NAV2003 issues...reinstall not working, can't load active X controls

Welcome to Majorgeeks!

Please read the sticky threads. No logs should be posted inline and HijackThis logs should not be attached unless the READ & RUN ME FIRST Before Asking for Support sticky thread steps have been completed. HijackThis is not a cure all and it is not a malware scanner/detection tool. It is a tool that helps with malware removal but it is not the first thing that someone should be using especially for your problem.

You problem is more than likely not even malware related. Do you still have a paid subscription to get updates? Your AV is 3 years old.

If you want to persue the malware course of action, you will have to follow the steps below. Your log did show a few things but nothing major that would cause your problems. But as I said before HJT logs are not a cure all and they actually show very little.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

• Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
• Make sure you check version numbers and get all updates.
• Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

• After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

​

• When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
  • Bitdefender
  • Panda Scan
  • HijackThis

.

 

Re: Windows keeps blocking my extraction of Hijack This...even after clicking unblock

Just download the one from the below link and put it in the proper folder indicated in step 7.

http://216.180.233.162/~merijn/files/HijackThis.exe

 

Well Symantec did not uninstall properly (typical behavior). We will need to remove it manually.

Click on Start, then Run ... type services.msc into the box that opens up, and press 'OK'. On the page that opens, scroll down to Symantec Network Drivers Service (if that is not found, look for the short name: SNDSrvc)... then right click the entry, select 'Properties' and press 'Stop Service'. When it shows that it is stopped, next please set the 'Start-up Type' to 'Disabled'. Press 'OK' until you get back to Windows.

Now repeat the about stop and disable for the following services:
Automatic LiveUpdate Scheduler
LiveUpdate


Next, run HJT, but instead of scanning, click on the "None of the above, just start the program" button at the bottom of the choices. At the lower right, click on the 'Config" button, and then the Misc tools' button ... select 'Delete an NT Service" ... copy/paste the following into the box that opens, and press "OK":

SNDSrvc

Now repeat the Delete NT Service steps for the below services:
Automatic LiveUpdate Scheduler
LiveUpdate

If you get any error messages (like about something being critical to your system) just ignore it and continue.

Now exit HJT but do not reboot when it tells you it needs to. We will do that further down after running HJT again to fix some other items.

Make sure viewing of hidden files is enabled (per the tutorial).

Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now (the O23 lines should already be gone. We are just double checking):

O2 - BHO: (no name) - {77701e16-9bfe-4b63-a5b4-7bd156758a37} - (no file)
O4 - HKCU\..\Run: [taskdir] C:\WINDOWS\system32\taskdir.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)

After clicking Fix, exit HJT.
Boot into safe mode and use Windows Explorer to delete:
C:\PROGRAM FILES\MediaGateway <--- the whole folder
C:\Program Files\Symantec <--- the whole folder
C:\WINDOWS\system32\parad.raw.exe
C:\WINDOWS\system32\taskdir.exe
C:\WINDOWS\system32\taskdir.dll

If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. If it is, uncheck it and try again. Other wise open Task Manager and kill the process if running then delete the file.

Now if running Win XP goto c:\windows\Prefetch and delete all files in this folder.
Now run Ccleaner (installed while running the READ ME FIRST).

Make sure you tell me how things are working now.

Reminder Note: Once we have determined you are malware free you will need to disable System Restore, reboot, and re-enable system restore per step 1 of the READ & RUN ME. This only applies to if using WinXP or WinMe.

 

Okay post your results and a new HJT log as requested when you finish up!

 

This one I cannot help you with. I do not play games and have no idea what that site is looking for. It is definitely not a malware problem though. Try asking in the Software Forum (or Game Forum). Some one there may know what that site needs.

Your log is clean. If you are not having any other malware problems, it is time to go back to step 1 of the READ & RUN ME to Disable System Restore which will flush your Restore Points. Then reboot and enable System Restore to create a new clean Restore Point.

After that, you should work thru the below link:

How to Protect yourself from malware!

 

You're welcome. Surf safely!

 

Please run the two below scans and attach the logs:

Running Ewido Anti-Malware

Running WinPfind by OldTimer

Then also do the below:

Download HOSTER and then follow the below steps.

• Unzip Hoster to a convenient folder such as C:\Hoster
• Run Hoster.exe, click Restore Original Hosts and then click OK.
• Click the X to exit the program

 

Yes! That is correct. WinPfind is not a cleaner. It only scans and reports various useful pieces of information to us.

 

Did you run Hoster too?

Did you download and install the below screen savers? Do you use them? Are you sure you can trust them? Be careful with screen saver downloads from the internet. Many come with hidden undesireable baggage.

Are you still having problems?

 

Okay! Let me know if it happens again. And note what you are doing when it happens. Is more than one browser window open? What sites are you on? What other programs are opened and running?