Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Time problem & Uninstall problem

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Time problem & Uninstall problem

Unread postby askey127 » March 5th, 2012, 8:10 am

Deleted post - made in wrong thread.
askey
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 13906
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA
Advertisement
Register to Remove

Re: Time problem & Uninstall problem

Unread postby maxi » March 5th, 2012, 11:05 am

Hi whisperer,

I can only advise you to uninstall ZoneAlarm. If you don't you will never get rid of all the conduit junk. It will just keep regenerating the files that have been deleted. I'm going to ask you to install Microsoft Security Essentials instead of it. The Windows 7 Firewall is much better than that of xp, so you don't really need a third party Firewall. If you agree please follow the steps below :)

Step 1
Microsoft Security Essentials Download 64bit:
http://mse.dlservice.microsoft.com/download/A/3/8/A38FFBF2-1122-48B4-AF60-E44F6DC28BD8/enus/amd64/mseinstall.exe
click on the link to download the file but do NOT run the program yet.

Step 2
Uninstall ZoneAlarm

Step 3
Install Microsoft Security Essentials by right clicking on the file you downloaded and select "run as administrator" and follow the prompts.

Step 4
REBOOT

Step 5
SystemLook
Run The Systemlook script again and post back the logfile created.

Code: Select all
:filefind
*conduit*

:regfind
conduit

Press the Look button to start the scan.
When finished, a Notepad window will open with the results of the scan.
A file will be created (on your Desktop) with the results of the scan, named "SystemLook.txt"
Please post the contents of the SystemLook.txt file in your next reply.

In your next reply please include:
Any problems you had with my instructions.
The log from Systemlook.

Regards maxi :)
User avatar
maxi
Retired Graduate
 
Posts: 1262
Joined: September 25th, 2009, 10:17 am
Location: Cork, Ireland.

Re: Time problem & Uninstall problem

Unread postby whisperer » March 5th, 2012, 1:58 pm

Hi Maxi,

Step 1 - completed

Step 2 - completed as far as I can tell BUT, when I built my computer I installed Microsoft Vista Ultimate; when I installed Windows 7 I made it a dual boot scenario so Vista thinks it also has a copy of ZA installed in its bit of the registry and although I went across to Vista I cannot uninstall it from the installed programmes, then again Program control in Vista has always been a bit dubious - it may or may not have gone as it was put into the same directory. Back to Win 7.

Step 3 - unable to complete, I have restarted the Windows Firewall and tried to install MSSE 3 times, once in safe mode (impossible) which would not even start of course and twice in normal mode. I then went to the Microsoft site to downlad another copy and tried twice more each time 'run as administrator' and each time ending up with an error code very shortly after starting with a code of 0x800B0003, I looked this up with MS and it would appear that it could be associated with a Windows Update error...

And there I rest
GT :(
User avatar
whisperer
Retired Graduate
 
Posts: 615
Joined: May 28th, 2005, 6:00 am
Location: Cornwall

Re: Time problem & Uninstall problem

Unread postby maxi » March 6th, 2012, 10:07 am

Hi whisperer, We will try to use Revo uninstaller to remove ZoneAlarm fully from your system. Try to install the program on both Vista and Windows 7 and select ZoneAlarm to be removed. If you can't install it on both you can Download the portable version on both. The link for this one is under my instructions.
Step 1
Revo Uninstaller
Uninstall programs and remove remnants left from previous uninstalls.
Tutorial with screen shots available here, if needed.

If you cant find ZoneAlarm this way you should reinstall ZA and then try to uninstall it again using revo.


Please download Revo Uninstaller Pro and save it to your desktop.
(This version is a fully functional, 30 day free trial)

  1. Double click on "RevoUninProSetup.exe" to install. Follow/allow default installation.
    Vista-W7 Users: You must right-click on "RevoUninProSetup.exe", and select "Run As Administrator" to install. If UAC prompts, allow it.
  2. Double click Revo Uninstaller from the Start Menu programs list, to run it.
  3. From the list of programs click on
    ZoneAlarm
  4. Chose "Uninstall". When prompted click Yes.
  5. Make sure the advanced option is checked... then click Next.
  6. The program will run, when prompted... click Yes... then Next.
  7. Once the program has searched for leftovers click Next.
  8. Check ONLY the bolded items on the list then... click Next... then Yes.
  9. When done click Finish.
    The problem program entries should now be gone.

Link to portable version:
http://www.revouninstaller.com/download/revouninstaller.zip

Reboot

Step 2
Try to install Microsoft Security Essentials again.

Step 3
Run Systemlook again but this time enter the script below.
Code: Select all
:filefind
*conduit*
*Zonealarm*

:regfind
conduit
Zonealarm


Even if you weren't sucessful with MSE, do this step anyway.

Regards maxi :)
User avatar
maxi
Retired Graduate
 
Posts: 1262
Joined: September 25th, 2009, 10:17 am
Location: Cork, Ireland.

Re: Time problem & Uninstall problem

Unread postby whisperer » March 6th, 2012, 6:20 pm

Hi Maxi,


Revo step carried out on Win7, rebooted to Vista no ZA detected by Revo.

On reboot the Windows Firewall was started and I received a reminder that there was no AV installed. I was offered a start on Defender which I accepted but it would not start.

Tried to install MSE but came back with the same error code.

SystemLook log below:
SystemLook 30.07.11 by jpshortstuff
Log created at 22:09 on 06/03/2012 by Gordon
Administrator - Elevation successful

========== filefind ==========

Searching for "*conduit*"
C:\Users\Gordon\AppData\Local\Microsoft\Internet Explorer\DOMStore\7B9VK9J3\cap1dev.conduit-apps[1].xml --a---- 13 bytes [22:17 22/01/2012] [22:17 22/01/2012] C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
C:\Users\Gordon\AppData\Local\Microsoft\Internet Explorer\DOMStore\QRSAAZ7N\storage.conduit[1].xml --a---- 13 bytes [22:17 22/01/2012] [22:17 22/01/2012] C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
C:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CRUVWI20\article-page-main_ehow_images_a04_ro_ou_remove-conduit-toolbar-800x800[1].jpg --a---- 10893 bytes [19:53 05/03/2012] [19:53 05/03/2012] 9011F2E7A53818288ADC5D4B9FCD9946
C:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G2EOWGA8\how_5104414_remove-conduit-toolbar[1].htm --a---- 57506 bytes [19:53 05/03/2012] [19:53 05/03/2012] 9CCD57173B1ECD37297125C43E6E46C6
C:\Users\Gordon\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\26G45QWP\storage.conduit[1].xml --a---- 13 bytes [18:38 18/01/2012] [18:38 18/01/2012] C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
C:\Users\Gordon\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\VLPH75WB\cap1dev.conduit-apps[1].xml --a---- 13 bytes [18:38 18/01/2012] [18:38 18/01/2012] C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
C:\Users\Gordon\Favorites\Links\prxtbzon1.dll - What is the prxtbzon1.dll from Conduit Ltd. (id6085401).url --a---- 514 bytes [09:53 03/03/2012] [09:53 03/03/2012] 0B582435980CD975A1D167A54FD15A2A
C:\Windows\SysWOW64\ConduitEngine.tmp --a---- 0 bytes [13:21 23/06/2011] [13:00 07/08/2011] D41D8CD98F00B204E9800998ECF8427E
C:\_OTL\MovedFiles\03032012_090926\C_Users\Gordon\AppData\Roaming\Mozilla\Firefox\Profiles\v40ckh6z.default\extensions\{a94e8dc9-07aa-45a7-8af2-a0375473a5cd}\searchplugin\conduit.xml --a---- 955 bytes [16:25 15/01/2012] [12:45 15/01/2012] 3CF061E8BA700D163F4E267DEFB4AA4D

Searching for "*Zonealarm*"
C:\Users\Gordon\AppData\Local\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}\ZoneAlarm.log --a---- 258638 bytes [17:33 06/03/2012] [17:33 06/03/2012] 1B4402B0E1EA55561EDBC2E0B648F84B
C:\Users\Gordon\AppData\Roaming\Microsoft\Windows\Recent\ZoneAlarmKey.doc.lnk --a---- 564 bytes [12:03 28/01/2012] [12:10 28/01/2012] 69B9B474866DB390729702F571AB1FDD
C:\_OTL\MovedFiles\03032012_090926\C_Users\Gordon\AppData\Roaming\Mozilla\Firefox\Profiles\v40ckh6z.default\extensions\{a94e8dc9-07aa-45a7-8af2-a0375473a5cd}\chrome\zonealarm_extreme_security.jar --a---- 714441 bytes [16:25 15/01/2012] [12:45 15/01/2012] FD6E8A439221E6FEFABDD56F7DFEBFD2

========== regfind ==========

Searching for "conduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}]
@="Microsoft.Workflow.DebugEngine.ControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}\InprocServer32]
"Class"="Microsoft.Workflow.DebugEngine.ControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}\ProgId]
@="Microsoft.Workflow.DebugEngine.ControllerConduit.10.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1F7382B9-6B5D-4373-8880-387238072DAD}]
@="IControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2392D0C5-72EA-4215-8C66-280E1CB4344A}]
@="IControllerConduitCallback"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Microsoft.Workflow.DebugEngine.ControllerConduit.10.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Microsoft.Workflow.DebugEngine.ControllerConduit.10.0]
@="Microsoft.Workflow.DebugEngine.ControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}]
@="Microsoft.Workflow.DebugEngine.ControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}\InprocServer32]
"Class"="Microsoft.Workflow.DebugEngine.ControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}\InprocServer32\10.0.0.0]
"Class"="Microsoft.Workflow.DebugEngine.ControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}\ProgId]
@="Microsoft.Workflow.DebugEngine.ControllerConduit.10.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1F7382B9-6B5D-4373-8880-387238072DAD}]
@="IControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2392D0C5-72EA-4215-8C66-280E1CB4344A}]
@="IControllerConduitCallback"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup\Windows Workflow Foundation\Debugger]
"ControllerConduitTypeName"="Microsoft.Workflow.DebugEngine.ControllerConduit, Microsoft.Workflow.DebugController, Version=10.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v3.0\Setup\Windows Workflow Foundation\Debugger]
"ControllerConduitTypeName"="Microsoft.Workflow.DebugEngine.ControllerConduit, Microsoft.Workflow.DebugController, Version=10.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}]
@="Microsoft.Workflow.DebugEngine.ControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}\InprocServer32]
"Class"="Microsoft.Workflow.DebugEngine.ControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}\InprocServer32\10.0.0.0]
"Class"="Microsoft.Workflow.DebugEngine.ControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{C511163B-37F1-45b2-826D-336F894B0143}\ProgId]
@="Microsoft.Workflow.DebugEngine.ControllerConduit.10.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{1F7382B9-6B5D-4373-8880-387238072DAD}]
@="IControllerConduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{2392D0C5-72EA-4215-8C66-280E1CB4344A}]
@="IControllerConduitCallback"

Searching for "Zonealarm"
No data found.

-= EOF =-

Good luck
GT
User avatar
whisperer
Retired Graduate
 
Posts: 615
Joined: May 28th, 2005, 6:00 am
Location: Cornwall

Re: Time problem & Uninstall problem

Unread postby maxi » March 7th, 2012, 3:27 pm

Hi whisperer, That looks a bit better :)

Step 1
Run OTL Script

We need to run an OTL Fix

  • Double-click OTL.exe to start the program.
  • Copy and Paste the following code into the Image textbox. Do not include the word Code
    Code: Select all
    
    :files
    C:\Users\Gordon\AppData\Local\Microsoft\Internet Explorer\DOMStore\7B9VK9J3\cap1dev.conduit-apps[1].xml 
    C:\Users\Gordon\AppData\Local\Microsoft\Internet Explorer\DOMStore\QRSAAZ7N\storage.conduit[1].xml 
    C:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CRUVWI20\article-page-main_ehow_images_a04_ro_ou_remove-conduit-toolbar-800x800[1].jpg
    C:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G2EOWGA8\how_5104414_remove-conduit-toolbar[1].htm
    C:\Users\Gordon\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\26G45QWP\storage.conduit[1].xml 
    C:\Users\Gordon\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\VLPH75WB\cap1dev.conduit-apps[1].xml
    C:\Users\Gordon\Favorites\Links\prxtbzon1.dll 
    C:\Windows\SysWOW64\ConduitEngine.tmp 
    C:\Users\Gordon\AppData\Local\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}\ZoneAlarm.log
    C:\Users\Gordon\AppData\Roaming\Microsoft\Windows\Recent\ZoneAlarmKey.doc.lnk 
    C:\Program Files (x86)\Uniblue\RegistryBooster\Launcher.exe 
    D:\Program Files\Uniblue\RegistryBooster\Launcher.exe 
    D:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe 
    D:\Program Files\Uniblue\RegistryBooster\rbnotifier.exe 
    D:\Program Files\Uniblue\RegistryBooster\rb_move_serial.exe 
    D:\Program Files\Uniblue\RegistryBooster\rb_ubm.exe 
    D:\Program Files\Uniblue\RegistryBooster\registrybooster.exe 
    D:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E5XSFCLU\index-functions[1].js 
    D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\Launcher.exe 
    D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\rbmonitor.exe 
    D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\rbnotifier.exe 
    D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\rb_move_serial.exe 
    D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\rb_ubm.exe 
    D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\registrybooster.exe 
    D:\Users\Gordon\AppData\Roaming\Uniblue\RegistryBooster\_temp\ub.exe 
    N:\GORDON-7\Backup Set 2010-12-18 085916\Backup Files 2010-12-18 085916\Backup files 1.zip
    N:\GORDON-7\Backup Set 2011-06-05 082854\Backup Files 2011-06-05 082854\Backup files 2.zip 
    N:\GORDON-7\Backup Set 2011-06-05 082854\Backup Files 2011-07-17 090445\Backup files 2.zip 
    N:\GORDON-7\Backup Set 2011-06-05 082854\Backup Files 2011-07-31 093941\Backup files 1.zip 
    N:\GORDON-7\Backup Set 2011-06-05 082854\Backup Files 2011-12-11 074559\Backup files 1.zip 
    
    :commands
    
    [emptytemp]
    [createrestorepoint] 
    [REBOOT]
    
  • Then click the Run Fix button at the top.
  • Click Image.
  • OTL may ask to reboot the machine. Please do so if asked.
  • The report should appear in Notepad after the reboot.Copy and Paste that report in your next reply.

Step 2
Try to install MSE again. If that fails I recommend you download and install avast! from the link below. (I use this myself and find it very good)
http://majorgeeks.com/downloadget.php?id=1968&file=1&evp=7a7be4dedb83870bca5491cd7c055287

In your next reply please include:
The OTL log.
If you were sucessful with an AV.
How your machine is running now.

Regards maxi :)
User avatar
maxi
Retired Graduate
 
Posts: 1262
Joined: September 25th, 2009, 10:17 am
Location: Cork, Ireland.

Re: Time problem & Uninstall problem

Unread postby whisperer » March 7th, 2012, 4:55 pm

Hi Maxi,

Please find the OTL fix log, do not worry about not finding some of the files as I had removed one of the backups (at least) on the N drive, and due to your earlier comments re-registry boosters had pre-empted some of the D drive (Vista) by cleaning that drive up whilst trying to find the Zonealarm.

All processes killed
========== FILES ==========
C:\Users\Gordon\AppData\Local\Microsoft\Internet Explorer\DOMStore\7B9VK9J3\cap1dev.conduit-apps[1].xml moved successfully.
C:\Users\Gordon\AppData\Local\Microsoft\Internet Explorer\DOMStore\QRSAAZ7N\storage.conduit[1].xml moved successfully.
C:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CRUVWI20\article-page-main_ehow_images_a04_ro_ou_remove-conduit-toolbar-800x800[1].jpg moved successfully.
C:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G2EOWGA8\how_5104414_remove-conduit-toolbar[1].htm moved successfully.
C:\Users\Gordon\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\26G45QWP\storage.conduit[1].xml moved successfully.
C:\Users\Gordon\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\VLPH75WB\cap1dev.conduit-apps[1].xml moved successfully.
File\Folder C:\Users\Gordon\Favorites\Links\prxtbzon1.dll not found.
C:\Windows\SysWOW64\ConduitEngine.tmp moved successfully.
C:\Users\Gordon\AppData\Local\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}\ZoneAlarm.log moved successfully.
C:\Users\Gordon\AppData\Roaming\Microsoft\Windows\Recent\ZoneAlarmKey.doc.lnk moved successfully.
C:\Program Files (x86)\Uniblue\RegistryBooster\Launcher.exe moved successfully.
File\Folder D:\Program Files\Uniblue\RegistryBooster\Launcher.exe not found.
File\Folder D:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe not found.
File\Folder D:\Program Files\Uniblue\RegistryBooster\rbnotifier.exe not found.
File\Folder D:\Program Files\Uniblue\RegistryBooster\rb_move_serial.exe not found.
File\Folder D:\Program Files\Uniblue\RegistryBooster\rb_ubm.exe not found.
File\Folder D:\Program Files\Uniblue\RegistryBooster\registrybooster.exe not found.
D:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E5XSFCLU\index-functions[1].js moved successfully.
D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\Launcher.exe moved successfully.
D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\rbmonitor.exe moved successfully.
D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\rbnotifier.exe moved successfully.
D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\rb_move_serial.exe moved successfully.
D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\rb_ubm.exe moved successfully.
D:\Users\Gordon\AppData\Local\Temp\miaAD10.tmp\data\OFFLINE\D038292B\DBD9B16A\registrybooster.exe moved successfully.
D:\Users\Gordon\AppData\Roaming\Uniblue\RegistryBooster\_temp\ub.exe moved successfully.
File\Folder N:\GORDON-7\Backup Set 2010-12-18 085916\Backup Files 2010-12-18 085916\Backup files 1.zip not found.
N:\GORDON-7\Backup Set 2011-06-05 082854\Backup Files 2011-06-05 082854\Backup files 2.zip moved successfully.
N:\GORDON-7\Backup Set 2011-06-05 082854\Backup Files 2011-07-17 090445\Backup files 2.zip moved successfully.
N:\GORDON-7\Backup Set 2011-06-05 082854\Backup Files 2011-07-31 093941\Backup files 1.zip moved successfully.
N:\GORDON-7\Backup Set 2011-06-05 082854\Backup Files 2011-12-11 074559\Backup files 1.zip moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Classic .NET AppPool
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Gordon
->Temp folder emptied: 197103447 bytes
->Temporary Internet Files folder emptied: 362928380 bytes
->Java cache emptied: 29416712 bytes
->FireFox cache emptied: 47934035 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 8558 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 8259584 bytes
%systemroot%\System32 (64bit) .tmp files removed: 15268864 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 241621 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67630 bytes
RecycleBin emptied: 6986456 bytes

Total Files Cleaned = 637.00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.33.2 log created on 03072012_194008

Files\Folders moved on Reboot...
File\Folder C:\Users\Gordon\AppData\Local\Temp\OICE_5DC6DE1F-2DAF-4184-B007-18647DB9DE44.0\D93B2C27. not found!
C:\Users\Gordon\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Gordon\AppData\Local\Temp\~DF7956FF12FA94221F.TMP not found!
File\Folder C:\Users\Gordon\AppData\Local\Temp\~DFB86598BBC9C925C5.TMP not found!
File\Folder C:\Users\Gordon\AppData\Local\Temp\~DFE63725942DAD19EC.TMP not found!
File\Folder C:\Users\Gordon\AppData\Local\Temp\~DFF2F02CB03313A79C.TMP not found!
C:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\Gordon\AppData\Local\Trusteer\Rapport\user\logs\koan.372.log moved successfully.
C:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\L08R1ZOJ\viewtopic[2].htm moved successfully.
C:\Users\Gordon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.

Registry entries deleted on Reboot...
-------------------------------------------------------------------------------
The reboot was incredibly long in duration but I suspect that was the behind the scenes removals.

Tried an install of MSE with identical results, I am beginning now to think that I have got a corrupted registry that is preventing it, I might have to do a disk reformat and reinstall to clear it eventually.
Another peculiar symptom has surfaced in that when I clicked on the link to 'Select All' in the code box, it reacted by taking me to the top of the page, similarly when I clicked on the exclamation mark smilie, it also took me to the top of the page!

Avast was downloaded and according to it, installed and carried out a scan successfully BUT it will not start and had the following reason 'its side-by-side configuration is incorrect'. I have no idea how to use sxstrace.exe so I looked in the event log and found the following Error entry against the Avast attempts

Activation context generation failed for "C:\Program Files\AVAST Software\Avast\AvastUI.exe". Dependent Assembly Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found. Please use sxstrace.exe for detailed diagnosis.


In addition there were more than 5000 entries of side-by-side classification (slapped wrist, should have spotted it earlier), I stopped counting at 5000! The first of these sbs errors occured on 6th December last and concerned GROOVEEX.dll, I would guess that this entry makes up more than 90% of the errors with the following information:

Activation context generation failed for "C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_a9427d6be424cb66.manifest" on line 0. Invalid Xml syntax.
OR
Activation context generation failed for "E:\MICROS~1\Office14\GROOVEEX.DLL". Dependent Assembly Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.08" could not be found. Please use sxstrace.exe for detailed diagnosis.


Out of the almost 300 errors today it was certainly that. I have now cleared the log and will try one more avast start.
User avatar
whisperer
Retired Graduate
 
Posts: 615
Joined: May 28th, 2005, 6:00 am
Location: Cornwall

Re: Time problem & Uninstall problem

Unread postby maxi » March 7th, 2012, 5:59 pm

Hi whisperer, were getting there I hope :)

You need to download the The Microsoft Visual C++ 2008 SP1 Redistributable Package (x86) from the link below and hopefully that will sort your side by side issues.
http://www.microsoft.com/download/en/details.aspx?id=5582

When you have it downloaded and installed, reboot and see if Avast works then. If not, uninstall it and download a new copy and try then.

Regards maxi :)
User avatar
maxi
Retired Graduate
 
Posts: 1262
Joined: September 25th, 2009, 10:17 am
Location: Cork, Ireland.

Re: Time problem & Uninstall problem

Unread postby whisperer » March 8th, 2012, 5:54 am

It appeared to download and install OK but Avast did not run. I used Revo to uninstall Avast downloaded a new copy and tried a fresh install. Again the install went well and Avast carried out its quick scan before finishing.
I then carried out another reboot and attempted to start Avast but the (by now) usual side by side error occured 6 times.
Activation context generation failed for "C:\Program Files\AVAST Software\Avast\asOutExt.dll". Dependent Assembly Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found. Please use sxstrace.exe for detailed diagnosis.

These were preceded by a single GROOVEEX.DLL error as follows
Activation context generation failed for "C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_a9427d6be424cb66.manifest" on line 0. Invalid Xml syntax.

It means nothing specific to me but there is a common element between the two errors in that the public key referred to in the Avast installation also appears in the GROOVEEX error.
User avatar
whisperer
Retired Graduate
 
Posts: 615
Joined: May 28th, 2005, 6:00 am
Location: Cornwall

Re: Time problem & Uninstall problem

Unread postby maxi » March 8th, 2012, 4:22 pm

Hi whisperer,

Try this one:
http://www.microsoft.com/download/en/details.aspx?id=13523

When you have this installed reboot your computer.

After the reboot go to Windows update and install any updates that are suggested.

After that is done try again with avast.

Regards maxi :)
User avatar
maxi
Retired Graduate
 
Posts: 1262
Joined: September 25th, 2009, 10:17 am
Location: Cork, Ireland.

Re: Time problem & Uninstall problem

Unread postby whisperer » March 8th, 2012, 6:47 pm

Hi Maxi,
Downloaded the SP1 and installed OK, rebooted and checked Windows Update.
Two updates first for 2010 sp1 which went in OK
Second for Defender which I cannot start consequently the update failed.
Checked the event log and both errors were identical to those quoted above :(
GT :(
User avatar
whisperer
Retired Graduate
 
Posts: 615
Joined: May 28th, 2005, 6:00 am
Location: Cornwall

Re: Time problem & Uninstall problem

Unread postby maxi » March 9th, 2012, 7:36 am

Hi whisperer,

Please have a look at this link and check to see if you have all four installed. If you are missing any of them, Download and install them and then try the previous steps again.
http://answers.microsoft.com/en-us/windows/forum/windows_7-pictures/error-the-application-has-failed-to-start-because/df019c0d-746e-42d0-ad68-465e18e3f3ef

Regards maxi :)
User avatar
maxi
Retired Graduate
 
Posts: 1262
Joined: September 25th, 2009, 10:17 am
Location: Cork, Ireland.

Re: Time problem & Uninstall problem

Unread postby whisperer » March 9th, 2012, 1:20 pm

This one failed with the following error:
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 -- Error 1935
I could not find any download for the x86 version of 2010, and the x64 version that I have installed is more up-to-date .

BUT we must be getting somewhere because I have been unable to do anything with Vista updating since August last year, but when I booted to Vista I was able to catch up a lot, there is some commonality between this and Win 7 because I had similar problems with Net4 updates all failing.

I wondered whether it might be worth posting a DDS log from Vista to see if there are any clues there, I ask the question because my knowledge is limited of the ins-and-outs of dual booting other than they do have a seperate register as common programmes must be reinstalled to allow the system to recognise their existence :D

regards GT :)
User avatar
whisperer
Retired Graduate
 
Posts: 615
Joined: May 28th, 2005, 6:00 am
Location: Cornwall

Re: Time problem & Uninstall problem

Unread postby whisperer » March 10th, 2012, 7:36 am

I do not have .Net 4 on Vista and have now managed to get Avast installed in Vista and I can also update the time from within Vista. I will not know whether the situation has changed in Win 7 as I am currently doing a full system scan with Avast in Vista.

Could Trusteer's Rapport be interfering with the installation of MSE in Vista and Win7? I now have MSE running on my laptop and have removed Avast - I had no Rapport installed on the laptop as I do not use it for banking.

GT :)
User avatar
whisperer
Retired Graduate
 
Posts: 615
Joined: May 28th, 2005, 6:00 am
Location: Cornwall

Re: Time problem & Uninstall problem

Unread postby maxi » March 10th, 2012, 9:23 am

Hi whisperer,

Could Trusteer's Rapport be interfering with the installation of MSE in Vista and Win7?


It has been known to interfere with the whole system especially AV's. You could try removing it and see where that leaves you. Keep me informed on whatever you do and how you get on after the avast scan is finished.

Regards maxi :)
User avatar
maxi
Retired Graduate
 
Posts: 1262
Joined: September 25th, 2009, 10:17 am
Location: Cork, Ireland.
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 20 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware