LoadAllDefs failed 0x00000005 when manually updating AVS

[WV-Mike]

Greetings.
First post here.
I am using 4.8.1335 home addition on XP pro SP 2.
No problems since I installed and registered about a month ago.

Now, on manual update I get a dialog box saying "Access Denied" and a log file is generated.

A summary dialog is also generated and is attached.
It states:

"Information about current update:
Total time: 12 s
Server: a685sm.avast.com (74.53.196.250:80)
Downloaded files: 2 (0.02 KB)
Download time: 1 s"



Here is the log:
14.05.2009 07:22:39 general: Started: 14.05.2009, 07:22:39
14.05.2009 07:22:39 general: Running setup_av_pro-537 (1335)
14.05.2009 07:22:39 system: Operating system: WindowsXP ver 5.1, build 2600, sp 2.0 [Service Pack 2]
14.05.2009 07:22:39 system: Memory: 45% load. Phys:1137444/2095480K free, Page:1903380/3056532K free, Virt:2069216/2097024K free
14.05.2009 07:22:39 system: Windows Net User: MAFB\MB
14.05.2009 07:22:39 general: Cmdline: /downloadpkgs /noreboot /updatevps /silent /progress 
14.05.2009 07:22:39 general: Old version: 537 (1335)
14.05.2009 07:22:39 registry: Error deleting registry: Software\Alwil Software\Avast\4.0\UpdateReady (0x00000005)
14.05.2009 07:22:39 system: Using temp: C:\DOCUME~1\MB\LOCALS~1\Temp\_av_proI.tm~a03308 (5890M free)
14.05.2009 07:22:39 general: SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 1
14.05.2009 07:22:39 internet: SYNCER: Agent=Syncer/4.80 (av_pro-1335;p)
14.05.2009 07:22:39 system: Installed in: C:\Program Files\Alwil Software\Avast4 (5890M free)
14.05.2009 07:22:39 internet: SYNCER: Type: no proxy
14.05.2009 07:22:39 internet: SYNCER: Auth: no authentication
14.05.2009 07:22:39 general: Old version: 537 (1335)
14.05.2009 07:22:39 general: GUID: dca81382-ce1e-4475-8984-b1295ea6a26d
14.05.2009 07:22:40 general: Server definition(s) loaded for 'main': 266 (maintenance:0)
14.05.2009 07:22:40 general: SelectCurrent: selected server 'Download635 AVAST Server' from 'main'
14.05.2009 07:22:40 internet: SYNCER: Type: no proxy
14.05.2009 07:22:40 internet: SYNCER: Auth: no authentication
14.05.2009 07:22:40 internet: SYNCER: Agent=Syncer/4.80 (av_pro-1335;f)
14.05.2009 07:22:40 internet: HttpGetWinsock(http://74.55.70.138/iavs4x/servers.def.vpu.stamp)
14.05.2009 07:22:41 internet: Used server: http://74.55.70.138/iavs4x
14.05.2009 07:22:41 package: Download servers.def, servers.def.vpu failed with error 0x00000005.
14.05.2009 07:22:41 internet: HttpGetWinsock(http://74.55.70.138/iavs4x/servers.def.stamp)
14.05.2009 07:22:41 internet: Used server: http://74.55.70.138/iavs4x
14.05.2009 07:22:42 general: Server definition(s) loaded for 'main': 266 (maintenance:0)
14.05.2009 07:22:42 general: SelectCurrent: selected server 'Download637 AVAST Server' from 'main'
14.05.2009 07:22:42 internet: SYNCER: Type: no proxy
14.05.2009 07:22:42 internet: SYNCER: Auth: no authentication
14.05.2009 07:22:42 internet: HttpGetWinsock(http://74.55.74.134/iavs4x/prod-av_pro.vpu.stamp)
14.05.2009 07:22:43 internet: Used server: http://74.55.74.134/iavs4x
14.05.2009 07:22:43 internet: HttpGetWinsock(http://74.55.74.134/iavs4x/prod-av_pro.vpu)
14.05.2009 07:22:43 internet: Used server: http://74.55.74.134/iavs4x
14.05.2009 07:22:43 file: GetFileWithRetry: prod-av_pro.vpu downloaded .
14.05.2009 07:22:43 file: GetNewerStampedFile:compatCopyFile failed: C:\DOCUME~1\MB\LOCALS~1\Temp\_av_proI.tm~a03308\onefile, C:\Program Files\Alwil Software\Avast4\Setup\prod-av_pro.vpu, error: 0x00000005
14.05.2009 07:22:43 package: Tried to download prod-av_pro.vpu but failed with error 0x00000005
14.05.2009 07:22:43 package: LoadAllDefs failed 0x00000005
14.05.2009 07:22:43 general: Err:Access is denied.

Thanks,
-Mike
www.EpicRoadTrips.us

[YoKenny]

Welcome Mike.

Provide a HijackThis log:
http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

Windows Service Pack 3 has been available for almost a year and contains several Critical Security updates plus performance improvements you need to start Internet Explorer then go to Tools then Windows Update and download all of the available updates.

Also you should enable Automatic Updates or at least be notified that Updates are available.

Go to Control Panel then Automatic Updates then select Automatic (recommended) or at least Notify me but don't automatically download or install them.

Go to Secunia Online Software Inspector then run it to see what other applications are vulnerable:
http://secunia.com/vulnerability_scanning/online

[WV-Mike]

Welcome Mike.

Provide a HijackThis log:
http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

Greetings,
The HijackThis log is attached.

Windows Service Pack 3 has been available for almost a year and contains several Critical Security updates plus performance improvements you need to start Internet Explorer then go to Tools then Windows Update and download all of the available updates.

I have been reluctant to install SP3 after hearing from others about blue screen problems and other issues causing major hassles.

Also you should enable Automatic Updates or at least be notified that Updates are available.

Go to Control Panel then Automatic Updates then select Automatic (recommended) or at least Notify me but don't automatically download or install them.

Again, I am concerned about Updates causing more problems than they solve. Is this fear justified?

Go to Secunia Online Software Inspector then run it to see what other applications are vulnerable:
http://secunia.com/vulnerability_scanning/online

No luck here.
I get an error message about a java applet no loading.
See attached.

Since I last emailed the forum Avast was able to complete and auto AVS update.
Thanks for the help and advise.
-Mike

===============

[.: L' arc :.]

(1) You should try downloading Windows XP Service Pack 3 via Automatic Windows Update or going to Microsoft Update Website.
(2) Your firewall is working as how it should be.

-= C:\DOCUME~1\MB\LOCALS~1\Temp\clclean.0001
       If I am not mistaken this is a part of Soundblaster Creative Audio Control..

-= O3 - Toolbar: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file)
       This is already deactivated & can be fixed..

-= O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
       This is already deactivated & can be fixed..

[WV-Mike]

(1) You should try downloading Windows XP Service Pack 3 via Automatic Windows Update or going to Microsoft Update Website.

Will try this over the upcoming weekend.

(2) Your firewall is working as how it should be.

-= C:\DOCUME~1\MB\LOCALS~1\Temp\clclean.0001
       If I am not mistaken this is a part of Soundblaster Creative Audio Control..

This file may have been generated by CCleaner: http://www.ccleaner.com/

If it is part of part of Soundblaster Creative Audio Control, it this significant?

-= O3 - Toolbar: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file)
       This is already deactivated & can be fixed..

-= O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
       This is already deactivated & can be fixed..

What are these toolbars and why do they need fixed?

Thanks for the feedback.
-Mike

[.: L' arc :.]

-= These 2 entries are already deactivated [either uninstalled or disabled].. These are just remnants and unnecessary..

(1) O3 - Toolbar: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file)
(2) O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)

-= About the clclean.0001:
WinPatrol

[YoKenny]

@chronoboi001
It is not polite to butt into another's log analysis but only when you see something blatently wrong. 

No luck here.
I get an error message about a java applet no loading.
See attached.

Go to Add/Remove Programs and un-install all Sun Java applications you see there.

Install Sun Java Version 6 Update 13:
http://www.java.com/en/download/manual.jsp

You need to install User Profile Hive Cleanup Service to help with slow log off and unreconciled profile problems:
http://www.microsoft.com/DOWNLOADS/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en

I'm not a fan of Spybot S&D as it has not kept up with the latest trends in malware so now I use Malwarebytes' Anti-Malware, Windows Defender updated dayly through its portal and WinPatrol.
http://www.malwarebytes.org/mbam.php
http://www.microsoft.com/security/portal
http://www.winpatrol.com

-= About the clclean.0001:

CCleaner will clean out this file as it is in the Temp area and I checked on my old XP Home system that has a Soundblaster Audigy adapter and do not see that file present.

Close all browser sessions then start HijackThis then select the following and then Fix Checked:
O3 - Toolbar: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file) <=points to removed items so un-necessary
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

I'm usually not away from this forum for long but yesterday I had a nice all day bus outing arranged with some friends of mine.

[CharleyO]

***

Welcome to the forums, WV-Mike.   

Information on the toolbar entries :

O3 - Toolbar: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file)
Belongs to PDF Creator Toolbar.
http://www.spyandseek.com/Search.php?search_for=31CF9EBE-5755-4A1D-AC25-2834D952D9B4&search=SAS-Search   (check all the entries listed as good on the list)

O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
Belongs to Ask Toolbar - also used by both Foxit Toolbar and ZA Spy Blocker Toolbar which are just renamed Ask Toolbars.
http://www.spyandseek.com/Search.php?search_for=3041d03e-fd4b-44e0-b742-2d9b88305f98&search=SAS-Search   (check the lower entries listed as unknown on the list)

As chronoboi001 suggested, they are remnants of things you no longer use and the registry entries were not removed.


Sorry, Yokenny -

I only wanted WV-Mike to understand about the toolbars.


***

[WV-Mike]

***

Welcome to the forums, WV-Mike.   

Thanks!
The http://www.spyandseek.com/ site is a handy one and I am glad to know about it.

I run Registry Cleaner on a regular basis, but I guess it was not able to remove the tool bar entries.
-Mike

[YoKenny]

***

Welcome to the forums, WV-Mike.   

Thanks!
The http://www.spyandseek.com/ site is a handy one and I am glad to know about it.

I run Registry Cleaner on a regular basis, but I guess it was not able to remove the tool bar entries.
-Mike

Do you run NTREGOPT after cleaning up the registry?
http://www.larshederer.homepage.t-online.de/erunt

ERUNT is good for backing up the registry.

[WV-Mike]

Do you run NTREGOPT after cleaning up the registry?
http://www.larshederer.homepage.t-online.de/erunt

ERUNT is good for backing up the registry.

Nope, never heard of it.
Will give it a try.

Any opinions on NTREGOPT vs. Registry Cleaner?

Thanks,
-Mike

[Lisandro]

Any opinions on NTREGOPT vs. Registry Cleaner?

The first is a registry file defragmentator.
The others are registry (faulty) keys cleaner.

[WV-Mike]

Any opinions on NTREGOPT vs. Registry Cleaner?

The first is a registry file defragmentator.
The others are registry (faulty) keys cleaner.

I see.
Thanks for the clarification.
-Mike

[Lisandro]

You're welcome WV-Mike