14/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Java\jre1.5.0_10\bin\jucheck.exe
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (file missing)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe "
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe "
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe "
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: MediaKey.lnk = C:\Program Files\MediaKey\Versato.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Naomi\Start Menu\Programs\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O20 - AppInit_DLLs: MsgPlusLoader.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

 

I only found 2 references to these errors, both relate to Acrobat.

Nothing in the log to suggest malware. When was it that Ad-Aware disappeared? What happened that prompted you to discover it was gone?

Also, was sys restore made unavailable at the same time?

I'd like to see an uninstall list from HJT.

Start HijackThis

• 
  Open HJT, click the [None of the above, just start the program] button.
• Click on the [Config] button
• Click on the[ Misc Tools] button
• Click on the [Open Uninstall Manager] button
• Then click on the [Save list] button and specify where you would like to save this file.
• When you press [Save list] button a notepad will open with the contents of that file.
• Copy and paste the contents of that notepad back into this thread for me to view.

 

I got a message that AVG was switched off. I have had that message before and never been able to switch it back on, so I redownloaded (a few times) and tried to start all the possible scans I had here. Now that I'm thinking back more carefully, I think I couldn't get the updates to install properly and probably removed it myself thinking that if it was infected I should try to get a whole new copy and reinstall - but I can't make that happen. So this is a bit different to what I said in my first post. I'm sorry about that, I hope it's not too confusing.

I don't know when System Restore stopped working. It was ok a month or two back, but I don't normally look at it.

Windows Live Messenger definitely developed problems at the same time. I was using it when I got the message about AVG and it was fine, but after I fixed AVG, Live Messenger wouldn't reopen. The older version of Messenger I had on seems to open but doesn't actually work either. I took Live Messenger off, planning to download again, but as with Adaware it won't install. I get the same fatal error message.

I am not sure about AVG being switched off. I don't recall doing anything that would make that happen, but afterwards there was a time when a message came up about an error and asked me if I wanted to debug or (?) terminate?/ cancel?. I get them fairly often, usually in relation to Windows Explorer and I am not careful about them. I wondered then if I'd had a message like that previously and it was about AVG or another program and I accidentally clicked a button that made the program switch off?

Here is the log.



Adobe Flash Player 9 ActiveX
Adobe Reader 7.0.8
Age of Empires III
AVG 7.5
AVG Anti-Spyware 7.5
EPSON CardMonitor
EPSON Copy Utility 3
EPSON PhotoQuicker3.5
EPSON PhotoStarter3.1
EPSON PRINT Image Framer Tool2.1
EPSON Printer Software
EPSON Scan
EPSON Smart Panel
EPSON Web-To-Page
ESPRX430 Reference Guide
ESPRX430 Software Guide
GOM Player
Google Toolbar for Internet Explorer
Hamachi 1.0.0.61
Hijackthis 1.99.1
HijackThis 1.99.1
Hotfix for Windows XP (KB929120)
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 3
LiveUpdate 3.0 (Symantec Corporation)
LiveUpdate BVRP Software
Logitech Desktop Messenger
Logitech MouseWare 9.79.1
Macromedia Shockwave Player
MediaKey
Messenger Plus! 3 & Sponsor
Microsoft Age of Empires
Microsoft Office XP Professional with FrontPage
Microsoft Windows Journal Viewer
mobile PhoneTools
MSXML 4.0 SP2 (KB927978)
Musicmatch® Jukebox
Nero Suite
PhotoImpression 5
PIF DESIGNER2.1
Quake III Arena
ScanToWeb
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893066)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Spybot - Search & Destroy 1.4
SpywareBlaster v3.5.1
The Sims
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB929338)
Update for Windows XP (KB931836)
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Service Pack 2
WinPatrol
Yahoo! Toolbar

 

Well, I'm thinking this isn't so much a malware problem as more a system problem.

I also see you have MessengerPlus installed, which is an add on for MessLive. Was this installed at the same time as the new MessLive version? Did that all crash at the same time?

I would uninstall AVG, MessPlus, delete all related folders manually, if they don't auto remove, reboot the system and run System File Checker and ChkDsk

After those have been run, try installing AVG, Messenger Live, leave off MessPlus for now, so we know there isn't any problem with that app and see what happens.

After that, I'll likely move this thread over to general forum.

 

Thanks TeMerc. I'll try that.

 

Here is what you need to do!

Download fresh AVG anti virus and Adaware do not install

Download and install

ATF-Cleaner http://www.atribune.org/content/view/25/2/
when run repeatedly until nothing else found

ccleaner http://www.ccleaner.com/download/builds.aspx
click bottom right twice
then in left panel click issues then below Scan for issues run repeatedly until no more found

http://www.hoverdesk.net/dl/en/RegSeeker.zip

You have only been trying to reinstall these. They need to be un-installed completely the system cleaned then re-installed.

So un-install in Add/Remove both programs and reboot.

Now do a windows search (with advanced options to find Hidden and System files) for Lavasoft*.* and delete all, then the same for Grisoft*.*.

Run Regseeker. In "Find in Registry" type grisoft delete all, then same for lavasoft.

then click clean registry, detete all

Exit regseeker

Run ccleaner as above

Run ATF-Clean as above.

Reboot

reinstall both programs AVG and Adaware.

Bob

 

I have just finished trying to follow TeMerc's advice. I tried to delete everything that seemed to be to do with AVG or Messenger. There were a few things I couldn't delete, a few I thought perhaps I ought not delete because of the warnings that came up, and possibly some things I deleted that I shouldn't have.

I couldn't run System File Checker or ChkDsk because System File Checker wanted a windows disc and I don't have one (though the Windows was installed legally as part of a licence). I just couldn't make ChkDsk work. It wanted me to specify some parameters.

I then tried to reinstall Adaware, AVG and Messenger. I also tried to install Firefox. Only AVG would install. The others just kept doing the same thing as before. It seems to be a problem with Windows Installer because I get the same message each time. Though last time Messenger also gave me another error message number - 1603.

The computer seems a little faster after all my deletions but otherwise is pretty much the same as before. I do have an alert showing "WinPatrol:winpatrol.exe - Corrupt File The file or directory C:|Documents and Settings\Kerry\Cookies\kerry@CA09ENKD.txt is corrupt and unusable. Please run the chkdsk utility ". I have already tried deleting all cookies but it keeps popping up.

I think Te Merc sounds right thinking this is a system problem. It hasn't become worse and nothing weird is happening in Explorer. It seems to be something wrong with Windows Installer. I did think of this before and tried previously tried to download this from the net but I have been scared to delete what was already there , from memory I got desperate and tried one time but the warning about what might not work if I did that was pretty comprehensive! I don't really know which of the downloadable programs called Windows Installer are appropriate to try and get anyway. Also I have been reminded that my C drive has a bizarre label on it when I go to it now. "Clip Art CD (C) ".

I will run disc defragmenter and disc cleanup now. I don't think that will fix this but they might make the whole computer work better. I'm starting to think I might just have to put up with this computer not installing programs until after I get Windows reinstalled from scratch. At least it still lets me use the net!



Thanks for your message too, Bob. I may try that also later on.

 

Why yes it is a system problem.

Why do it later????

If you want it fixed do my post. BUT first!

If AVG is now working then no need to do it again.

Your last post gave more confirmation that your system is out of whack.

Download Dial-a-Fix http://www.softpedia.com/get/System/System-Miscellaneous/Dial-a-fix.shtml

If Dial-a-fix finds restrictions present clear them. Then check "all" check boxes on the screen and click go. When that finishes click the Hammer to go to tools. On this screen ckeck

Flush DNS
Reinstall BITS
Reinstall System Restore
Repair Permissions

DO the Dial-a-fix first before my last post.

Dial-a-fix is very safe, it only looks for windows files that are supposed to be present and unregisters then regegisters them. It will repair System restore and Installer. (Installer is part of your problem).

Make a note of any errors reported by Dial-a-Fix as that is a file that is missing from your Windows system. We will then tell you how to replace them if needed.

Get off the pot and do it!

BOB