IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Kaspersky AntiVirus wont' install
Computer Redicar...
post 25.02.2014 03:44
Post #1


Newbie
*

Group: Members
Posts: 5
Joined: 20.12.2007




Please help. Here is my GSI log:

http://www.getsysteminfo.com/read.php?file...e4832ea1473dd84

Go to the top of the page
 
+Quote Post
richbuff
post 25.02.2014 04:02
Post #2


Are You Kidding?
*****************

Group: Global moderators

Posts: 1000442
Joined: 14.06.2007




You have Kaspersky leftovers showing up in your log. We need to take a closer look. Please attach the zipped virusinfo_syscure.zip; instructions, see: http://forum.kaspersky.com/index.php?s=&am...st&p=678334


--------------------
Please see the Important topics, located at the top of this section, and at the top of other sections of this forum.
Go to the top of the page
 
+Quote Post
Computer Redicar...
post 25.02.2014 21:12
Post #3


Newbie
*

Group: Members
Posts: 5
Joined: 20.12.2007




Thanks for the help.

Assuming you mean this file:

Attached File  KL_syscure.zip ( 52,33K ) Number of downloads: 4
Go to the top of the page
 
+Quote Post
richbuff
post 26.02.2014 01:21
Post #4


Are You Kidding?
*****************

Group: Global moderators

Posts: 1000442
Joined: 14.06.2007




You're welcome.

Please review the quote below. The instructions need to be followed carefully. If you don't feel up to it, please post back to let me know, and I will provide detailed instructions for contacting Tech Support.

QUOTE(Rodion Nagornov @ 20.02.2014 01:12) *
In order to manually delete Kaspersky, please do the following:

1) Make sure the following objects (folders. files, registry keys) are not present in your operating system:

> Folders:
- C:\Program Files\Kaspersky Lab
- C:\Program Data\Kaspersky Lab
- C:\Program Files (x86)\Kaspersky Lab (for 64-bit OS)

To view the contents of \Program Data\ please enable the option to view hidden files and folders.
In order to do so, follow the guide: http://support.kaspersky.com/3580

Files:
- C:\Windows\system32\drivers\kl1.sys
- C:\Windows\system32\drivers\kl2.sys
- C:\Windows\system32\drivers\klelam.sys
- C:\Windows\system32\drivers\klif.sys
- C:\Windows\system32\drivers\klim5.sys
- C:\Windows\system32\drivers\klim6.sys
- C:\Windows\system32\drivers\klmouflt.sys
- C:\Windows\system32\drivers\klfltdev.sys
- C:\Windows\system32\drivers\klflt.sys
- C:\Windows\system32\drivers\klkbdflt.sys
- C:\Windows\system32\drivers\kltdi.sys
- C:\Windows\system32\drivers\klwfp.sys
- C:\Windows\system32\drivers\kneps.sys

Registry keys:
- HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AVP
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\klif
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kl1
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kl2
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\klim5
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\klim6
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\klmouflt
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\klflt
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\klkbdflt
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kltdi
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kneps
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\klfltdev

Same as above for: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001 and HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002.

To open the registry editor, please open the command prompt, enter “regedit” and press Enter

> Delete the value of klmouflt (only value, leave the rest) from key UpperFilters of the registry branch HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96F-E325-11CE-BFC1-08002BE10318}
> Delete the value of klkbdflt (only value, leave the rest) from key UpperFilters of the registry branch HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}
> Delete the value of klfltdev ((only value, leave the rest) from key UpperFilters of the registry branch HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class, if this value will be found anywhere

2) Download Kavremover utility from the following support article: http://support.kaspersky.com/common/service.aspx?el=1464
3) Reboot the PC in safe mode: http://support.kaspersky.com/493 and launch the kavremover utility to delete Kaspersky Internet Security.
If Kavremover automatically detects traces of Kaspersky Internet Security or any Kaspersky product, it will be automatically selected in the bottom dropdown menu of Kavremover. If it doesn’t detect any traces of installed Kaspersky products, please, select Kaspersky Pure manually from the dropdown menu in Kavremover and perform the cleanup.


When done, install Kaspersky Update databases > reboot. Any better?


--------------------
Please see the Important topics, located at the top of this section, and at the top of other sections of this forum.
Go to the top of the page
 
+Quote Post
Computer Redicar...
post 26.02.2014 03:14
Post #5


Newbie
*

Group: Members
Posts: 5
Joined: 20.12.2007




QUOTE(richbuff @ 25.02.2014 16:21) *
You're welcome.

Please review the quote below. The instructions need to be followed carefully. If you don't feel up to it, please post back to let me know, and I will provide detailed instructions for contacting Tech Support.
When done, install Kaspersky Update databases > reboot. Any better?


None of the items listed were present on my system.
The removal tool did not detect any Kaspersky products.

Attached File  nodetect.PNG ( 35,69K ) Number of downloads: 9


Interestingly when the installer starts it says "Install Without Javascript"
Not sure if that means anything..

Go to the top of the page
 
+Quote Post
richbuff
post 26.02.2014 05:12
Post #6


Are You Kidding?
*****************

Group: Global moderators

Posts: 1000442
Joined: 14.06.2007




Are you installing from the boxed CD? If yes, please instead download the installer from links that are posted in the Important topics.

Any better?

If still no go, please contact Tech Support and send them your installation logs. Instructions, please see: http://support.kaspersky.com/general/dumps/2042 and please send your GSI report, too.


"Install Without Javascript": Please export Registry export: HKEY_LOCAL_MACHINE\SYSTEM and send it to Tech Support. Instructions, please see: http://support.kaspersky.com/common/service.aspx?el=7507



--------------------
Please see the Important topics, located at the top of this section, and at the top of other sections of this forum.
Go to the top of the page
 
+Quote Post
Rodion Nagornov
post 26.02.2014 11:15
Post #7


Training&Certification Manager
*************

Group: Admin
Posts: 3725
Joined: 23.11.2011
From: Moscow, Russia




QUOTE(Computer Redicare @ 26.02.2014 03:14) *
None of the items listed were present on my system.
The removal tool did not detect any Kaspersky products.
Interestingly when the installer starts it says "Install Without Javascript"
Not sure if that means anything..

Please create a Windows Restore point before proceeding:

Windows XP: http://support.microsoft.com/kb/948247
Windows Vista/ 7/8: http://windows.microsoft.com/en-US/windows...a-restore-point

Please run the AVZ utility, go to “File” -> "Custom Scripts";
Copy and paste the following script in the utility and run it:

begin
SetAVZGuardStatus(True);
SetAVZPMStatus(True);
SearchRootkit(true, true);
QuarantineFile('c:\windows\system32\tiltwheelmouse.exe','');
DelCLSID('{dd230880-495a-11d1-b064-008048ec2fc5}');
SetServiceStart('utg0nde2', 4);
DeleteService('utg0nde2');
StopService('utg0nde2');
SetServiceStart('7500380drv', 4);
DeleteService('7500380drv');
StopService('7500380drv');
BC_DeleteSvc('7500380drv');
DeleteFile('C:\Windows\system32\DRIVERS\7500380drv.sys');
BC_DeleteFile('C:\Windows\system32\DRIVERS\7500380drv.sys');
BC_DeleteSvc('utg0nde2');
DeleteFile('C:\Windows\system32\Drivers\utg0nde2.sys');
BC_DeleteFile('C:\Windows\system32\Drivers\utg0nde2.sys');
BC_ImportDeletedList;
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot please run the following script:

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.

A Quarantine.zip archive will be created in AVZ folder. Please attach it to your reply.
Try to install KIS again.
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

 



Lo-Fi Version Time is now: 24.11.2014 07:48