Will not install - error 1904

[Guest]

When I try to install, I get error 1904 for a number of files. For example,
gcAtniSpywareLibrary.dll failed to register. HRESULT=-2147220473.

I believe some malware has installed a service or system component. This is
because there is a taskmanager SYSTEM process I do not recognize and cannot
kill. It spawns off odd named apps. If you kill them, a new one appears
instantly. I think it is preventing AntiSpyware from running.

One possible candidate is "Lzeegwiz", which does not appear, but Windows
complains about when restarting.

Any ideas?

 

[Dave M]

Hi Paul,
You didn't say if you were trying to install from an Administrator account,
we've seen this error on installation/repair attempts from limited user
accounts.

 

[Guest]

Hi Dave. I am administrator (unfortunately, so is my daughter, which is how
we got into this mess - I will reassign her as a user who cannot install
things!). I can perform any task. This appears to be the result of malware
preventing this. I should note that I had MS AntSpyware on there, but it was
trashed by something, so I got the error 101. I tried the "Change" from
Add/remove, but it got these same DLL errors. I have subsequently installed
other system software with no problems, so it appears to be something
targetting these, or is perhaps left over problems? As I say, I definitely
see malware running, and it reboots the machine if I attempt certain actions.
I also note that if I run msconfig and try to remove some of these things
from the startup list, they are back after a reboot.

Thanks, Paul

 

[Dave M]

Hi Paul;
Let me ask the Admin question another way. Was your daughter the original
installer for Ms AntiSpyware? There are some registry permissions set for MSAS
that only allow the original installer to re-install, update install,
un-install. If that's the case you need to perform these actions logged in as
that user with full Admin authority. Once you've successfully uninstalled from
Add/Remove and deleted the old C:\program files\Ms AntiSpyware folder, you
should be able to do a fresh install from your own Admin account. I have no
doubt as to your description of the malware interfering with the install at this
point, so your probably going to have to carefully re-install it, perhaps
running CCleaner to clean-up your temp files, installing to a non-standard
location (i.e..C:\program files\msas), and perhaps doing that re-install from a
CLEAN boot to prevent any interference from the malware. Let us know how you
make out.

Ccleaner - http://www.ccleaner.com

From Jim Byrd:
Try installing from a "Clean Boot". From my Blog, Defending Your
Machine, addy in my Signature below:

#########IMPORTANT#########

Show hidden files and run all of the following removal tools from Safe mode
or a "Clean Boot" when possible, logged on as an Administrator. BEFORE
running these tools, be sure to clear all Temp files and your Temporary
Internet Files (TIF) (including offline content.) Reboot and test if the
malware is fixed after using each tool.

HOW TO Enable Hidden Files
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339

Clean Boot - General Win2k/XP procedure, but see below for links for other
OS's (This for Win2k w/msconfig - you can obtain msconfig for Win2k here:
http://www.3feetunder.com/files/win2K_msconfig_setup.exe ):

1. StartRun enter msconfig.

2. On the General tab, click Selective Startup, and then clear the 'Process
System.ini File', 'Process Win.ini File', and 'Load Startup Items' check
boxes. Leave the 'boot.ini' boxes however they are currently set.

3. In the Services tab, check the "Hide All Microsoft Services" checkbox,
and then click the "Disable All" button. If you use a third party firewall
then re-check (enable) it. For example, if you use Zone Alarm, re-check the
True Vector Internet Monitor service (and you may also want to re-check
(enable) the zlclient on the Startup tab.) Equivalent services exist for
other third party firewalls. An alternative to this for XP users is to
enable at this time the XP native firewall (Internet Connection Firewall -
ICF). Be sure to turn it back off when you re-enable your non-MS services
and Startup tab programs and restore your normal msconfig configuration
after cleaning your machine.

4. Click OK and then reboot.

For additional information about how to clean boot your operating system,
click the following article links to view the articles in the Microsoft
Knowledge Base:

310353 How to Perform a Clean Boot in Windows XP
http://support.microsoft.com/kb/310353
281770 How to Perform Clean-Boot Troubleshooting for Windows 2000
http://support.microsoft.com/kb/281770/EN-US/
267288 How to Perform a Clean Boot in Windows Millennium Edition
http://support.microsoft.com/kb/267288/EN-US/
192926 How to Perform Clean-Boot Troubleshooting for Windows 98
http://support.microsoft.com/kb/192926/EN-US/
243039 How to Perform a Clean Boot in Windows 95
http://support.microsoft.com/kb/243039/EN-US/
#########IMPORTANT#########

 

[Guest]

I did not install under my daughter's account since it was heavily infected
with Spyware/malware (was deleting adaware at that time) and so I used my
account.

Be aware that I completely uninstalled the MSAS app after getting all those
errors on "Change", which I did because it was crashing (with "Unexpected
error"). I even erased the left over directory and the like (although I note
some other postings mention other files which may be left around).

I note that one problem is that my account does not appear when I do a safe
boot (I will try clean boot to see if different). Instead, I get
"administrator" instead of my named account. Not sure if the same one. I was
planning on enabling the MS installer under safe boot to then install, but it
sounds like I may get the same problem if it considers "administrator" to be
different than "paul".

I will let you know how I get on.

One thing this raises is that one needs to be able to get MSAS installed (or
updated) in a safer environment more easily. If one is installing after a
heavy infection or after something has killed MSAS (you are a big target
now), it needs to be as easy as possible. Perhaps you need a "safe install
wrapper". So, one can get that onto a CD/Flashdisk or onto the disk via
network (if still working) and then it sets up for a reboot/install in a safe
environment.

Thanks, Paul

 

[Guest]

Paul / Dave, I have exactly the same problem than Paul. I also suspect that
my computer is infected by some kind of malware that prevents MSAS from
installing and running properly. Even worse, when I want to run cleaning
software like CWShredder or CClean these two programs are not allowed to run.


I'll try to do this after a clean boot I'll let you know how it goes.

Thanks, Hector

 

[Dave M]

Ok Hector;
We never heard back from Paul... Though I expect we would have if he was still
having problems, give it a go and let us know, make sure your installing from an
Admin authority account... but not necessarily Administrator itself. Thanks.

 

[Guest]

I am having the same installation problem. I am getting errors registering
DLLs but I cannot use the original installer accout because it does no longer
exists at the PC. I tried with the administrator account without luck, any
help???

 

[Dave M]

Hi Marcos;
Don't think I've ever encountered that one before. My initial thought was to
temporarily recreate the installing account with Admin authority then delete
MSAS and re-install from another current Admin account, but I'm not sure of the
complete consequences of doing that. I'll bet Bill Sanderson has seen it during
his time in here though... Bill, any thoughts?