[Blade81]

Hi,

Let's run ESET online scanner instead.

* Go here to run an online scanner from ESET.

• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• Make sure that the option Remove found threats is UNchecked.
• Click Scan
• Wait for the scan to finish
• Post back the results.

Open notepad and copy/paste the text in the quotebox below into it:

Reglock::
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]

Save this as
CFScript

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine. This tool is not a toy and not for everyday use.



Close all browser windows, disable protection and refering to the picture above, drag CFScript into ComboFix.exe (let ComboFix look for updates).
Then post the resultant log.


Are you able to uninstall old Javas?

[Advertisements]

Hi,
Results as follows :
 ESET_Result.txt   12.09KB   207 downloads

 log.txt   19.14KB   104 downloads

Think Java has been uninstalled.

Many Thanks,
Nessa.

[nessa1422]

Hi,
Results as follows :
 ESET_Result.txt   12.09KB   207 downloads

 log.txt   19.14KB   104 downloads

Think Java has been uninstalled.

Many Thanks,
Nessa.

[Blade81]

Hi again,

Uninstall Live-Player.

Open notepad and copy/paste the text in the quotebox below into it:

Folder::
C:\Program Files\Live-Player
File::
C:\Documents and Settings\shaun\Desktop\beachfree_212.exe
C:\Documents and Settings\shaun\Desktop\santafree.exe
C:\Documents and Settings\shaun\My Documents\santafree.exe
C:\Documents and Settings\Vannesa\Desktop\Live-Player_setup.exe
C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll
C:\Program Files\MSN Messenger\msimg32.dll
C:\Program Files\MSN Messenger\riched20.dll
C:\WINDOWS\system32\iisvbftc.dll
C:\WINDOWS\system32\lmnilgke.dll
C:\WINDOWS\system32\odddbjih.dll
C:\WINDOWS\system32\twhtsueq.dll

Save this as
CFScript

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine. This tool is not a toy and not for everyday use.



Close all browser windows and refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log & fresh dds log.

[nessa1422]

Hi,
Thank you - have uninstalled Live Player.

Logs as follows :

 Combo.txt   85.95KB   123 downloads
 DDS_3.txt   19.86KB   130 downloads

Many Thanks,
Nessa.

[Blade81]

Hi,

It seems you still have old Javas installed there. Did you uninstall all Java entries visible in add/remove programs list (make sure updates related checkbox is checked to make updates appear on the list)?

Click start->run->type services.msc and check following services:
-cryptographic services that it is automatic and started
-remote procedure call (rpc) that it is automatic and started

Let me know if you had to make any changes.

[nessa1422]

Hi,

Have got two RPC - one states 'provides endpoint ...', that one is auto/start
the other 'manages RPC name service database', that one is manual.

Kind regards,
Nessa.

[Blade81]

I meant the first one with service name without "Locator" word. Was cryptographic services service automatic and started?

Did you uninstall those old Javas? Please post a fresh dds log after doing so. Is the Windows installer issue still present?

[nessa1422]

Hi,

Yes, Javas uninstalled.
Cryptographic was auto and started.

New Log :  DDS.txt   20.14KB   141 downloads

Installer window comes up at start up whenever trying to uninstall programmes.

Thanks,
Regards, Nessa.

[Blade81]

Hi,

How did you uninstall Javas? According to the log those are still installed.

Installer window comes up at start up whenever trying to uninstall programmes.

Does it still throw "Windows Installer Service could not be accessed" error making uninstall process fail?

[nessa1422]

Hi,

Yes, you must be right about the windows installer - it does come up when I'm trying to uninstall programmes, but Java disappeared from Revo so I assumed it was gone.
When I look at Control Panel, the logo is there and when I try to open it I get 'the system cannot find the file specified'.

Thank you,
Nessa.

[Blade81]

Hi,

Does Windows Installer Cleanup Utility detect any Java entries present?

[nessa1422]

Hi,
Can't install that - just get the Windows Installer box saying' could not be accessed ...'.
Also, need Adobe reader or similar to open all my documents, but get the same message when I try to install.

Thanks again,
Nessa.

[Blade81]

Hi,

Let's have another attempt.

1. Download Dial-a-fix to your desktop.
2. Extract the downloaded zip file to suitable folder (i.e. c:\dialafix). Instructions here, if needed.
3. Navigate to the folder you extracted zip file contents and double click Dial-a-fix.exe file to run the application.
4. Check "Fix Windows Installer" box.
5. Click "Go".

Let the process run and then reboot. See if you have better success with Windows Installer after that.

[nessa1422]

Hi,
Have tried several times but get 'the compressed (zipped) folder is invalid or corrupted'.

Thanks,
Nessa.

[Blade81]

Hi,

To make sure file gets properly downloaded, do this please:
1. Right click the link
2. Select "Save Target As" option and save the file to your desktop.
3. Try to extract the contents of zip file like instructed in the link given in my previous post.

Edit: If it still fails try this link instead.

Edited by Blade81, 05 April 2010 - 11:28 AM.