14 replies to this topic

[Amorphous]

Hello. I am unable to install Ad-Aware on my system after the previous uninstall crashed part way through. When attempting to install, I receive the message "A newer version of ad-aware is already installed" then the installation halts. I have attempted the manual removal instructions that I have found in these forums but nothing has worked. Some fragment of the old installation remains which the installer detects and ceases to continue. Is anyone able to assist me? Thanks.

[lanedtul]

well when i did it earlier today revo uninstaller failed to remove it all even at the words i followed off guide here, so you have to open the registry, regedit, look for lsdelete, lavasoft, and bootexecute. delete everything listed under , lavasoft entries. for ls delete when ya search it youll see entries on right, right click hit modify, and delete all lsdelete entries leaving the autochk part alone. i think i had 2 or 3 entries like this to do, it will have the bootexecute and autochk in there too, only delete the lsdelete parts up to the first line where theres no lsdelete in the line. should be left with a bootexecute*autochk* or something like that when done deleting the lsdelete parts. for some stupid reason if you dont get rid of all this left behind crap, youll get the lsdelete autochk cant find line on bootup, once all thats cleared away, you can reinstall the adaware again, but i know from just a few hours ago, the updates still not working yet.

[Amorphous]

Thanks for your response but this does not appear to help. Only a couple of bootexecute entries appear in the registry and none of those seem related to ad aware.

[CeciliaB]

Hi Amorphous,

We can see if DDS shows what parts of Ad-Aware that is still running.
Save DDS to your desktop: http://download.blee...om/sUBs/dds.scr

Double-click on the DDS tool to run it.

When finished, DDS will open two (2) logs:
1. DDS.txt
2. Attach.txt

Save them to your desktop and paste the content of DDS.txt into your answer.

[Amorphous]

Hello and thanks for responding. I have downloaded and executed the aforementioned script. The content of DDS.txt follows:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_24
Run by Admin at 14:29:06 on 2012-01-09
Microsoft Windows 7 Professional 6.1.7601.1.1252.61.1033.18.8190.5727 [GMT 10:00]
.
AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:Windowssystem32wininit.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe -k DcomLaunch
C:Windowssystem32svchost.exe -k RPCSS
C:Windowssystem32atiesrxx.exe
C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:Windowssystem32svchost.exe -k netsvcs
C:Windowssystem32svchost.exe -k LocalService
C:Windowssystem32atieclxx.exe
C:Windowssystem32svchost.exe -k NetworkService
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe -k LocalServiceNoNetwork
C:Program FilesATI TechnologiesATI.ACEFuelFuel.Service.exe
C:Program FilesESETESET NOD32 Antivirusx86ekrn.exe
C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation
C:Program Files (x86)LogMeInx64LMIGuardianSvc.exe
C:Program Files (x86)LogMeInx64RaMaint.exe
C:Program Files (x86)LogMeInx64LogMeIn.exe
C:Program FilesCommon FilesNitro PDFReader2.0NitroPDFReaderDriverService2x64.exe
C:WindowsSysWOW64PnkBstrA.exe
C:Windowssystem32svchost.exe -k imgsvc
C:Program Files (x86)TomTom HOME 2TomTomHOMEService.exe
C:WindowsSystem32vds.exe
C:WindowsSysWOW64vmnat.exe
C:Program Files (x86)VMwareVMware ServertomcatbinTomcat6.exe
C:Windowssystem32conhost.exe
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE
C:Program Files (x86)StorageCraftShadowProtectShadowProtectSvc.exe
C:Program Files (x86)StorageCraftShadowProtectShadowProtectSvc.exe
C:Windowssystem32wbemwmiprvse.exe
C:Program Files (x86)VMwareVMware Servervmware-authd.exe
C:WindowsSysWOW64vmnetdhcp.exe
C:WindowsSysWOW64vsnapvss.exe
C:Program Files (x86)VMwareVMware Servervmware-hostd.exe
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSvcM.exe
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32taskhost.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Windowssystem32taskeng.exe
C:WindowsDAODx.exe
C:Program FilesESETESET NOD32 Antivirusegui.exe
C:WindowsSysWOW64HsMgr.exe
C:WindowssystemHsMgr64.exe
C:Program FilesSaitekSD6SoftwareProfilerU.exe
C:Program FilesSaitekSD6SoftwareSaiMfd.exe
C:Program Files (x86)LogMeInx64LogMeInSystray.exe
C:Program Files (x86)KeePass Password Safe 2KeePass.exe
C:Program Files (x86)SamsungKiesExternalFirmwareUpdateKiesPDLR.exe
C:Program FilesASUS Xonar DX AudioCustomappASUSAUDIOCENTER.EXE
C:Program Files (x86)EvernoteEvernoteEvernoteClipper.exe
C:Program Files (x86)EvernoteEvernoteEvernoteTray.exe
C:Program Files (x86)EvernoteEvernoteEvernote.exe
C:Program Files (x86)WordWebwweb32.exe
C:Program Files (x86)Renesas ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe
C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesWindows Media Playerwmpnetwk.exe
C:WindowsSystem32svchost.exe -k LocalServicePeerNet
C:Program Files (x86)Microsoft OfficeOffice12OUTLOOK.EXE
C:WindowsMicrosoft.NetFramework64v3.0WPFPresentationFontCache.exe
C:Windowssystem32DllHost.exe
C:WindowsSystem32svchost.exe -k secsvcs
C:Program Files (x86)RSSOwlRSSOwl.exe
C:Program Files (x86)Mozilla Firefoxfirefox.exe
C:Windowssystem32vssvc.exe
C:WindowsSystem32svchost.exe -k swprv
C:WindowsSysWOW64NOTEPAD.EXE
C:Windowssystem32SearchProtocolHost.exe
C:Windowssystem32SearchFilterHost.exe
C:Windowssystem32DllHost.exe
C:Windowssystem32DllHost.exe
C:WindowsSysWOW64cmd.exe
C:Windowssystem32conhost.exe
C:WindowsSysWOW64cscript.exe
.
============== Pseudo HJT Report ===============
.
uURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:Program Files (x86)Vuze_RemoteprxtbVuze.dll
mURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:Program Files (x86)Vuze_RemoteprxtbVuze.dll
mWinlogon: Userinit=userinit.exe
BHO: Shareaza Web Download Hook: {0eedb912-c5fa-486f-8334-57288578c627} - C:Program Files (x86)ShareazaRazaWebHook32.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:Program Files (x86)Common FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
BHO: Password Depot 6: {9f79b165-70f7-4c46-b1a5-8828e2ff21f9} - "C:Program Files (x86)AceBITPassword Depot 6pdIEAddOn.dll"
BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:Program Files (x86)Vuze_RemoteprxtbVuze.dll
BHO: FDMIECookiesBHO Class: {cc59e0f9-7e43-44fa-9faa-8377850bf205} - C:Program Files (x86)Free Download Manageriefdm2.dll
BHO: Foxit PDF Creator Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:Program Files (x86)Ask.comGenericAskToolbar.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:Program Files (x86)Javajre6binjp2ssv.dll
TB: Foxit PDF Creator Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:Program Files (x86)Ask.comGenericAskToolbar.dll
TB: Spb Wallet: {2913d3dd-9363-4c21-b205-c19a584a0674} - C:Program Files (x86)Spb WalletSpbWalletToolbar.dll
TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:Program Files (x86)Vuze_RemoteprxtbVuze.dll
uRun: [KiesHelper] C:Program Files (x86)SamsungKiesKiesHelper.exe /s
uRun: [KiesTrayAgent] C:Program Files (x86)SamsungKiesKiesTrayAgent.exe
uRun: [TomTomHOME.exe] "C:Program Files (x86)TomTom HOME 2TomTomHOMERunner.exe"
uRun: [KiesPDLR] C:Program Files (x86)SamsungKiesExternalFirmwareUpdateKiesPDLR.exe
uRun: [Password Depot] "C:Program Files (x86)AceBITPassword Depot 6PasswordDepot.exe"
uRunOnce: [FlashPlayerUpdate] C:WindowsSysWow64MacromedFlashFlashUtil10b.exe
mRun: [KeePass 2 PreLoad] "C:Program Files (x86)KeePass Password Safe 2KeePass.exe" --preload
mRun: [GrooveMonitor] "C:Program Files (x86)Microsoft OfficeOffice12GrooveMonitor.exe"
mRun: [WordWeb] "C:Program Files (x86)WordWebwweb32.exe" -startup
mRun: [NUSB3MON] "C:Program Files (x86)Renesas ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe"
mRun: [QuickTime Task] "C:Program Files (x86)QuickTimeQTTask.exe" -atboottime
mRun: [StartCCC] "C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe" MSRun
StartupFolder: C:UsersAdminAppDataRoamingMICROS~1WindowsSTARTM~1ProgramsStartupEVERNO~1.LNK - C:Program Files (x86)EvernoteEvernoteEvernoteClipper.exe
StartupFolder: C:UsersAdminAppDataRoamingMICROS~1WindowsSTARTM~1ProgramsStartupTrillian.lnk - C:Program Files (x86)Trilliantrillian.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Evernote 4.0 - C:Program Files (x86)EvernoteEvernoteEvernoteIE.dll/204
IE: Download all with Free Download Manager - file://C:Program Files (x86)Free Download Managerdlall.htm
IE: Download selected with Free Download Manager - file://C:Program Files (x86)Free Download Managerdlselected.htm
IE: Download video with Free Download Manager - file://C:Program Files (x86)Free Download Managerdlfvideo.htm
IE: Download with &Shareaza - C:Program Files (x86)ShareazaRazaWebHook64.dll/3000
IE: Download with Free Download Manager - file://C:Program Files (x86)Free Download Managerdllink.htm
IE: {9F79B165-70F7-4C46-B1A5-8828E2FF21F9} - "C:Program Files (x86)AceBITPassword Depot 6PasswordDepot.exe"
IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:Program Files (x86)EvernoteEvernoteEvernoteIE.dll/204
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:PROGRA~2MICROS~1Office12ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:PROGRA~2MICROS~1Office12REFIEBAR.DLL
LSP: C:Program Files (x86)VMwareVMware Servervsocklib.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {B94C2238-346E-4C5E-9B36-8CC627F35574}
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
TCP: Interfaces{E9D39F14-E698-4200-9FCC-B38F5461E38B} : NameServer = 192.168.1.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:Program Files (x86)Microsoft OfficeOffice12GrooveSystemServices.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll
BHO-X64: Shareaza Web Download Hook: {0EEDB912-C5FA-486F-8334-57288578C627} - C:Program Files (x86)ShareazaRazaWebHook32.dll
BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program Files (x86)Common FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
BHO-X64: Password Depot 6: {9F79B165-70F7-4C46-B1A5-8828E2FF21F9} - "C:Program Files (x86)AceBITPassword Depot 6pdIEAddOn.dll"
BHO-X64: Password Depot 6 - No File
BHO-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:Program Files (x86)Vuze_RemoteprxtbVuze.dll
BHO-X64: Vuze Remote - No File
BHO-X64: FDMIECookiesBHO Class: {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:Program Files (x86)Free Download Manageriefdm2.dll
BHO-X64: Foxit PDF Creator Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:Program Files (x86)Ask.comGenericAskToolbar.dll
BHO-X64: Ask Toolbar BHO - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre6binjp2ssv.dll
TB-X64: Foxit PDF Creator Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:Program Files (x86)Ask.comGenericAskToolbar.dll
TB-X64: Spb Wallet: {2913D3DD-9363-4C21-B205-C19A584A0674} - C:Program Files (x86)Spb WalletSpbWalletToolbar.dll
TB-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:Program Files (x86)Vuze_RemoteprxtbVuze.dll
mRun-x64: [KeePass 2 PreLoad] "C:Program Files (x86)KeePass Password Safe 2KeePass.exe" --preload
mRun-x64: [GrooveMonitor] "C:Program Files (x86)Microsoft OfficeOffice12GrooveMonitor.exe"
mRun-x64: [WordWeb] "C:Program Files (x86)WordWebwweb32.exe" -startup
mRun-x64: [NUSB3MON] "C:Program Files (x86)Renesas ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe"
mRun-x64: [QuickTime Task] "C:Program Files (x86)QuickTimeQTTask.exe" -atboottime
mRun-x64: [StartCCC] "C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe" MSRun
IE-X64: {9F79B165-70F7-4C46-B1A5-8828E2FF21F9} - "C:Program Files (x86)AceBITPassword Depot 6PasswordDepot.exe"
IE-X64: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:Program Files (x86)EvernoteEvernoteEvernoteIE.dll/204
SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll
.
================= FIREFOX ===================
.
FF - ProfilePath -
.
============= SERVICES / DRIVERS ===============
.
R0 stcvsm;StorageCraft Volume Snapshot Driver;C:Windowssystem32DRIVERSstcvsm.sys --> C:Windowssystem32DRIVERSstcvsm.sys [?]
R1 sbmount;StorageCraft Image Mount Driver;C:Windowssystem32driverssbmount.sys --> C:Windowssystem32driverssbmount.sys [?]
R2 AMD External Events Utility;AMD External Events Utility;C:Windowssystem32atiesrxx.exe --> C:Windowssystem32atiesrxx.exe [?]
R2 AMD FUEL Service;AMD FUEL Service;C:Program FilesATI TechnologiesATI.ACEFuelFuel.Service.exe [2011-10-25 361984]
R2 AODDriver4.01;AODDriver4.01;C:Program FilesATI TechnologiesATI.ACEFuelamd64aoddriver2.sys [2011-6-24 55424]
R2 eamonm;eamonm;C:Windowssystem32DRIVERSeamonm.sys --> C:Windowssystem32DRIVERSeamonm.sys [?]
R2 ekrn;ESET Service;C:Program FilesESETESET NOD32 Antivirusx86ekrn.exe [2011-1-12 810144]
R2 epfwwfpr;epfwwfpr;C:Windowssystem32DRIVERSepfwwfpr.sys --> C:Windowssystem32DRIVERSepfwwfpr.sys [?]
R2 LMIGuardianSvc;LMIGuardianSvc;C:Program Files (x86)LogMeInx64LMIGuardianSvc.exe [2011-7-6 375176]
R2 LMIInfo;LogMeIn Kernel Information Provider;C:Program Files (x86)LogMeInx64rainfo.sys [2011-1-11 15928]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;??C:Windowssystem32driversLMIRfsDriver.sys --> C:Windowssystem32driversLMIRfsDriver.sys [?]
R2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;C:Program FilesCommon FilesNitro PDFReader2.0NitroPDFReaderDriverService2x64.exe [2011-12-20 341800]
R2 ShadowProtectSvc;ShadowProtect Service;C:Program Files (x86)StorageCraftShadowProtectShadowProtectSvc.exe [2011-3-27 3644200]
R2 SSPORT;SSPORT;??C:Windowssystem32DriversSSPORT.sys --> C:Windowssystem32DriversSSPORT.sys [?]
R2 TomTomHOMEService;TomTomHOMEService;C:Program Files (x86)TomTom HOME 2TomTomHOMEService.exe [2011-4-22 92592]
R2 VMwareHostd;VMware Host Agent;C:Program Files (x86)VMwareVMware Servervmware-hostd.exe [2009-10-20 322096]
R2 VMwareServerWebAccess;VMware Server Web Access;C:Program Files (x86)VMwareVMware Servertomcatbintomcat6.exe [2009-10-21 57344]
R2 VSNAPVSS;StorageCraft Shadow Copy Provider;C:WindowsSysWOW64vsnapvss.exe [2011-3-27 67880]
R3 amdiox64;AMD IO Driver;C:Windowssystem32DRIVERSamdiox64.sys --> C:Windowssystem32DRIVERSamdiox64.sys [?]
R3 amdkmdag;amdkmdag;C:Windowssystem32DRIVERSatikmdag.sys --> C:Windowssystem32DRIVERSatikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:Windowssystem32DRIVERSatikmpag.sys --> C:Windowssystem32DRIVERSatikmpag.sys [?]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:Windowssystem32driversAtihdW76.sys --> C:Windowssystem32driversAtihdW76.sys [?]
R3 cmudaxp;ASUS Xonar DX Audio Interface;C:Windowssystem32driverscmudaxp.sys --> C:Windowssystem32driverscmudaxp.sys [?]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:Windowssystem32DRIVERSnusb3hub.sys --> C:Windowssystem32DRIVERSnusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:Windowssystem32DRIVERSnusb3xhc.sys --> C:Windowssystem32DRIVERSnusb3xhc.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:Windowssystem32DRIVERSRt64win7.sys --> C:Windowssystem32DRIVERSRt64win7.sys [?]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:Windowssystem32DRIVERSssadbus.sys --> C:Windowssystem32DRIVERSssadbus.sys [?]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:Windowssystem32DRIVERSssadmdfl.sys --> C:Windowssystem32DRIVERSssadmdfl.sys [?]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:Windowssystem32DRIVERSssadmdm.sys --> C:Windowssystem32DRIVERSssadmdm.sys [?]
R3 usbfilter;AMD USB Filter Driver;C:Windowssystem32DRIVERSusbfilter.sys --> C:Windowssystem32DRIVERSusbfilter.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2011-3-31 136176]
S3 atillk64;atillk64;D:Programsati_winflash_2.0.1.14atillk64.sys [2011-11-16 14608]
S3 dmvsc;dmvsc;C:Windowssystem32driversdmvsc.sys --> C:Windowssystem32driversdmvsc.sys [?]
S3 gupdatem;Google Update Service (gupdatem);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2011-3-31 136176]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);C:Windowssystem32DRIVERSL1C62x64.sys --> C:Windowssystem32DRIVERSL1C62x64.sys [?]
S3 SaiH075C;SaiH075C;C:Windowssystem32DRIVERSSaiH075C.sys --> C:Windowssystem32DRIVERSSaiH075C.sys [?]
S3 StorSvc;Storage Service;C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 TsUsbFlt;TsUsbFlt;C:Windowssystem32driverstsusbflt.sys --> C:Windowssystem32driverstsusbflt.sys [?]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:Windowssystem32driversTsUsbGD.sys --> C:Windowssystem32driversTsUsbGD.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:Windowssystem32WatWatAdminSvc.exe --> C:Windowssystem32WatWatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2012-01-08 22:37:41 69000 ----a-w- C:ProgramDataMicrosoftWindows DefenderDefinition Updates{8B7BF9B8-9487-44DD-A0BA-B791E38B7673}offreg.dll
2012-01-08 03:01:54 -------- d-----w- C:Program Files (x86)RSSOwl
2012-01-06 15:22:38 -------- d-----w- C:Program Files (x86)LibreOffice 3.4
2012-01-06 15:18:23 -------- d-----w- C:Program Files (x86)Conduit
2012-01-06 15:18:22 -------- d-----w- C:UsersAdminAppDataLocalConduit
2012-01-06 15:18:22 -------- d-----w- C:Program Files (x86)Vuze_Remote
2012-01-06 08:01:51 8822856 ----a-w- C:ProgramDataMicrosoftWindows DefenderDefinition Updates{8B7BF9B8-9487-44DD-A0BA-B791E38B7673}mpengine.dll
2011-12-26 17:05:14 626688 ----a-w- C:Program Files (x86)Mozilla Firefoxmsvcr80.dll
2011-12-26 17:05:14 548864 ----a-w- C:Program Files (x86)Mozilla Firefoxmsvcp80.dll
2011-12-26 17:05:14 479232 ----a-w- C:Program Files (x86)Mozilla Firefoxmsvcm80.dll
2011-12-26 17:05:14 43992 ----a-w- C:Program Files (x86)Mozilla Firefoxmozutils.dll
2011-12-26 17:05:14 121816 ----a-w- C:Program Files (x86)Mozilla Firefoxcomponentsbrowsercomps.dll
2011-12-25 02:49:51 -------- d-----w- C:Program FilesCommon FilesNitro PDF
2011-12-25 02:49:51 -------- d-----w- C:Program Files (x86)Nitro PDF
2011-12-25 02:49:51 -------- d-----w- C:Program Files (x86)Common FilesNitro PDF
2011-12-25 01:57:07 -------- d-----w- C:Program FilesPaint.NET
2011-12-25 01:56:57 -------- d-----w- C:UsersAdminAppDataLocalPaint.NET
2011-12-21 15:55:34 729424 ----a-w- C:WindowsSysWow64wodSFTP.dll
2011-12-21 15:55:34 672024 ----a-w- C:WindowsSysWow64wodKeys.dll
2011-12-21 15:55:25 -------- d-----w- C:Program Files (x86)AceBIT
2011-12-16 16:42:08 43520 ----a-w- C:WindowsSystem32csrsrv.dll
2011-12-16 16:42:07 723456 ----a-w- C:WindowsSystem32EncDec.dll
2011-12-16 16:42:06 534528 ----a-w- C:WindowsSysWow64EncDec.dll
2011-12-16 16:42:00 2048 ----a-w- C:WindowsSysWow64tzres.dll
2011-12-16 16:42:00 2048 ----a-w- C:WindowsSystem32tzres.dll
2011-12-14 01:23:49 3145216 ----a-w- C:WindowsSystem32win32k.sys
2011-12-13 15:35:25 -------- d-----w- C:UsersAdminAppDataLocalChromium
2011-12-13 14:41:35 -------- d-----w- C:Program Files (x86)Rockstar Games
.
==================== Find3M ====================
.
2011-12-22 12:03:15 15664 ----a-w- C:WindowsSysWow64driversGEARAspiWDM.sys
2011-12-22 12:03:15 109360 ----a-w- C:WindowsSysWow64GEARAspi.dll
2011-12-20 00:10:48 17192 ----a-w- C:WindowsSystem32nitrolocalui2.dll
2011-12-20 00:10:46 28968 ----a-w- C:WindowsSystem32nitrolocalmon2.dll
2011-12-19 14:29:53 87456 ----a-w- C:WindowsSystem32LMIRfsClientNP.dll
2011-12-19 14:29:52 80768 ----a-w- C:WindowsSystem32LMIinit.dll
2011-12-19 14:29:52 34688 ----a-w- C:WindowsSystem32LMIport.dll
2011-11-20 07:17:21 414368 ----a-w- C:WindowsSysWow64FlashPlayerCPLApp.cpl
2011-11-16 10:53:17 419840 ----a-w- C:WindowsSystem32wrap_oal.dll
2011-11-16 10:53:17 413696 ----a-w- C:WindowsSysWow64wrap_oal.dll
2011-11-16 10:53:17 111616 ----a-w- C:WindowsSystem32OpenAL32.dll
2011-11-16 10:53:17 102400 ----a-w- C:WindowsSysWow64OpenAL32.dll
2011-11-15 04:29:56 270720 ------w- C:WindowsSystem32MpSigStub.exe
2011-11-04 01:53:39 2309120 ----a-w- C:WindowsSystem32jscript9.dll
2011-11-04 01:44:47 1390080 ----a-w- C:WindowsSystem32wininet.dll
2011-11-04 01:44:21 1493504 ----a-w- C:WindowsSystem32inetcpl.cpl
2011-11-04 01:34:43 2382848 ----a-w- C:WindowsSystem32mshtml.tlb
2011-11-03 22:47:42 1798144 ----a-w- C:WindowsSysWow64jscript9.dll
2011-11-03 22:40:21 1427456 ----a-w- C:WindowsSysWow64inetcpl.cpl
2011-11-03 22:39:47 1127424 ----a-w- C:WindowsSysWow64wininet.dll
2011-11-03 22:31:57 2382848 ----a-w- C:WindowsSysWow64mshtml.tlb
2011-10-27 01:25:42 177640 ----a-w- C:WindowsSystem32driversssadmdm.sys
2011-10-27 01:25:42 16872 ----a-w- C:WindowsSystem32driversssadmdfl.sys
2011-10-27 01:25:42 157672 ----a-w- C:WindowsSystem32driversssadbus.sys
2011-10-27 01:25:42 13800 ----a-w- C:WindowsSystem32driversssadwhnt.sys
2011-10-27 01:25:42 13288 ----a-w- C:WindowsSystem32driversssadcmnt.sys
2011-10-26 03:05:10 10496512 ----a-w- C:WindowsSystem32driversatikmdag.sys
2011-10-26 02:16:06 24866816 ----a-w- C:WindowsSystem32atio6axx.dll
2011-10-26 02:06:10 159744 ----a-w- C:WindowsSystem32atiapfxx.exe
2011-10-26 02:05:58 748544 ----a-w- C:WindowsSysWow64aticfx32.dll
2011-10-26 02:04:28 892416 ----a-w- C:WindowsSystem32aticfx64.dll
2011-10-26 02:01:46 466944 ----a-w- C:WindowsSystem32ATIDEMGX.dll
2011-10-26 02:01:36 517120 ----a-w- C:WindowsSystem32atieclxx.exe
2011-10-26 02:00:58 204288 ----a-w- C:WindowsSystem32atiesrxx.exe
2011-10-26 01:59:48 18757120 ----a-w- C:WindowsSysWow64atioglxx.dll
2011-10-26 01:59:44 120320 ----a-w- C:WindowsSystem32atitmm64.dll
2011-10-26 01:59:22 423424 ----a-w- C:WindowsSystem32atipdl64.dll
2011-10-26 01:59:16 356352 ----a-w- C:WindowsSysWow64atipdlxx.dll
2011-10-26 01:59:04 278528 ----a-w- C:WindowsSysWow64Oemdspif.dll
2011-10-26 01:58:58 21504 ----a-w- C:WindowsSystem32atimuixx.dll
2011-10-26 01:58:54 59392 ----a-w- C:WindowsSystem32atiedu64.dll
2011-10-26 01:58:48 43520 ----a-w- C:WindowsSysWow64ati2edxx.dll
2011-10-26 01:55:48 4292096 ----a-w- C:WindowsSysWow64atidxx32.dll
2011-10-26 01:46:12 5041664 ----a-w- C:WindowsSystem32atidxx64.dll
2011-10-26 01:43:48 1113088 ----a-w- C:WindowsSystem32atiumd6v.dll
2011-10-26 01:43:24 1828864 ----a-w- C:WindowsSysWow64atiumdmv.dll
2011-10-26 01:43:12 4044288 ----a-w- C:WindowsSystem32atiumd6a.dll
2011-10-26 01:38:32 51200 ----a-w- C:WindowsSystem32aticalrt64.dll
2011-10-26 01:38:30 46080 ----a-w- C:WindowsSysWow64aticalrt.dll
2011-10-26 01:38:20 44544 ----a-w- C:WindowsSystem32aticalcl64.dll
2011-10-26 01:38:18 44032 ----a-w- C:WindowsSysWow64aticalcl.dll
2011-10-26 01:38:08 9978880 ----a-w- C:WindowsSystem32aticaldd64.dll
2011-10-26 01:35:38 4353536 ----a-w- C:WindowsSysWow64atiumdag.dll
2011-10-26 01:34:56 8449024 ----a-w- C:WindowsSysWow64aticaldd.dll
2011-10-26 01:32:30 4189184 ----a-w- C:WindowsSysWow64atiumdva.dll
2011-10-26 01:29:32 5510144 ----a-w- C:WindowsSystem32atiumd64.dll
2011-10-26 01:29:24 58880 ----a-w- C:WindowsSystem32coinst.dll
2011-10-26 01:22:38 486912 ----a-w- C:WindowsSystem32atiadlxx.dll
2011-10-26 01:22:30 339968 ----a-w- C:WindowsSysWow64atiadlxy.dll
2011-10-26 01:22:20 17408 ----a-w- C:WindowsSystem32atig6pxx.dll
2011-10-26 01:22:16 14336 ----a-w- C:WindowsSysWow64atiglpxx.dll
2011-10-26 01:22:16 14336 ----a-w- C:WindowsSystem32atiglpxx.dll
2011-10-26 01:22:12 39936 ----a-w- C:WindowsSystem32atig6txx.dll
2011-10-26 01:22:06 32768 ----a-w- C:WindowsSysWow64atigktxx.dll
2011-10-26 01:21:58 326656 ----a-w- C:WindowsSystem32driversatikmpag.sys
2011-10-26 01:21:12 40960 ----a-w- C:WindowsSystem32atiuxp64.dll
2011-10-26 01:21:06 31744 ----a-w- C:WindowsSysWow64atiuxpag.dll
2011-10-26 01:21:00 38912 ----a-w- C:WindowsSystem32atiu9p64.dll
2011-10-26 01:20:52 29184 ----a-w- C:WindowsSysWow64atiu9pag.dll
2011-10-26 01:20:20 53248 ----a-w- C:WindowsSystem32driversati2erec.dll
2011-10-26 01:16:06 54784 ----a-w- C:WindowsSystem32atimpc64.dll
2011-10-26 01:16:06 54784 ----a-w- C:WindowsSystem32amdpcom64.dll
2011-10-26 01:15:58 53760 ----a-w- C:WindowsSysWow64atimpc32.dll
2011-10-26 01:15:58 53760 ----a-w- C:WindowsSysWow64amdpcom32.dll
2011-10-25 11:21:54 66560 ----a-w- C:WindowsSystem32OpenVideo64.dll
2011-10-25 11:21:48 56832 ----a-w- C:WindowsSysWow64OpenVideo.dll
2011-10-25 11:21:40 66560 ----a-w- C:WindowsSystem32OVDecoder64.dll
2011-10-25 11:21:34 56832 ----a-w- C:WindowsSysWow64OVDecoder.dll
2011-10-25 11:21:24 16991744 ----a-w- C:WindowsSystem32amdocl64.dll
2011-10-25 11:20:42 13950464 ----a-w- C:WindowsSysWow64amdocl.dll
.
============= FINISH: 14:29:19.26 ===============

[CeciliaB]

You are welcome

I cannot see that any parts of Ad-Aware is running. Which version of Ad-Aware did you have before and which version are you trying to install?

Some security observations regarding installed toolbars that you may want to know or just ignore if you prefer that:

Vuze Remote Toolbar http://www.systemloo...tbVuz2_dll.html
Shareaza Web Download Hook http://www.systemloo...Hook32_dll.html
Foxit PDF Creator Toolbar http://www.systemloo...NERI_1_DLL.html

These is an old Java version with knows security holes installed, it is very easy to infect the computer now. Install the latest from http://www.java.com/

[CeciliaB]

Sorry, but it is impossible to handle all problems related to installations in one topic regardless of symptoms. It gets very confusing.

I have created new topics for other users than Amorphous.

hpklahn: http://www.lavasofts...pdate-question/

Winroz: http://www.lavasofts...g-installation/

[CeciliaB]

Hi Amorphous,

Do you want to do some more investigations?

[Amorphous]

Hello again. Thanks for the security heads-up, as a general rule I avoid those toolbars due to privacy and security concerns. My installation of Firefox reports that the toolbars are not presently installed and although I do not use it often, I have disabled the toolbars in IE as well. I'm actually suprised that they were installed in IE as I usually deselect them from software installations.

As for Ad-Aware, I had version 9.6 initially, I uninstalled it due to some odd behavior. Unfortunately as previously stated, the uninstallation crashed and now I cannot reinstall 9.6 as the installer mistakenly reports a newer version is already installed.

[CeciliaB]

Hi Amorphous,

You are welcome
I agree regarding the toolbars. I could only see that they were installed in Internet Explorer and it should be possible to uninstall them in Control Panel - Programs and Features.

If you want to do some more investigations, you can download Process Explorer and see what registry entries that the installation program checks. Process Explorer is not a very easy program to use and I don't know exactly what to do in it.
http://technet.micro...ernals/bb896653
Lavasoft is working hard with solving the current big problem with updates of signature database, why none there is able to investigate your problem this week. Since Lavasoft is beta-testing Ad-Aware version 10 now, I guess they don't want to spend to much time on a version 9 problem even when the update problem has been resolved.

[Amorphous]

I haven't had the time to check registry entries yet but as an interesting note, I found an older copy of Ad-Aware 9.5 and it installed without issue. When attempting to install 9.6 however, the same error message appears. The issue must lie within the 9.6 installation routine which I'm guessing checks for something that either previously did not exist or for which a check has only recently been implemented.

[CeciliaB]

It is very little difference between 9.5 and 9.6, except for the toolbar, I suggest that you stay with 9.5.

[howardhx1]

Hi

I was on another thread on the same topic, and can't find it now.
My Ad-aware on one of three computers would not update around New Year, so I attempted re-installation and thats where problems began. On the other two computers, I didn't do this, and now Adaware is updating fine.
My last action on the problem machine was to de-install adaware, trawl manually through the registry and delete all references to ad-aware and lavasoft, re-boot and run system mechanic as a registry cleaner, and prepare to re-install.

On the last re-installation attempt, I downloaded ad-aware afresh, but when clearing out the debris afterwards I discovered files referring to version 9.07. Before I try again can I check that its the right version on the download site. If it isn't, that might explain why I was getting a message that a newer version had been installed already.

This has been a pain for the last three weeks and I'll be glad to reach a conclusion

Cheers

Howard

[howardhx1]

Thanks for your communication Cecilia.

My current query is probably more related to the re-install issue, than the update one: - although there are connections.

I'm ready to re-install when I can pluck up the courage, but am wondering whether there may have been a problem with the download package being for 9.07 rather than 9.6.

Howard

[CeciliaB]

No problem, Howard.

Version 9.0.7 and 9.6 are similar in many aspects, why it is possible that a file and a registry item created for 9.0.7 still is used in 9.6. On lavasoft.com I think you only can download the latest version.