Update Problem

[TheTechEase]

I had Norton 2007 on a computer of mine and I used to the Norton Removal took to get rid of it. The problem was I was getting a "LU9000" when trying to do updates. Therefore, I got NOD32.

I installed everything correctly and now I am unable to get the updates I need from NOD32. It says I have Version 2257 and when I try to do updates, it says that I am all up-to-date nothing to download. I called NOD32 and they really did not have a answer as to why. They said let it sit for a few hours then call back.

Any ideas why I cannot get the correct signature database to download?

Thanks
TheTechEase

[ugly]

Are you using trial version ?

[TheTechEase]

Nope... Full version.

I think something on the computer is blocking me from updating. I have run Spybot / Adaware and still nothing.

[ronjor]

http://www.wilderssecurity.com/showpost.php?p=1052551&postcount=3

[ugly]

...curious...???
Never seen that before with paid version.8)

[WSFuser]

Although it contradicts Blackspear's advice, try choosing different servers instead of letting NOD32 automatically decide.

[TheTechEase]

The problem is that NOD starts doing the update then gets to around 72% and then jumps to another server and tries the download again. It never gets to 100%. It just repeats that process.

There might be something blocking it from doing the updates. Any suggestions on how to find out what that is or something else to try?


Thanks

[Blackspear]

Hi there, what previous antivirus was on this system? If you had Norton on this system at any point in time, please complete the following:

Download, Save and then run the Norton Removal tool for versions 2003 to 2007 use this link: http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039?OpenDocument


Please check the following files exist:

C Drive> Windows> Temp

C Drive> Documents and Settings> (User Name) XXXXXX> Local Settings> Temp

Do the "Temp and TMP" folders exist in "Environmental Variables" when you right click on My Computer as per the screenshots found in this link? http://www.wilderssecurity.com/showthread.php?p=764434#post764434

When you then navigate to the folders mentioned in "Environmental Variables" are they actually there?

Sometimes the only method is to delete and reinstall the Temp folders.

You can also try running this file http://www.nod32.it/getfile.php?tool=settmp it will set both the user and system TEMP/TMP variables to c:\windows\temp. Just make sure the folder exists.

With Vista, you can also try turning off UAC in the Vista Control Panel.

Also check the Registry Permissions:

Click on Start
Click on Run
Type in regedit
Click on OK
Right Click on HKEY_LOCAL_MACHINE
Click on Permissions
Click on Advanced
On the “Permissions” tab and make sure at the bottom of this window the following lines are ticked:

• Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here.

• Replace permission entries on all child objects with entries shown here that apply to child objects.

After the above, please try reinstalling a FRESH copy of NOD32.

Cheers ;D

[TheTechEase]

I just did all that and still same thing. I really think that something is blocking or preventing any anti-virus to do updates. I don't know what to do!!!

[Blackspear]

Hi there, open up a support case HERE (http://www.eset.com/support/contact.php)

Send them the following:

Download HijackThis from HERE (http://www.wilderssecurity.com/showthread.php?t=12516)

Download Autoruns from HERE (http://download.sysinternals.com/Files/Autoruns.zip)

Download and run Lookinmypc from HERE (http://www.lookinmypc.com)
1. Select "Generate report"
2. Wait - scan results will pop up in a browser
3. Go to folder with LookInMyPC installed (default in C:\ProgramFiles\LookInMyPC\Reports\username\LookInMyPC.zip), and attach LookInMyPC.zip to the support case.

Then run the other 2 programs and forward the logs with a link to this thread.

Cheers ;D

[Marcos]

Have you tried uninstalling NOD32, restarting the computer, deleting the program files\eset folder and installing the latest version from scratch? Maybe you could give ESS/ESET NOD32 Antivirus beta a try, it's available at www.eset.com/beta

[TheTechEase]

Logfile of HijackThis v1.99.1
Scan saved at 9:32:01 AM, on 8/24/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Symantec\pcAnywhere\awhost32.exe
C:\WINDOWS\csasvc.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MPSC_DB\Binn\sqlservr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$TAXPREP\Binn\sqlservr.exe
C:\WINDOWS\System32\hphmon05.exe
C:\hp\drivers\keyboard\PS2.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\RNE4064A\HijackThis1991[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [PS2] C:\hp\drivers\keyboard\PS2.EXE
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://www.filingctr.net
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6E8A5BF3-D8FD-4536-B628-EF82E5668E23}: NameServer = 192.168.1.1
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: Creative Solutions Accounting Print Service (CSAPrintService) - Creative Solutions - C:\WINDOWS\csasvc.exe
O23 - Service: Gear Security Service (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

[TheTechEase]

When I downloaded the LMPC I ran the .exe but nothing happened.

Thanks

[Blackspear]

Hi there, as advised above, please send all logs to ESET when you create a new support case.

Cheers ;D