i get error while running any setup
August 5th, 2016
my problem goes like this. for example lets say that i am running the game lineage2. when the program runs i try to start any setup of a program and i get the following error:
Access violation at adress 00409942. Write of adress 00401000
and i cant run a setup.
Now if i close lineage2 and there is no active program at that moment i can run setup and works.
hope someone can help me.
ty in advance!!
I think that there is something wrong with the game !!
if you run another game and try to install,does it work ? if so then the problem is 100% from your game lineage2.
Do me a favour download and post a hijack this log please as it can be caused by a multitude of pottential causes.
(if its happening for all setups)
_31 wrote: Select all
I think that there is something wrong with the game !!
if you run another game and try to install,does it work ? if so then the problem is 100% from your game lineage2.
to be honest i didnt tried this i will and post again
Answer #4
Install Windows Installer Cleanup Utility to uninstall Lineage2 (whatever it installed.) and then install CCleaner.
Windows Installer Cleanup Utility
CCleaner
Run the Windows Installer Cleanup Utility to uninstall Lineage2 remnants, then use CCleaner to delete the registry entries.
Now reinstall Lineage 2, and try it again.
Answer #5
I think that there is something wrong with the game !!if you run another game and try to install,does it work ? if so then the problem is 100% from your game lineage2.
to be honest i didnt tried this i will and post again
Install Windows Installer Cleanup Utility to uninstall Lineage2 (whatever it installed.) and then install CCleaner.
Windows Installer Cleanup Utility
http://support.microsoft.com/kb/290301CCleaner
http://www.ccleaner.com/Run the Windows Installer Cleanup Utility to uninstall Lineage2 remnants, then use CCleaner to delete the registry entries.
Now reinstall Lineage 2, and try it again.
threeothree wrote: Select all
Do me a favour download and post a hijack this log please as it can be caused by a multitude of pottential causes.
(if its happening for all setups)
what do you mean give me a link so i can download
ty both guys for your interest
Answer #6
Do me a favour download and post a hijack this log please as it can be caused by a multitude of pottential causes.(if its happening for all setups)
what do you mean give me a link so i can download
ty both guys for your interest
threeothree wrote: Select all
Do me a favour download and post a hijack this log please as it can be caused by a multitude of pottential causes.
(if its happening for all setups)
ok found what you ment here is my log after scan:
Logfile of HijackThis v1.99.1
Scan saved at 7:17:01 μμ, on 28/5/2009
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\WUDFHost.exe
C:\Users\\Desktop\L2Net369\L2NET\L2NET.exe
C:\Windows\system32\svchost.exe
C:\Windows\Explorer.exe
C:\Windows\system32\msiexec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hijack\HijackThis.exe
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 – HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 – HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 – Hosts: 216.107.250.194 nprotect.lineage2.com
O2 – BHO: AcroIEHelperStub – {18DF081C-E8AD-4283-A596-FA578C2EBDC3} – C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 – BHO: flashget urlcatch – {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} – C:\Program Files\FlashGet\jccatch.dll
O2 – BHO: (no name) – {5C255C8A-E604-49b4-9D64-90988571CECB} – (no file)
O2 – BHO: Groove GFS Browser Helper – {72853161-30C5-4D22-B7F9-0BBC1D38A37E} – C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 – BHO: Windows Live Sign-in Helper – {9030D464-4C02-4ABF-8ECC-5164760863C6} – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 – BHO: FlashGet GetFlash Class – {F156768E-81EF-470C-9057-481BA8380DBA} – C:\Program Files\FlashGet\getflash.dll
O4 – HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 – HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 – HKLM\..\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”
O4 – HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 – HKLM\..\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”
O4 – HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”
O8 – Extra context menu item: &Λήψη όλων με το FlashGet – C:\Program Files\FlashGet\jc_all.htm
O8 – Extra context menu item: &Λήψη με χρήση του FlashGet – C:\Program Files\FlashGet\jc_link.htm
O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 – Extra button: Send to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 – Extra ‘Tools’ menuitem: S&end to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 – Extra button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 – Extra button: FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:\Program Files\FlashGet\FlashGet.exe
O9 – Extra ‘Tools’ menuitem: FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:\Program Files\FlashGet\FlashGet.exe
O10 – Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 – Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 – Options group: [INTERNATIONAL] International*
O13 – Gopher Prefix: O16 – DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) – http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O18 – Protocol: grooveLocalGWS – {88FED34C-F0CA-4636-A375-3CB6248B04CD} – C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 – Protocol: livecall – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\WINDOW~1\MESSEN~1\MSGRAP~1.DLL
O18 – Protocol: ms-help – {314111C7-A502-11D2-BBCA-00C04F8EC294} – C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 – Protocol: msnim – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\WINDOW~1\MESSEN~1\MSGRAP~1.DLL
O18 – Filter hijack: text/xml – {807563E5-5146-11D5-A672-00B0D022E945} – C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 – Service: IviRegMgr – InterVideo – C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 – Service: NBService – Nero AG – C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 – Service: NMIndexingService – Nero AG – C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 – Service: NVIDIA Display Driver Service (nvsvc) – NVIDIA Corporation – C:\Windows\system32\nvvsvc.exe
O23 – Service: Protexis Licensing V2 (PSI_SVC_2) – Protexis Inc. – C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 – Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) – Unknown owner – %windir%\system32\svchost.exe (file missing)
O23 – Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) – Unknown owner – %windir%\system32\svchost.exe (file missing)
O23 – Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) – Unknown owner – %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
Answer #7
Logfile is ok apart from one missing entry which wouldnt cause what your desribing.
Answer #8
i tried and the windows installer and ccleaner that the guy before told but nothing.
the weird thing is that when i close lineage i can run any setup lool
Answer #9
Do me a favour download and post a hijack this log please as it can be caused by a multitude of pottential causes.(if its happening for all setups)
ok found what you ment here is my log after scan:
Logfile of HijackThis v1.99.1
Scan saved at 7:17:01 μμ, on 28/5/2009
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\WUDFHost.exe
C:\Users\\Desktop\L2Net369\L2NET\L2NET.exe
C:\Windows\system32\svchost.exe
C:\Windows\Explorer.exe
C:\Windows\system32\msiexec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hijack\HijackThis.exe
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 – HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 – HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 – Hosts: 216.107.250.194 nprotect.lineage2.com
O2 – BHO: AcroIEHelperStub – {18DF081C-E8AD-4283-A596-FA578C2EBDC3} – C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 – BHO: flashget urlcatch – {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} – C:\Program Files\FlashGet\jccatch.dll
O2 – BHO: (no name) – {5C255C8A-E604-49b4-9D64-90988571CECB} – (no file)
O2 – BHO: Groove GFS Browser Helper – {72853161-30C5-4D22-B7F9-0BBC1D38A37E} – C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 – BHO: Windows Live Sign-in Helper – {9030D464-4C02-4ABF-8ECC-5164760863C6} – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 – BHO: FlashGet GetFlash Class – {F156768E-81EF-470C-9057-481BA8380DBA} – C:\Program Files\FlashGet\getflash.dll
O4 – HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 – HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 – HKLM\..\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”
O4 – HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 – HKLM\..\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”
O4 – HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”
O8 – Extra context menu item: &Λήψη όλων με το FlashGet – C:\Program Files\FlashGet\jc_all.htm
O8 – Extra context menu item: &Λήψη με χρήση του FlashGet – C:\Program Files\FlashGet\jc_link.htm
O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 – Extra button: Send to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 – Extra ‘Tools’ menuitem: S&end to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 – Extra button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 – Extra button: FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:\Program Files\FlashGet\FlashGet.exe
O9 – Extra ‘Tools’ menuitem: FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:\Program Files\FlashGet\FlashGet.exe
O10 – Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 – Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 – Options group: [INTERNATIONAL] International*
O13 – Gopher Prefix: O16 – DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) – http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O18 – Protocol: grooveLocalGWS – {88FED34C-F0CA-4636-A375-3CB6248B04CD} – C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 – Protocol: livecall – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\WINDOW~1\MESSEN~1\MSGRAP~1.DLL
O18 – Protocol: ms-help – {314111C7-A502-11D2-BBCA-00C04F8EC294} – C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 – Protocol: msnim – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\WINDOW~1\MESSEN~1\MSGRAP~1.DLL
O18 – Filter hijack: text/xml – {807563E5-5146-11D5-A672-00B0D022E945} – C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 – Service: IviRegMgr – InterVideo – C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 – Service: NBService – Nero AG – C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 – Service: NMIndexingService – Nero AG – C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 – Service: NVIDIA Display Driver Service (nvsvc) – NVIDIA Corporation – C:\Windows\system32\nvvsvc.exe
O23 – Service: Protexis Licensing V2 (PSI_SVC_2) – Protexis Inc. – C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 – Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) – Unknown owner – %windir%\system32\svchost.exe (file missing)
O23 – Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) – Unknown owner – %windir%\system32\svchost.exe (file missing)
O23 – Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) – Unknown owner – %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
Logfile is ok apart from one missing entry which wouldnt cause what your desribing.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)i tried and the windows installer and ccleaner that the guy before told but nothing.
the weird thing is that when i close lineage i can run any setup lool
threeothree wrote: Select all
Logfile is ok apart from one missing entry which wouldnt cause what your desribing.
i can see 2-3 lines like this :
O23 – Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) – Unknown owner – %windir%\system32\svchost.exe (file missing) where files are missing should i fix with hijack this lines?
Answer #10
if its only the one program causing the problem I would say its dodgy code in that prog and if you post your hijack log here
it will be analized and advise you which if any items are a threat or problem their results are pretty good
Answer #11
ty very much i’ll try it
Answer #12
i did it correct 2 things and my log is like this now:
Logfile of HijackThis v1.99.1
Scan saved at 11:12:59 μμ, on 28/5/2009
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\WUDFHost.exe
C:\Users\\Desktop\L2Net369\L2NET\L2NET.exe
C:\Windows\system32\svchost.exe
C:\Windows\Explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hijack\HijackThis.exe
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 – HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 – HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 – Hosts: 216.107.250.194 nprotect.lineage2.com
O2 – BHO: AcroIEHelperStub – {18DF081C-E8AD-4283-A596-FA578C2EBDC3} – C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 – BHO: flashget urlcatch – {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} – C:\Program Files\FlashGet\jccatch.dll
O2 – BHO: Groove GFS Browser Helper – {72853161-30C5-4D22-B7F9-0BBC1D38A37E} – C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 – BHO: Windows Live Sign-in Helper – {9030D464-4C02-4ABF-8ECC-5164760863C6} – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 – BHO: FlashGet GetFlash Class – {F156768E-81EF-470C-9057-481BA8380DBA} – C:\Program Files\FlashGet\getflash.dll
O4 – HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 – HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 – HKLM\..\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”
O4 – HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 – HKLM\..\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”
O4 – HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”
O8 – Extra context menu item: &Λήψη όλων με το FlashGet – C:\Program Files\FlashGet\jc_all.htm
O8 – Extra context menu item: &Λήψη με χρήση του FlashGet – C:\Program Files\FlashGet\jc_link.htm
O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 – Extra button: Send to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 – Extra ‘Tools’ menuitem: S&end to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 – Extra button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 – Extra button: FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:\Program Files\FlashGet\FlashGet.exe
O9 – Extra ‘Tools’ menuitem: FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:\Program Files\FlashGet\FlashGet.exe
O10 – Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 – Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 – Options group: [INTERNATIONAL] International*
O13 – Gopher Prefix: O18 – Protocol: grooveLocalGWS – {88FED34C-F0CA-4636-A375-3CB6248B04CD} – C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 – Protocol: livecall – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\WINDOW~1\MESSEN~1\MSGRAP~1.DLL
O18 – Protocol: ms-help – {314111C7-A502-11D2-BBCA-00C04F8EC294} – C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 – Protocol: msnim – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\WINDOW~1\MESSEN~1\MSGRAP~1.DLL
O18 – Filter hijack: text/xml – {807563E5-5146-11D5-A672-00B0D022E945} – C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 – Service: IviRegMgr – InterVideo – C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 – Service: NBService – Nero AG – C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 – Service: NMIndexingService – Nero AG – C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 – Service: NVIDIA Display Driver Service (nvsvc) – NVIDIA Corporation – C:\Windows\system32\nvvsvc.exe
O23 – Service: Protexis Licensing V2 (PSI_SVC_2) – Protexis Inc. – C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 – Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) – Unknown owner – %windir%\system32\svchost.exe (file missing)
O23 – Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) – Unknown owner – %windir%\system32\svchost.exe (file missing)
O23 – Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) – Unknown owner – %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
the site analyzed and no problems . but i still cant run setups
Logfile is ok apart from one missing entry which wouldnt cause what your desribing. O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)i can see 2-3 lines like this :
O23 – Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) – Unknown owner – %windir%\system32\svchost.exe (file missing) where files are missing should i fix with hijack this lines?
Please don't double-post, use the edit button instead. Members are allowed to double or triple post only if their previous post has exceeded the maximum characters limit.
Kindly visit our rules:
www..org/rules
3P!TOM3if its only the one program causing the problem I would say its dodgy code in that prog and if you post your hijack log here
http://www.hijackthis.de/it will be analized and advise you which if any items are a threat or problem their results are pretty good
if its only the one program causing the problem I would say its dodgy code in that prog and if you post your hijack log here http://www.hijackthis.de/
it will be analized and advise you which if any items are a threat or problem their results are pretty goodty very much i’ll try it
i did it correct 2 things and my log is like this now:
Logfile of HijackThis v1.99.1
Scan saved at 11:12:59 μμ, on 28/5/2009
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\WUDFHost.exe
C:\Users\\Desktop\L2Net369\L2NET\L2NET.exe
C:\Windows\system32\svchost.exe
C:\Windows\Explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hijack\HijackThis.exe
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 – HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 – HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 – Hosts: 216.107.250.194 nprotect.lineage2.com
O2 – BHO: AcroIEHelperStub – {18DF081C-E8AD-4283-A596-FA578C2EBDC3} – C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 – BHO: flashget urlcatch – {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} – C:\Program Files\FlashGet\jccatch.dll
O2 – BHO: Groove GFS Browser Helper – {72853161-30C5-4D22-B7F9-0BBC1D38A37E} – C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 – BHO: Windows Live Sign-in Helper – {9030D464-4C02-4ABF-8ECC-5164760863C6} – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 – BHO: FlashGet GetFlash Class – {F156768E-81EF-470C-9057-481BA8380DBA} – C:\Program Files\FlashGet\getflash.dll
O4 – HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 – HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 – HKLM\..\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”
O4 – HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 – HKLM\..\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”
O4 – HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”
O8 – Extra context menu item: &Λήψη όλων με το FlashGet – C:\Program Files\FlashGet\jc_all.htm
O8 – Extra context menu item: &Λήψη με χρήση του FlashGet – C:\Program Files\FlashGet\jc_link.htm
O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 – Extra button: Send to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 – Extra ‘Tools’ menuitem: S&end to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 – Extra button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 – Extra button: FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:\Program Files\FlashGet\FlashGet.exe
O9 – Extra ‘Tools’ menuitem: FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:\Program Files\FlashGet\FlashGet.exe
O10 – Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 – Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 – Options group: [INTERNATIONAL] International*
O13 – Gopher Prefix: O18 – Protocol: grooveLocalGWS – {88FED34C-F0CA-4636-A375-3CB6248B04CD} – C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 – Protocol: livecall – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\WINDOW~1\MESSEN~1\MSGRAP~1.DLL
O18 – Protocol: ms-help – {314111C7-A502-11D2-BBCA-00C04F8EC294} – C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 – Protocol: msnim – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\WINDOW~1\MESSEN~1\MSGRAP~1.DLL
O18 – Filter hijack: text/xml – {807563E5-5146-11D5-A672-00B0D022E945} – C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 – Service: IviRegMgr – InterVideo – C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 – Service: NBService – Nero AG – C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 – Service: NMIndexingService – Nero AG – C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 – Service: NVIDIA Display Driver Service (nvsvc) – NVIDIA Corporation – C:\Windows\system32\nvvsvc.exe
O23 – Service: Protexis Licensing V2 (PSI_SVC_2) – Protexis Inc. – C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 – Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) – Unknown owner – %windir%\system32\svchost.exe (file missing)
O23 – Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) – Unknown owner – %windir%\system32\svchost.exe (file missing)
O23 – Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) – Unknown owner – %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
the site analyzed and no problems . but i still cant run setups
| Sitemap |