Java 6 Update 21 Installation Failed

[AdvancedSetup]

My fault. Save the following as hive files. Then zip and upload to rapidshare and send me a private message with the link to the files.

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

Make sure you zip them as they'll be quite large. Mine is 11MB even zipped.

[LuckyCat]

Okay done Oh I could save current user and all of its sub folders as one file but I couldnt do the same for local machine so I saved the subfolders seperatelty.

[AdvancedSetup]

Sorry just not enough time to review all of this tonight. Will try to take a look at it again for you tomorrow

[LuckyCat]

No problem, take your time Oh and I found this install log for one of my install attempts. It wasn't there before for some reason, it's different from the forced log we made so this might help.

java_install_sp.zip

[AdvancedSetup]

So far nothing spectacular in the registry and that log file doesn't make too much sense as it just stops from what looks like it could not find an approval or not for adding in some other sponsored software. Still looking.

[LuckyCat]

Oh I see, thats weird thanks for all the effort

[LuckyCat]

Have any luck so far? Should I see if I can find an older version of Java to install? Or is there an alternative to Java?

[AdvancedSetup]

No, nothing yet. Unfortunately not able to find any direct similar issue posted about it either.

You might try running the SFC System File Checker and see if that helps

[LuckyCat]

Hmm I see. What's SFC and how do I use it? Also what are your thoughts on the Revo Uninstaller program? It seems like this person here:

http://www.computing.net/answers/windows-x...ing/186709.html

had the same issue I did and this was the only thing that worked, should I give it a try?

[AdvancedSetup]

Certainly no harm in trying it. Its a reasonably well known uninstaller.

This link here discusses SFC in more detail

http://www.bleepingcomputer.com/forums/topic43051.html

[AdvancedSetup]

Please download a new fresh copy of Combofix and temporarily disable your Anti-Virus and then run the following please.

Then restart the computer and download a new version of Java and try to install it.

Download ComboFix from below:

Combofix download

Download an offline manual installation of Java 6 - 21

http://www.java.com/en/download/manual.jsp

Windows 7/XP/Vista/2000/2003/2008 Offline 15.9MB

Using your mouse, Highlight and then Right-click | Copy the entire contents of the Code box below, including blank lines

Registry::
[-HKEY_LOCAL_MACHINE\JavaSoft]
[-HKEY_LOCAL_MACHINE\JreMetrics]
[-HKEY_LOCAL_MACHINE\Classes\.java]
[-HKEY_LOCAL_MACHINE\Classes\.jar]
[-HKEY_LOCAL_MACHINE\Classes\CLSID\{5852F5ED-8BF4-11D4-A245-0080C6F74284}]
[-HKEY_LOCAL_MACHINE\Classes\CLSID\{CAFEEFAC-0013-0001-FFFF-ABCDEFFEDCBA}]
[-HKEY_LOCAL_MACHINE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[-HKEY_LOCAL_MACHINE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[-HKEY_LOCAL_MACHINE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[-HKEY_LOCAL_MACHINE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[-HKEY_LOCAL_MACHINE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[-HKEY_LOCAL_MACHINE\Classes\Installer\Products\4EA42A62D9304AC4784BF238120601FF]
[-HKEY_LOCAL_MACHINE\Classes\jarfile]
[-HKEY_LOCAL_MACHINE\Classes\JavaWebStart.isInstalled]
[-HKEY_LOCAL_MACHINE\Classes\JavaWebStart.isInstalled.1.6.0.0]
[-HKEY_LOCAL_MACHINE\Classes\TypeLib\{5852F5E0-8BF4-11D4-A245-0080C6F74284}]
[-HKEY_LOCAL_MACHINE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN]
[-HKEY_LOCAL_MACHINE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}]
[-HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\App Paths\javaws.exe]
[-HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3312061F00]
[-HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412061F00]
[-HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3512061F00]
[-HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612061F00]
[-HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4EA42A62D9304AC4784BF238120601FF]
[-HKEY_LOCAL_MACHINE\ControlSet001\Services\Eventlog\Application\JavaQuickStarterService]
[-HKEY_LOCAL_MACHINE\ControlSet003\Services\Eventlog\Application\JavaQuickStarterService]
Folder::
C:\Program Files\Java\
C:\Documents and Settings\Owner\Application Data\Sun

Open a new Notepad session (Do not use a Word Processor or WordPad). Click "Format" and be certain that Word Wrap is not enabled. Right-click | Paste the Code box contents from above into Notepad. Click File, Save as..., and set the location to your Desktop, and enter (including quotation marks) as the filename: "CFscript.txt" .

Using your mouse, drag the new file CFscript.txt and drop it on the Combo-Fix.exe icon as shown:

• Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.
  
• Disable your Antivirus software. If it has Script Blocking features, please disable these as well.
  
• A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix.
  When the scan completes Notepad will open with with your results log open. Do a File, Exit.
  

A caution - Do not run Combofix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

Post back the Combofix log on your next reply.

[LuckyCat]

Installation failed Here's my log:

ComboFix 10-09-25.07 - Owner 09/26/2010 18:27:33.7.2 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.274 [GMT -4:00]

Running from: c:\documents and settings\Owner\Desktop\ComboFix.exe

Command switches used :: c:\documents and settings\Owner\Desktop\CFscript.txt

AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

.

((((((((((((((((((((((((( Files Created from 2010-08-26 to 2010-09-26 )))))))))))))))))))))))))))))))

.

2010-09-12 15:43 . 2010-09-12 15:43 79488 ----a-w- c:\documents and settings\Owner\Application Data\Sun\Java\jre1.6.0_21\gtapi.dll

2010-09-12 15:43 . 2010-09-12 15:43 152576 ----a-w- c:\documents and settings\Owner\Application Data\Sun\Java\jre1.6.0_21\lzma.dll

2010-09-07 05:42 . 2010-09-04 06:07 16062240 ----a-w- c:\temp\jre-6u21-windows-i586.exe

2010-09-07 05:42 . 2010-09-07 05:42 -------- d-----w- C:\Temp

2010-09-01 21:20 . 2008-04-14 09:42 221184 ----a-w- c:\windows\system32\wmpns.dll

2010-09-01 21:12 . 2010-09-01 21:12 -------- d-----w- c:\windows\system32\scripting

2010-09-01 21:12 . 2008-04-14 09:42 32866 ------w- c:\windows\slrundll.exe

2010-09-01 21:12 . 2010-09-01 21:12 -------- d-----w- c:\windows\l2schemas

2010-09-01 21:12 . 2010-09-01 21:12 -------- d-----w- c:\windows\system32\en

2010-09-01 21:12 . 2010-09-01 21:12 -------- d-----w- c:\windows\system32\bits

2010-09-01 21:10 . 2010-09-01 21:13 -------- d-----w- c:\windows\ServicePackFiles

2010-09-01 21:10 . 2008-04-14 09:42 294912 -c----w- c:\windows\system32\dllcache\dlimport.exe

2010-09-01 21:03 . 2007-08-11 00:46 26488 ----a-w- c:\windows\system32\spupdsvc.exe

2010-09-01 21:01 . 2010-09-01 21:01 -------- d-----w- c:\windows\EHome

2010-09-01 16:18 . 2010-09-01 16:18 -------- d-----w- c:\program files\ERUNT

2010-08-30 17:59 . 2010-08-30 17:59 -------- d-----w- c:\documents and settings\LocalService\Application Data\Avira

2010-08-28 01:55 . 2010-03-01 14:05 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys

2010-08-28 01:55 . 2010-02-16 18:24 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2010-08-28 01:55 . 2009-05-11 16:49 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys

2010-08-28 01:55 . 2009-05-11 16:49 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys

2010-08-28 01:55 . 2010-08-28 01:55 -------- d-----w- c:\program files\Avira

2010-08-28 01:55 . 2010-08-28 01:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-09-01 21:15 . 2005-02-22 20:17 76487 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat

2010-09-01 16:08 . 2010-08-17 04:09 -------- d-----w- c:\program files\CCleaner

2010-08-29 15:24 . 2008-12-25 18:05 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

2010-08-26 19:02 . 2010-08-26 19:02 -------- d-----w- c:\program files\ESET

2010-08-25 20:50 . 2010-08-16 17:52 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-08-25 18:30 . 2010-08-16 23:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton

2010-08-25 18:28 . 2006-02-18 03:47 -------- d-----w- c:\program files\Common Files\Symantec Shared

2010-08-24 00:22 . 2006-02-18 04:12 -------- d-----w- c:\program files\Steam

2010-08-22 16:22 . 2006-10-09 03:52 -------- d-----w- c:\program files\Winamp

2010-08-22 16:20 . 2007-05-27 04:33 -------- d-----w- c:\program files\Starcraft

2010-08-22 16:19 . 2006-02-25 21:37 -------- d-----w- c:\program files\Return to Castle Wolfenstein

2010-08-22 16:18 . 2010-06-18 05:03 -------- d-----w- c:\program files\Realtek AC97

2010-08-22 16:18 . 2006-04-04 01:51 -------- d-----w- c:\program files\mobile PhoneTools

2010-08-22 16:18 . 2009-09-17 01:50 -------- d-----w- c:\program files\Microsoft

2010-08-22 16:18 . 2007-11-15 20:25 -------- d-----w- c:\program files\LG PC Suite 2

2010-08-22 16:17 . 2008-09-13 06:13 -------- d-----w- c:\program files\Proxifier

2010-08-22 16:17 . 2007-04-04 16:48 -------- d-----w- c:\program files\PowerPoint Viewer

2010-08-22 16:01 . 2006-09-08 01:13 -------- d-----w- c:\program files\DVD Decrypter

2010-08-22 15:56 . 2006-03-15 02:12 -------- d-----w- c:\program files\Doom 3

2010-08-22 15:53 . 2006-07-23 05:47 -------- d-----w- c:\program files\Common Files\Ntreev

2010-08-22 15:53 . 2007-06-05 01:36 -------- d-----w- c:\program files\BitTorrent

2010-08-22 15:52 . 2006-02-25 21:08 -------- d-----w- c:\program files\Quake III Arena

2010-08-17 19:49 . 2007-04-22 03:28 -------- d-----w- c:\documents and settings\Owner\Application Data\U3

2010-08-16 23:04 . 2010-08-16 23:04 -------- d-----w- c:\program files\Windows Sidebar

2010-08-16 23:03 . 2010-08-16 23:03 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller

2010-08-16 17:52 . 2010-08-16 17:52 -------- d-----w- c:\documents and settings\Owner\Application Data\Malwarebytes

2010-08-16 17:52 . 2010-08-16 17:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2010-08-08 07:08 . 2010-06-06 02:05 664 ----a-w- c:\windows\system32\d3d9caps.dat

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]

"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]

"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]

"UpdateManager"="c:\program files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 110592]

"dla"="c:\windows\system32\dla\tfswctrl.exe" [2004-03-25 122939]

"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-08-31 623960]

"SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]

c:\documents and settings\All Users\Start Menu\Programs\Startup\

Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R0 atiide;atiide;c:\windows\system32\drivers\atiide.sys [6/1/2004 5:02 AM 6016]

R0 SI3112r;Silicon Image SiI 3512 SATARaid Controller;c:\windows\system32\drivers\SI3112r.sys [5/12/2004 2:01 AM 97408]

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [8/27/2010 9:55 PM 135336]

S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]

.

.

------- Supplementary Scan -------

.

uStart Page = about:blank

FF - ProfilePath - c:\documents and settings\Owner\Application Data\Mozilla\Firefox\Profiles\ddqu81zm.default\

FF - plugin: c:\program files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll

---- FIREFOX POLICIES ----

c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2010-09-26 18:33

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(472)

c:\windows\system32\Ati2evxx.dll

.

Completion time: 2010-09-26 18:35:28

ComboFix-quarantined-files.txt 2010-09-26 22:35

ComboFix2.txt 2010-09-04 05:58

ComboFix3.txt 2010-08-31 17:48

ComboFix4.txt 2010-08-30 15:46

ComboFix5.txt 2010-09-26 22:25

Pre-Run: 55,384,190,976 bytes free

Post-Run: 55,383,355,392 bytes free

- - End Of File - - ECE64BEE9453836DFCDDB68C8A3CCBB9

[AdvancedSetup]

Please go ahead and remove Combofix. Click on START - RUN and type in COMBOFIX /UNINSTALL and allow it to remove itself.

I'm not really sure where else to go with this. I would hope or assume that someone over on one of the Sun Java forums might be able to help further.

[LuckyCat]

Done! Oh and I just tried Revo Uninstaller Pro and it worked I used it to remove the Java 6 10 update I could not uninstall before, it found some registry keys related to that program, deleted them and when I ran the Java 6 update 21 installer it worked Thanks for all your help and the hard work you put into solving this problem

[AdvancedSetup]

Very cool, that's great news. Thanks for the follow-up reply letting us know you got it going.

Cheers

[Haider]

I salute both

[LuckyCat]

No problem, thanks