Update Problem

Discussion in 'NOD32 version 2 Forum' started by TheTechEase, Aug 23, 2007.

Thread Status:
Not open for further replies.
  1. TheTechEase

    TheTechEase Registered Member

    Joined:
    Aug 23, 2007
    Posts:
    11
    I had Norton 2007 on a computer of mine and I used to the Norton Removal took to get rid of it. The problem was I was getting a "LU9000" when trying to do updates. Therefore, I got NOD32.

    I installed everything correctly and now I am unable to get the updates I need from NOD32. It says I have Version 2257 and when I try to do updates, it says that I am all up-to-date nothing to download. I called NOD32 and they really did not have a answer as to why. They said let it sit for a few hours then call back.

    Any ideas why I cannot get the correct signature database to download?

    Thanks
    TheTechEase
     
  2. ugly

    ugly Registered Member

    Joined:
    Mar 21, 2005
    Posts:
    276
    Location:
    Romania
    Are you using trial version ?
     
  3. TheTechEase

    TheTechEase Registered Member

    Joined:
    Aug 23, 2007
    Posts:
    11
    Nope... Full version.

    I think something on the computer is blocking me from updating. I have run Spybot / Adaware and still nothing.
     
    Last edited: Aug 23, 2007
  4. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,778
    Location:
    Texas
  5. ugly

    ugly Registered Member

    Joined:
    Mar 21, 2005
    Posts:
    276
    Location:
    Romania
    ...curious...o_O
    Never seen that before with paid version.:cool:
     
  6. WSFuser

    WSFuser Registered Member

    Joined:
    Oct 7, 2004
    Posts:
    10,632
    Although it contradicts Blackspear's advice, try choosing different servers instead of letting NOD32 automatically decide.
     
  7. TheTechEase

    TheTechEase Registered Member

    Joined:
    Aug 23, 2007
    Posts:
    11
    The problem is that NOD starts doing the update then gets to around 72% and then jumps to another server and tries the download again. It never gets to 100%. It just repeats that process.

    There might be something blocking it from doing the updates. Any suggestions on how to find out what that is or something else to try?


    Thanks
     
  8. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Hi there, what previous antivirus was on this system? If you had Norton on this system at any point in time, please complete the following:

    Download, Save and then run the Norton Removal tool for versions 2003 to 2007 use this link: http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039?OpenDocument


    Please check the following files exist:

    C Drive> Windows> Temp

    C Drive> Documents and Settings> (User Name) XXXXXX> Local Settings> Temp

    Do the "Temp and TMP" folders exist in "Environmental Variables" when you right click on My Computer as per the screenshots found in this link? https://www.wilderssecurity.com/showthread.php?p=764434#post764434

    When you then navigate to the folders mentioned in "Environmental Variables" are they actually there?

    Sometimes the only method is to delete and reinstall the Temp folders.

    You can also try running this file http://www.nod32.it/getfile.php?tool=settmp it will set both the user and system TEMP/TMP variables to c:\windows\temp. Just make sure the folder exists.

    With Vista, you can also try turning off UAC in the Vista Control Panel.

    Also check the Registry Permissions:

    Click on Start
    Click on Run
    Type in regedit
    Click on OK
    Right Click on HKEY_LOCAL_MACHINE
    Click on Permissions
    Click on Advanced
    On the “Permissions” tab and make sure at the bottom of this window the following lines are ticked:

    • Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here.

    • Replace permission entries on all child objects with entries shown here that apply to child objects.

    After the above, please try reinstalling a FRESH copy of NOD32.

    Cheers :D
     
  9. TheTechEase

    TheTechEase Registered Member

    Joined:
    Aug 23, 2007
    Posts:
    11
    I just did all that and still same thing. I really think that something is blocking or preventing any anti-virus to do updates. I don't know what to do!!!
     
  10. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Hi there, open up a support case HERE

    Send them the following:

    Download HijackThis from HERE

    Download Autoruns from HERE

    Download and run Lookinmypc from HERE
    1. Select "Generate report"
    2. Wait - scan results will pop up in a browser
    3. Go to folder with LookInMyPC installed (default in C:\ProgramFiles\LookInMyPC\Reports\username\LookInMyPC.zip), and attach LookInMyPC.zip to the support case.

    Then run the other 2 programs and forward the logs with a link to this thread.

    Cheers :D
     
  11. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Have you tried uninstalling NOD32, restarting the computer, deleting the program files\eset folder and installing the latest version from scratch? Maybe you could give ESS/ESET NOD32 Antivirus beta a try, it's available at www.eset.com/beta
     
  12. TheTechEase

    TheTechEase Registered Member

    Joined:
    Aug 23, 2007
    Posts:
    11
    Logfile of HijackThis v1.99.1
    Scan saved at 9:32:01 AM, on 8/24/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16441)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
    C:\Program Files\Symantec\pcAnywhere\awhost32.exe
    C:\WINDOWS\csasvc.exe
    C:\WINDOWS\System32\gearsec.exe
    C:\Program Files\Microsoft SQL Server\MSSQL$MPSC_DB\Binn\sqlservr.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Microsoft SQL Server\MSSQL$TAXPREP\Binn\sqlservr.exe
    C:\WINDOWS\System32\hphmon05.exe
    C:\hp\drivers\keyboard\PS2.EXE
    C:\Program Files\Eset\nod32kui.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Eset\nod32krn.exe
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\WINDOWS\wanmpsvc.exe
    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\RNE4064A\HijackThis1991[1].exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
    O4 - HKLM\..\Run: [PS2] C:\hp\drivers\keyboard\PS2.EXE
    O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O15 - Trusted Zone: http://www.filingctr.net
    O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
    O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab32846.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{6E8A5BF3-D8FD-4536-B628-EF82E5668E23}: NameServer = 192.168.1.1
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
    O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
    O23 - Service: Creative Solutions Accounting Print Service (CSAPrintService) - Creative Solutions - C:\WINDOWS\csasvc.exe
    O23 - Service: Gear Security Service (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)
    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
    O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
     
  13. TheTechEase

    TheTechEase Registered Member

    Joined:
    Aug 23, 2007
    Posts:
    11
    When I downloaded the LMPC I ran the .exe but nothing happened.

    Thanks
     
  14. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Hi there, as advised above, please send all logs to ESET when you create a new support case.

    Cheers :D
     
Thread Status:
Not open for further replies.