lz32.dll error message

[mrsachemtiger]

I'm attempting to install some new software I purchased on CD on my T61p running Vista Business and I'm getting the following error message:

Setup.exe – bad image [title line of dialogue box]
C:\windows\system32\LZ32.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.

It installed fine on my husband's xp machine. I contacted the software vendor and their answer was:

"If your husband was able to install it recently to XP, then it is likely that the CDs are not damaged. We haven't seen this error message before so we think this may be a problem with your Windows Vista. Show this error message to your Windows support people. They may be able to repair the LZ32.DLL file."

Since this is my "home" computer, I don't have Windows support people.

I've looked around online and can't find any solutions -- microsoft's knowledge base article applies to Windows 95 and 98.

Any suggestions? Last time I called Lenovo for support on a different issue they immediately jumped to "that must be a software problem and that's not covered by your warrenty" (and promptly hung up on me) so I thought I'd try here first.

Thanks much!

[GomJabbar]

Try running sfc /scannow from a command prompt. This checks the integrity of the Windows system files. This will take a few minutes. If the bad file is on the CD or DVD, then you need to get a new copy.

It is also possible that your computer has been infected with malware. If the above solutions don't work, run Malwarebytes' Anti-Malware from Windows SAFE MODE to check for malware. Press F8 at the beginning of the boot sequence to get the SAFE MODE boot menu option.

http://download.cnet.com/Malwarebytes-A ... 04572.html

[Marin85]

You can download this .dll right from here. Place it under the required path, and everything should run fine (provided you don´t have issues like the ones GomJabbar is referring to). BTW, do you use any registry cleaners on that machine?

Cheers,

Marin

[mrsachemtiger]

Thanks so much for the replies.

I ran scannow. The results said "windows resource protection found corrupt files but was unable to fix some of them. Details are included in the cbs.log (which is 2000 pages long). I clueless about those log results.

I ran Anti-Malware (multiple times) and the results said there are 5 infected registry keys, but they do not get removed on reboot. Here's the last log:

Malwarebytes' Anti-Malware 1.35
Database version: 1932
Windows 6.0.6001 Service Pack 1

4/2/2009 7:38:46 AM
mbam-log-2009-04-02 (07-38-44).txt

Scan type: Quick Scan
Objects scanned: 61546
Time elapsed: 2 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 5
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{08165ea0-e946-11cf-9c87-00aa005127ed} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{7d559c10-9fe9-11d0-93f7-00aa0059ce02} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{7fc0b86e-5fa7-11d1-bc7c-00c04fd929db} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{abbe31d0-6dae-11d0-beca-00c04fd940be} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{f5175861-2688-11d0-9c5e-00aa00a45957} (Trojan.BHO) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

******

How do I get rid of these infected registry keys? Again, thank you SO much for your help.

[GomJabbar]

I suggest you go to the following forum and ask for help over there. They specialize in this sort of thing.

http://www.hijackthis-forum.de/english-help/

[GomJabbar]

I just found another user with Trojan.BHO on the following site. Apparently they were able to help him.

http://www.bleepingcomputer.com/forums/ ... 10124.html

[mrsachemtiger]

I've gotten rid of the trojan.bho. I think it's odd that none of my prevention programs were waving red flags: Spybot S&D with Tea Timer, CCleaner, Windows Defender, AVG Free, secunia.

The original problem remains with lz32.dll. I can't replace it with the downloaded version (which has an older date) because I don't have permission. I tried editing permissions by right-clicking on the file properties, but apparently haven't found the right combination. I'm hesitant to try changing too many options to "full control" to get it to work -- don't want to invite more problems!

Any more advice?

Thank you!

[GomJabbar]

Try this: Boot up in SAFE MODE (press F8 at the beginning of the boot sequence to get the SAFE MODE boot menu). Rename the original lz32.dll to lz32.old. If you need to, right-click on the file and choose Properties > Security, you can change permissions there. Next copy the downloaded lz32.dll to the directory where the original one was. You should probably see what the permissions were on the original file and apply the same permissions to the downloaded file, but this is a guess. Reboot and see if your downloaded file is the one listed in the directory.

[mrsachemtiger]

So far I haven't made any real progress fixing this problem.

Even when I boot in safe mode and run as administrator, access is denied for replacing or renaming the lz32.dll.

Venting alert:
I did call Lenovo support and the guy was as helpful as he could be under the circumstances, since they don't support Windows. And the microsoft web site says if it came with your computer, contact the manufacturer. When I bought my computer with a 5-year on-site warranty I missed the fine print that Lenovo does NOT support the software they sell. Buyer Beware!

Searching the microsoft support website for the error message gets this result:
There are no documents that match your search for "C:\windows\system32\LZ32.dll is either not designed to run on Windows or it contains an error."

Looks like I'll be paying microsoft to see if they can fix the problem.

[GomJabbar]

Even when I boot in safe mode and run as administrator, access is denied for replacing or renaming the lz32.dll.

See my post in this thread: Can't Delete Desktop Folder
EDIT: You have to give yourself full control of the file you want to delete. See thread above.

[Marin85]

If you want to delete some file, you can use some "shredder" application. Most of such applications don´t really need permissions to delete files as long as one can run the program itself with full permission (like as admin). Malwarebytes has such built-in shredder function.

Cheers,

Marin