authentication package is unknown

[pablofg]

Hi there,

I hope someone here can give me a hand, because I have no clue how to fix this....

Since I last booted my computer, a new error showed up at the logon screen, saying that RRservice caused and error "Memory Can't be "Read".
After windows finished loading, I noticed that many programs didn't start and I found many services were not started and couldn't be either manually started.

I changed the RPC Service to "local user" instead of "local service" and now many more services load.

However I can't start IE(freezes), my fingerprint detector fails, VOIP Raider fails and some other services that I need to use keep saying that "authentication package is unknown".

I don't know what the reason can be, but I lately installed / deinstalled different programs & used several clean utilities.

By the way, Mozilla works perfect.

Attached link to Hijackthis.txt.

Thanks in advance.

 

[BadBigBen]

These need fixing:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Archivos de programa\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: (no name) - {45C2A50F-8F4A-496E-AF02-D0207525BF5A} - (no file)
O2 - BHO: Password Manager Browser Helper Object - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Archivos de programa\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O2 - BHO: (no name) - {D774CC51-65F2-4AA6-AEAC-5A1396D2F5D1} - (no file)
O4 - HKLM\..\Run: [Win32 System Spool] spoolsvc.exe
O20 - Winlogon Notify: ddcccax - ddcccax.dll (file missing)

Download:

CCleaner =

http://www.ccleaner.com

and clean out all TEMP files...

Malwarebytes AntiMalware (MBAM) and install it, run a quick scan first, then a FULL scan...

http://www.malwarebytes.org/mbam.php

VundoFix, and run it also...

http://vundofix.atribune.org/

The last two you may have to run in safemode, if MBAM does not install then rename the EXE (e.g. to TEST.EXE before DL (save as option))...




Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

How to ask a question, when posting them to a professional forum.

 

[pablofg]

Hi there,

Thanks for the info.

I was googling around and all people with similar problems to mine, seemed to have something to do with that trojan.Vundo

I run all cleaners and virus removing tools, but still didn't work.

I run combofix and it did the job. Now IE, Outlook, fingerprint software,etc work. However I still have some problems:

A) Outlook 2003 doesn't let me use Word as the default editor:

--------------------------------------------------
One or more activex controls could not be displayed because either:

1. your current security settings prohibit running activex
controls on this page, or
2. you have blocked a publisher of one of the controls.
-----------------------------------------------------

B) the Windows installer service has to be started manually everytime I want to install something.

Any ideas how to solve those problems??

I have currently installed Superantispyware and Avira Antivir.

Thanks in advance.

 

[BadBigBen]

I run combofix and it did the job.

that would have been my next suggestion... glad it did the job...

now I would do a check on the drive and the system files, to start with...

from a CLI window (Start >> RUN >> CMD >> [enter]), in the CMD window:

CHKDSK /F ( or /R)

let it run, it checks the file system and drive for errors...

then type:

SFC /SCANNOW

this checks the system files for corruptions, have your XP CD at hand...

about the OFFICE problem, have office check it's integrity, probably found under the TOOLS, EXTRA, or INFO tab...

about the Installer problem, DL the Installer Cleanup Utility from MS...

Description of the Windows Installer CleanUp Utility

http://support.microsoft.com/kb/290301

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

How to ask a question, when posting them to a professional forum.

 

[pablofg]

Hi, I did that but didn't work....

I think that it has something to do with Outlook not having the permits needed to access word or activeX or to start some services needed....

I think so, because at the begining of everything I had more and more access to programs, changing services to "start as localhost"

any clue??

 

[linney]

Put your Services back to what they should be.

Have a look around

http://www.blackviper.com

for all problems concerning Services. He even has files downloadable to restore default services.

Office 2003, Outlook, has a Detect and Repair option via the Help menu.

If they don't work you could try repairing windows by running it over itself. You will lose all your windows updates but your files will be untouched.

How to Perform an In-Place Upgrade (Reinstallation) of Windows XP (Q315341)

http://support.microsoft.com/support/kb/articles/q315/3/41.asp

 

[pablofg]

Thanks for the blackviper link.
I checked all my services and found out that these services weren't properly configurated:

* Remote Access Connection Manager
* DCOM Server Process Launcher

Probably the problem came from DCOM.

I then reconfigured Word in DCOM following these steps:

1. Choose Start > Run, enter Dcomcnfg and hit OK.

2. Find the entry for Word under Computers > My Computer > DCOM Config.

This entry might say “Microsoft Word Document”, “Word Document”, “Document”, or might just be the GUID for Winword.exe - in my case, it was the GUID {00020906-0000-0000-C000-000000000046}

3. Right-click on this entry and choose Properties.

4. Click on the Security tab

5. Under Access Permissions, if you currently have Customized access permissions, and you still need them, click on the “Edit” button, write down all the custom ones you have set. So you can reset them after the next step.

6. Now under Access Permissions, click “Use Default” and then the Apply Button. This will clear all the access permissions.

7. Now click “Customize” and the Edit button. Re-enter all the customized entries you wrote down in step #5 above.

And now everything works smooth!

Thanks for your help!

 

[BadBigBen]

Glad you got it up and running...

and thank you for posting what fixed it for you, so that others with similar problems have a place to start...


Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

How to ask a question, when posting them to a professional forum.