Re: Error 0x800704DD and kb910341 FOUND

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

So, you unchecked the boxes on the System Startup page to protect WinLogon, then rechecked them again, but when Spybot was uninstalled the subkeys were still Disabled ?

You did the right thing, if the above is correct.
Deactivating all that was done by Spybot prior to uninstalling it is what the makers of it recommend.
Why it did not restore the subkeys to the state they were in prior to activating Spybot's 'protection' is a concern.

Frankly speaking, I *never* use any of Spybot's 'protections'.
It's just used to scan the system once in awhile and on infected client's systems to clean malware-related registry entries.

Thanks for posting back, Remi. If I'm correctly understanding what you posted, I can contact someone from Spybot and let them know of this possible issue.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============



Remi wrote:

Hi, MowGreen.

I did uninstall ZoneAlarm and also via Regedit all keys in the registry.
I ran different malware scan programms, non found.
But.... i found a registry backup in c:\docum..\allUsers\..data..\Spybot..\backups:
reglocal.reg sept. 16 2008 10:57
Here i found the folders \notify\ AND \notify_disabled
On that day/time i did several programms uninstall/reinstall, also Spybot
and Zonalarm
Especially one thing i now remember i did :-(((
In Spybot there is a possibility to deactivate programms starting with
systemstart
I am shure i did deactivate (shame on me)
Winlogon(Current system) crypt32chain crypt32.dll
Winlogon(Current system) cryptnet cryptnet.dll
Winlogon(Current system) cscdll cscdll.dll
Winlogon(Current system) ScCertProp wlnotify.dll
Winlogon(Current system) Schedule wlnotify.dll
Winlogon(Current system) sclgntfy sclgntfy.dll
Winlogon(Current system) SensLogn WlNotify.dll
Winlogon(Current system) termserv WlNotify.dll
Winlogon(Current system) wlballoon WlNotify.dll
I think all the trouble i got came from doing things the operator "Remi" did
without knowing excactly what he was doing.
He will never again make changes unless he fully understand whats about it.
Have a nice weekend and a lot of fun with Windows 7
Again i appreciated very much your help

Remi



"MowGreen [MVP]" wrote:

You're very, very welcome. Nice going, Remi. You took enough precautions
prior to fixing 'things' so that you could recover from any mistake.
Smart move !!

Sorry I've been tardy in replying but I've been playing with Windows 7 and
got way too deep into it.
You did a fine job here. BUT, I'm still perplexed as to why the SensLogn
subkeys were Disabled. If it was caused by ZoneAlarm, or the uninstall of
it, then that's some really bad coding.
Suggest you do an online scan for malware so that we can completely rule
it out. Use Internet Explorer and go here:
http://onecare.live.com/site/en-us/center/howsafe.htm

The scan will take some time to complete but it's worth the wait. <w>




.

Relevant Pages

  • Re: Loss of Icons in System tray (bottom right) with XP
    ... I did try Adaware and Spybot but I was unaware of that feature in the ... > can find a better way of uninstalling incd. ... those that are getting clobbered with the InCD uninstall - there will ... >> System Tray, ...
    (microsoft.public.windowsxp.customize)
  • RE: IncrediMail Xe and Search the Web
    ... > list that appeears to be for Search The Web, only something in the programme ... You should have no problem uninstalling incredimail unless the uninstall ... Ad-Awre SE and Spybot will do this just fine use them both.Also use CWShedder. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Spybot Search & Destroy recovery?
    ... I wouldn't worry too much about that recovery list of Spybot S&D. ... Uninstall it, ... With reference to "HijackThis" my advice is simple: get the log and send it ... ::: charlie R ...
    (microsoft.public.security)
  • Re: windows update KB890830 seems to cause internet explorer 6 problem
    ... > ahead and leave the thing uninstalled, particularly if you've got Spybot ... The MS AntiSpyware product is not deployed by Windows Update, ... Also note that there is no uninstall available for the KB890830 tool: ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.general)
  • Re: Registry entry removal during uninstall
    ... > Hi Mike, ... > Yes, it will remove them on uninstall also, the only problem is if your ... > application will create some subkeys of the key created by installer, ... >> I want to remove all registry entries that are created by a Pocket PC ...
    (microsoft.public.pocketpc.developer)