Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Xxx.exe Has Encountered A Problem - Message On Any Install


  • Please log in to reply
14 replies to this topic

#1 hlbinternational

hlbinternational

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 22 March 2008 - 04:06 PM

Hello Bleeping Computer,

Having removed a particularly stubborn version of 'virtumode' with excellent help here from Teacup61 my system was clean...clean.

I uninstalled Norton IS and then used the Norton Removal Tool - no problems.

Next I ran an XP Disk Defrag - no problems.

Then I tried to install Norton IS 2007 from a known good 3-user CD.

When the CD autoplays the NIS Install panel comes up OK.

I choose install...

and then immediately get a box up saying

"Setup stub has encontered a problem and needs to close...Please tell Microsoft etc...etc"

I click Don't Send and it carries on installing.

Then when it's mostly done the same message box pops up

"Setup stub has encontered a problem and needs to close...Please tell Microsoft etc...etc"

I click Don't Send...and the installation aborts and I'm left with a part installed NIS product.

I have then used Norton Removal Toool to remove it.

Tried to re-Install but exactly the same thing happens.


Next I downloaded AVG and tried to install that - same problem except that the program in the message is the AVG exe.

I have looked all over and found the drwtsn32.log which contains the data shown at the end of this post each time I try and install.

I have re-registered msi installer at 3.1 - no change.

I have run sfc /scannow - no change.

I have tried going back with system restore - no change.

MalwareBytes Anti Malware runs clean.

Hijack This log is clean.


Any help or advice would be much appreciated please.

Many Thanks

Andy

DRWTSN32.LOG
Application exception occurred:
App: D:\Stub.exe (pid=2456)
When: 3/22/2008 @ 11:05:01.406
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: DBZDWT1J
User Name: Edmundo
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 15 Model 4 Stepping 1
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Edmundo

*----> Task List <----*
0 System Process
4 System
608 smss.exe
660 csrss.exe
684 winlogon.exe
728 services.exe
740 lsass.exe
924 svchost.exe
992 svchost.exe
1032 svchost.exe
1128 svchost.exe
1156 svchost.exe
1324 spoolsv.exe
1456 AppleMobileDeviceService.exe
1468 WLService.exe
1524 WLanCfgG.exe
1684 svchost.exe
1708 Explorer.EXE
1728 CTsvcCDA.exe
1784 LSSrvc.exe
1812 mdm.exe
1928 svchost.exe
140 MsPMSPSv.exe
948 alg.exe
788 smax4pnp.exe
1492 IntelMEM.exe
1500 tfswctrl.exe
1588 LVCOMSX.EXE
1628 hkcmd.exe
1484 vsnpt513.exe
1388 PRISMSVR.EXE
2056 rundll32.exe
2096 CTSysVol.exe
2108 iTunesHelper.exe
2128 DVDTray.exe
2144 DVDLauncher.exe
2212 MsnMsgr.Exe
2228 ctfmon.exe
2244 GoogleToolbarNotifier.exe
2292 TransferAgent.exe
2376 Monitor.exe
2424 hpohmr08.exe
2468 hpotdd01.exe
2652 hpoevm08.exe
2796 hpoSTS08.exe
2988 taskmgr.exe
3072 iPodService.exe
3480 wscntfy.exe
3516 wuauclt.exe
2336 NOTEPAD.EXE
2456 Stub.exe
2780 SymSetup.exe
2808 Error 0x80070005
2948 msiexec.exe
2596 drwtsn32.exe


BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:10:37 PM

Posted 22 March 2008 - 06:09 PM

Try removing it again. Then download the Windows Installer Cleanup Utility Open it and check the boxes that refer to AVG or Norton and run it. Then try redownloading the AV program again.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 hlbinternational

hlbinternational
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 23 March 2008 - 02:38 PM

Hello there Mark,

Many Thanks for your help and suggestion - I will follow up shortly and post back :thumbsup:

I like you 'laptop' picture :flowers:

Andy

#4 hlbinternational

hlbinternational
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 23 March 2008 - 03:50 PM

Try removing it again. Then download the Windows Installer Cleanup Utility Open it and check the boxes that refer to AVG or Norton and run it. Then try redownloading the AV program again.



Hello Mark,

Thankfully the Installer Cleanup program installed OK (no "has encountered a problem" message).

I ran it up - but no entries for ;

AVG
Liveupdate
Norton
Symantec

and none in Add/Remove programs before I ran Installer Cleanup. :flowers:

Andy :thumbsup:

#5 hlbinternational

hlbinternational
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 23 March 2008 - 04:57 PM

Hello again Mark,

I have tried to install AD Aware 2007 and got the same error message;

"ADAware.exe has encontered a problem...."

I took an HJT log wilst the message was up and have posted the final entries of the Running Processes below.

I then cancelled the install and ran another HJT log, final entries of the Running Processes below.

I notice that there are 3 different instances of msiexec.exe during the install, and 1 when nothing is installing - is this normal ?

Many Thanks

Andy :thumbsup:

AD AWARE INSTALL LOG
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Edmundo\Desktop\EDWARD DOWNLOADS\AD AWARE 2007\aaw2007.exe
C:\WINDOWS\system32\MSIEXEC.exe
C:\WINDOWS\system32\dwwin.exe
C:\WINDOWS\system32\MsiExec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe


NORMAL NON-INSTALL HJT LOG
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe


#6 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:10:37 PM

Posted 23 March 2008 - 05:45 PM

I won't respond to HJT logs, that's not my area, but I will tell you you can only have one msiexe.exe at one time. It sounds like the Windows Installer is corrupt. You can repair or install a fresh one following these instructions
http://support.microsoft.com/default.aspx?...b;EN-US;Q315346
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#7 hlbinternational

hlbinternational
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 23 March 2008 - 05:56 PM

I won't respond to HJT logs, that's not my area, but I will tell you you can only have one msiexe.exe at one time. It sounds like the Windows Installer is corrupt. You can repair or install a fresh one following these instructions
http://support.microsoft.com/default.aspx?...b;EN-US;Q315346


Thanks Mark,

I'm sorry I wasn't trying to circumvent the HJT Forum but just using it as a tool to show me what's running - so that I can show you ! I'll investigate multiple msi next.

Thanks again for your help so far - I'l post back later.

Best Wishes

Andy :thumbsup:

#8 hlbinternational

hlbinternational
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 24 March 2008 - 08:46 AM

Hello again,

Right I have re-registered the Windows Installer, and then downloaded and re-installed it - all with no change to the symptoms :flowers:

Further detective work shows the following in the Event log (Application):

For Ad-Aware 2007
Appliocation Error
Event ID: 1000
Faulting Application aaw2007.exe version 7.0.2.6
Fauling module: unknown
Fault Address: 0x1000640e

For Norton IS 2007
Appliocation Error
Event ID: 1000
Faulting Application stub.exe
Fauling module: unknown
Fault Address: 0x1000640e

Also for a particular command from 'RUN' (can't remember which).

Appliocation Error
Event ID: 1000
Faulting Application control.exe
Fauling module: unknown
Fault Address: 0x1000640e

The interesting thing is they all have the same Fault Address of 0x1000640e


Doeas anyone have any ideas please ?

As always Many Thanks for your help.

Andy :thumbsup:

#9 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:10:37 PM

Posted 24 March 2008 - 12:43 PM

Do you have a restore point before all this happened where you can go back to?
Or do you have your XP CD? You could try running sfc /scannow
http://support.microsoft.com/kb/310747
http://www.bleepingcomputer.com/forums/t/43051/how-to-use-sfcexe-to-repair-system-files/
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#10 hlbinternational

hlbinternational
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 24 March 2008 - 01:45 PM

Hello Mark - Thanks for your suggestions.

Before starting this topic;

I went back to a Restore Point - No change.

I ran sfc /scannow - No request for the XP CD (which I have), so it either used the i386 folder or didn't need any files.

I could try sfc again having re-named the i386 folder to force it to call for the XP CD if needed.

What's really bugging me is that the rest of the system really flies with no problems.

I'm going to try an online Trend Micro scan to confirm it's still clean...

and then I'm just a step away from an XP 'Repair Install'.

I'm begining to wonder if there's a hardware problem I'm not seeing.

What do you think please ?

Andy :thumbsup:

#11 hlbinternational

hlbinternational
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 27 March 2008 - 04:31 AM

Hello again,

Right since last time I have;

Taken a new Restore point.

Restored to the earliest Restore point I have (after removing my Virtumonde problem & before my Defrag) - still get "encountered a problem" message.

Undone the last Restore back to current - still go the message.

Run a Memory Checker - tested OK - still get the problem message.

Renamed i386 on the C drive.

Loaded i386 from my XP SP2 slipstreamed CD.

Run sfc /scannow using that new i386

Re install Ad-Aware 2007/nIS etc - still get the problem message.

Does anyone have any other suggestions please ?

Many Thanks

Andy :thumbsup:

#12 hamluis

hamluis

    Moderator


  • Moderator
  • 55,874 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:37 PM

Posted 27 March 2008 - 08:00 AM

I may have missed it...but have you considered doing a repair install of XP?

There is no guarantee of it righting whatever is wrong with the system...a repair cannot overcome hardware or malware issues...but it's the last step I consider just before I do a clean reinstall.

I've never been infected...but if I were, I think that a clean install would be the only way that I could be sure that I had a clean sheet, since it's hard to pinpoint exactly what damage may have been done by malware and cleanup efforts. It doesn't really take much to damage system and other files.

Louis

#13 hlbinternational

hlbinternational
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 27 March 2008 - 08:54 AM

I may have missed it...but have you considered doing a repair install of XP?


Hello Louis,

Yes it's my penultimate step - but I'm trying to avoid it if I can !

Will it preserve my non-MS applications that have been installed ro you know ?

Many Thanks

Andy

#14 hamluis

hamluis

    Moderator


  • Moderator
  • 55,874 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:37 PM

Posted 27 March 2008 - 11:54 AM

A repair install will preserve and have no impact on all data files and program files installed.

It will replace/remove all system files and replace system files with whatever version is reflected on the CD used.

All critical updates that came after SP2 (assuming that the CD includes SP2) issuance will have to be reinstalled from the WinUpdate website. This is normally no problem if the user has broadband, but is a pain if on dialup.

And it keep all emails/address books, etc. intact, even though IE 7 may be replaced by IE 6 (IE 7 is a critical update which came after SP2).

How to perform a repair installation of Windows XP if Internet Explorer 7 is installed - http://support.microsoft.com/?kbid=917964

A repair install should take around 35 minutes from start to finish...updating critical updates will take longer and should be done as soon as the install is complete and all defense mechanisms (firewall, AV, anti-malware programs) are seen to be working properly.

Louis

#15 hlbinternational

hlbinternational
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 10 April 2008 - 07:19 AM

Hello Mark & Louis,

Many Thanks for taking the time to help me out, I appreciate it.

I think this topic can now be closed - I have finally bitten the bullet and done a clean XP Install :flowers: :trumpet: :inlove:

I'm sure the problem was to do with the MS Installer (as Mark suggested) but no amount of 'fixing' would cure it.

SFC didn't fix it - nor did XP Repair install (was quite impressive though) and along the way I went into the depths of Windows more than ever (including Group Policies and the DLL cache...) - I'm going to call it training :thumbsup:

The machine is now clean as a whistle, has little superfluous software and runs real fast.

Thanks again Bleeping Computer.

Andy :cool:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users