problema installazione avg9 internet suite

[nonso]

salve a tutti, avrei un piccolo grande problemone con il file "avgwdsvc.exe" : mi fa il 90% dell'installazione e poi va in rollback perchè dice che questo file non ha risposto in tempo ad una richiesta di avvio o controllo; ho provato ad attivare in "services.msc" la voce windows installer impostandola su auto e attivandola poi ho disattivato sempre da services la voce windows firewall però l'ho lasciata su auto, ho pulito il reg e tutto l'harddisk da eventuali tracce lasciate da avg9 antivirus suite che ho appena disinstallato.......in poche parole sono 20 volte che cerco di installarlo ma cade sempre sulla stessa buccia di banana!!! essendo che ora sono senza protezione di alcun genere qualcuno mi sa dire come faccio a installare sto programma?? ormai mi va in fumo il cervello sono disperato AIUTOOOOOOOOOOO grazie

[menatwork]

Buonasera

prova a disinstallare avg con questo tool poi riprova la nuova installazione

[nonso]

niente da fare ho provato mi ha restituito un log quanto oggi e domani ho riprovato ma sto avgwdsvc.exe non vuole saperne di funzionare e l'installazione va puntualmente in rollback, a questo punto mi chiedo ma è possibile che qualche virus o simili possano interferire? o è solo qualche impostazione del mio pc che crea problemi?

[kenko]

controlla il sistema piu' a fondo

scarica combofix sul desktop ed eseguilo
(non installare la recovery console)
Lascia lavorare il programma senza interferire
copia il rapporto nel forum

[nonso]

ComboFix 10-03-29.04 - Matteo 01/04/2010 17.08.09.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.39.1040.18.1015.668 [GMT 2:00]
Eseguito da: c:\documents and settings\Matteo\Desktop\ComboFix.exe

ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))) )
.

c:\documents and settings\Matteo\Dati applicazioni\avdrn.dat
c:\recycler\S-1-5-21-426921485-1057647532-1183075387-1003
c:\windows\6kSRh.exe
c:\windows\system32\Thumbs.db

.
((((((((((((((((((((((((( Files Creati Da 2010-03-01 al 2010-04-01 )))))))))))))))))))))))))))))))))))
.

2010-04-01 15:02 . 2010-04-01 15:02 2809344 ----a-w- c:\documents and settings\All Users\Dati applicazioni\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe
2010-04-01 15:00 . 2010-04-01 15:00 2288640 ----a-w- c:\windows\system32\TUKernel.exe
2010-04-01 14:21 . 2010-02-25 11:00 30536 ----a-w- c:\windows\system32\TURegOpt.exe
2010-04-01 14:21 . 2010-02-25 10:53 30024 ----a-w- c:\windows\system32\uxtuneup.dll
2010-04-01 14:21 . 2010-04-01 14:21 -------- d-----w- c:\documents and settings\Matteo\Dati applicazioni\TuneUp Software
2010-04-01 14:21 . 2010-04-01 14:24 -------- d-----w- c:\programmi\TuneUp Utilities 2010
2010-04-01 14:20 . 2010-04-01 14:21 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\TuneUp Software
2010-04-01 14:20 . 2010-04-01 14:20 -------- d-sh--w- c:\documents and settings\All Users\Dati applicazioni\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-04-01 14:15 . 2010-04-01 14:16 -------- d-----w- c:\programmi\RegCleaner
2010-04-01 14:06 . 2010-04-01 14:06 -------- d-----w- c:\documents and settings\Matteo\Dati applicazioni\Uniblue
2010-04-01 14:06 . 2010-04-01 14:06 -------- d-----w- c:\programmi\Uniblue
2010-03-31 14:37 . 2010-04-01 13:38 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\avg9
2010-03-31 09:43 . 2010-04-01 13:38 30104 ----a-w- c:\windows\system32\drivers\avgfwdx.sys
2010-03-31 09:43 . 2010-03-31 12:21 50968 ----a-w- c:\windows\system32\avgfwdx.dll
2010-03-31 09:21 . 2010-03-31 09:21 167936 ----a-w- c:\windows\EoPBv8d3t.exe
2010-03-31 09:14 . 2010-03-31 10:09 -------- d-----w- c:\windows\system32\drivers\sysmgr
2010-03-30 21:26 . 2010-03-30 21:26 -------- d-----w- c:\documents and settings\Matteo\Dati applicazioni\Orangeline Interactive
2010-03-30 21:26 . 2010-03-30 21:26 -------- d-----w- c:\documents and settings\Matteo\Impostazioni locali\Dati applicazioni\Orangeline_Interactive
2010-03-30 21:26 . 2010-03-30 21:26 -------- d-----w- c:\programmi\Citrus Alarm Clock
2010-03-30 12:54 . 2010-03-30 12:54 -------- d-----w- c:\programmi\WireWorld 3D Screensaver
2010-03-30 12:43 . 2005-09-05 04:01 1056768 ----a-w- c:\windows\system32\FreeImage.dll
2010-03-29 11:32 . 2010-03-29 11:53 -------- d-----w- c:\programmi\File comuni\AVSMedia
2010-03-29 11:32 . 2007-02-27 16:36 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2010-03-29 11:32 . 2007-02-27 16:36 24576 ----a-w- c:\windows\system32\msxml3a.dll
2010-03-28 17:14 . 2010-03-28 17:14 503808 ----a-w- c:\documents and settings\Matteo\Dati applicazioni\Sun\Java\Deployment\SystemCache\6.0\5 4\1a209876-4b484543-n\msvcp71.dll
2010-03-28 17:14 . 2010-03-28 17:14 499712 ----a-w- c:\documents and settings\Matteo\Dati applicazioni\Sun\Java\Deployment\SystemCache\6.0\5 4\1a209876-4b484543-n\jmc.dll
2010-03-28 17:14 . 2010-03-28 17:14 348160 ----a-w- c:\documents and settings\Matteo\Dati applicazioni\Sun\Java\Deployment\SystemCache\6.0\5 4\1a209876-4b484543-n\msvcr71.dll
2010-03-28 17:14 . 2010-03-28 17:14 61440 ----a-w- c:\documents and settings\Matteo\Dati applicazioni\Sun\Java\Deployment\SystemCache\6.0\1 7\6d0ad391-7169c018-n\decora-sse.dll
2010-03-28 17:14 . 2010-03-28 17:14 12800 ----a-w- c:\documents and settings\Matteo\Dati applicazioni\Sun\Java\Deployment\SystemCache\6.0\1 7\6d0ad391-7169c018-n\decora-d3d.dll
2010-03-23 21:25 . 2010-03-23 21:25 -------- d-----w- c:\programmi\CCleaner
2010-03-23 18:43 . 2010-03-23 18:43 -------- d--h--w- c:\windows\PIF
2010-03-23 18:37 . 2010-03-30 07:57 1 ----a-w- c:\documents and settings\Matteo\Dati applicazioni\OpenOffice.org\3\user\uno_packages\ca che\stamp.sys
2010-03-23 18:37 . 2010-03-23 18:37 -------- d-----w- c:\documents and settings\Matteo\Dati applicazioni\OpenOffice.org
2010-03-23 18:36 . 2010-03-23 18:36 7424000 ----a-r- c:\documents and settings\Matteo\Dati applicazioni\Microsoft\Installer\{D61B4347-26FD-40F5-92B7-5D020E574DFE}\soffice.exe
2010-03-23 18:35 . 2010-03-23 18:35 -------- d-----w- c:\programmi\JRE
2010-03-23 18:35 . 2010-03-23 18:35 -------- d-----w- c:\programmi\OpenOffice.org 3
2010-03-23 18:35 . 2010-03-23 18:35 -------- d-----w- c:\programmi\File comuni\Java

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
2010-03-31 23:08 . 2009-11-22 17:23 -------- d-----w- c:\documents and settings\Matteo\Dati applicazioni\uTorrent
2010-03-31 22:55 . 2009-12-27 03:02 -------- d-----w- c:\documents and settings\Matteo\Dati applicazioni\vlc
2010-03-31 06:42 . 2009-05-11 21:51 84440 ----a-w- c:\windows\system32\perfc010.dat
2010-03-31 06:42 . 2009-05-11 21:51 489192 ----a-w- c:\windows\system32\perfh010.dat
2010-03-29 11:34 . 2009-09-27 21:17 49912 ----a-w- c:\documents and settings\Matteo\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2010-03-23 20:32 . 2009-05-11 21:33 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Microsoft Help
2010-03-23 18:34 . 2009-12-19 17:39 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-03-22 18:23 . 2009-05-11 20:02 76875 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-03-22 18:13 . 2009-09-27 23:21 1530 ----a-w- c:\documents and settings\Matteo\Dati applicazioni\wklnhst.dat
2010-02-25 20:12 . 2010-02-25 20:12 35808 ---ha-w- c:\windows\system32\mlfcache.dat
2010-02-24 17:28 . 2010-02-24 17:28 -------- d-----w- c:\documents and settings\Matteo\Dati applicazioni\Template
2010-02-21 12:25 . 2010-02-20 18:15 -------- d-----w- c:\documents and settings\Matteo\Dati applicazioni\Apple Computer
2010-02-21 11:30 . 2010-02-21 11:29 -------- d-----w- c:\programmi\File comuni\DVDVideoSoft
2010-02-21 11:29 . 2010-02-21 11:29 -------- d-----w- c:\programmi\DVDVideoSoft
2010-02-20 21:41 . 2010-02-20 21:41 -------- d-----w- c:\documents and settings\Matteo\Dati applicazioni\dvdcss
2010-02-20 18:15 . 2010-02-20 18:14 -------- d-----w- c:\programmi\iTunes
2010-02-20 18:15 . 2010-02-20 18:14 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2010-02-20 18:14 . 2010-02-20 18:14 -------- d-----w- c:\programmi\iPod
2010-02-20 18:14 . 2010-02-20 18:10 -------- d-----w- c:\programmi\File comuni\Apple
2010-02-20 18:14 . 2010-02-20 18:13 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Apple Computer
2010-02-20 18:13 . 2010-02-20 18:13 -------- d-----w- c:\programmi\Bonjour
2010-02-20 18:13 . 2010-02-20 18:13 -------- d-----w- c:\programmi\QuickTime
2010-02-20 18:12 . 2010-02-20 18:12 -------- d-----w- c:\programmi\Apple Software Update
2010-02-20 18:10 . 2010-02-20 18:10 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Apple
2010-02-15 17:41 . 2010-02-15 17:41 72488 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
2010-02-09 10:05 . 2010-02-09 09:57 -------- d---a-w- c:\documents and settings\All Users\Dati applicazioni\TEMP
2010-01-11 15:23 . 2010-01-11 15:21 45808 ----a-w- c:\documents and settings\Guest\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-12-19 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-12-19 159744]
"Persistence"="c:\windows\system32\igfxpers.ex e" [2007-12-19 131072]
"RTHDCPL"="RTHDCPL.EXE" [2009-04-27 17881088]
"AsusACPIServer"="c:\programmi\EeePC\ACPI\AsAcpiSv r.exe" [2009-04-16 630784]
"AsusEPCMonitor"="c:\programmi\EeePC\ACPI\AsEPCMon .exe" [2009-03-13 98304]
"AsusTray"="c:\programmi\EeePC\ACPI\AsTray.exe " [2009-04-16 118784]
"SynTPEnh"="c:\programmi\Synaptics\SynTP\SynTPEnh. exe" [2009-03-06 1434920]
"SynAsusAcpi"="c:\programmi\Synaptics\SynTP\SynAsu sAcpi.exe" [2009-03-06 79144]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Matteo\Menu Avvio\Programmi\Esecuzione automatica\
Citrus Alarm Clock.lnk - c:\programmi\Citrus Alarm Clock\Citrus Alarm Clock.exe [2010-3-30 406016]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
SuperHybridEngine.lnk - c:\programmi\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe [2009-5-11 376832]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\documents and settings\All Users\Dati applicazioni\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
2008-08-14 06:58 611712 ----a-w- c:\programmi\File comuni\Adobe\CS4ServiceManager\CS4ServiceManager.e xe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-02-15 17:07 141608 ----a-w- c:\programmi\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-11-10 22:08 417792 ----a-w- c:\programmi\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-01-11 14:21 246504 ----a-w- c:\programmi\File comuni\Java\Java Update\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Programmi\\Mozilla Firefox\\firefox.exe"=
"c:\\Programmi\\ASUS\\EzMessenger\\Clotho.exe" =
"c:\\Programmi\\ASUS\\EzMessenger\\EzMessenger.exe "=
"c:\\Programmi\\Skype\\Phone\\Skype.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
"c:\\Programmi\\Java\\jre6\\bin\\java.exe"=
"c:\\Programmi\\File comuni\\Adobe\\CS4ServiceManager\\CS4ServiceManage r.exe"=
"c:\\Programmi\\Pinnacle\\VideoSpin\\Programs\\Vid eoSpin.exe"=
"c:\\Programmi\\Pinnacle\\VideoSpin\\Programs\\RM. exe"=
"c:\\Programmi\\Pinnacle\\VideoSpin\\Programs\\umi .exe"=
"c:\\Programmi\\Bonjour\\mDNSResponder.exe"=
"c:\\Programmi\\iTunes\\iTunes.exe"=
"c:\\Programmi\\QuickTime\\QuickTimePlayer.exe "=

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:*isabled:Adobe CSI CS4

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\programmi\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [25/02/2010 12.57.22 1047880]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\programmi \TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [14/10/2009 7.24.44 10064]
S2 WDI;Windows Device Instrumentation;"c:\windows\system32\drivers\sysmg r\svchost.exe" [31/03/2010 11.14.17 167936]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfil t.sys [11/05/2009 22.33.24 1684736]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwd x.sys [31/03/2010 11.43.17 30104]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [31/03/2010 11.43.17 30104]
S3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sy s [28/04/2009 3.59.09 38912]
S3 RT80x86;Ralink 802.11n Wireless Driver;c:\windows\system32\drivers\rt2860.sys [11/05/2009 22.35.48 966912]
S3 SRS_PremiumSound_Service;SRS Labs Premium Sound;c:\windows\system32\drivers\SRS_PremiumSound _i386.sys [12/05/2009 0.31.12 232872]
S3 uvclf;uvclf;c:\windows\system32\drivers\uvclf.sys [28/04/2009 7.47.12 39040]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
.

[nonso]

------- Scansione supplementare -------
.
uStart Page = hxxp://eeepc.asus.com/global
uInternet Settings,ProxyOverride = *.local
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Invia a Bluetooth - c:\programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Invia a periferica &Bluetooth... - c:\programmi\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Matteo\Dati applicazioni\Mozilla\Firefox\Profiles\rosf2u76.def ault\
FF - prefs.js: browser.startup.homepage - hxxp://www.alice.it/
FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p=
FF - prefs.js: network.proxy.type - 4
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe
MSConfigStartUp-MsnMsgr - c:\program files\Windows Live\Messenger\MsnMsgr.Exe
MSConfigStartUp-SRS Premium Sound - c:\programmi\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe



************************************************** ************************
scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti:

************************************************** ************************
.
Ora fine scansione: 2010-04-01 17:14:18
ComboFix-quarantined-files.txt 2010-04-01 15:14

Pre-Run: 45.041.319.936 byte disponibili
Post-Run: 46.317.174.784 byte disponibili

- - End Of File - - D3DA55D12F30A8B17223473BAF077719

[nonso]

ho dovuto mandare 2 messaggi per le restrizioni di lunghezza del forum.
allora ho scaricato e lanciato combofix e mi ha creato questo log, comunque ho installato tuneup utility che a differenza di ccleaner che rilevava 2 err al registro di sistema tuneup ne ha rilevati poco più di 400!!!! una bella differenza!!!! ho riprovato ma niente avgwsvc.exe sembra essere perennemente in coma!!!!!!!!!! ho scaricato anche regcleaner e registrybooster solo che regcleaner non funz e registrybooster è in prova e quindi trova errori ma non corregge.............ma che cazzo se ne fa uno di una versione così del programma, almeno tuneup è in prova ma è completo per 30 gg!!!!