post op software problems from gen trojan

hello all,
Tim has been helping me in the malware forums and cleaned up my problem there but I have some secondary problems that started with this gen trojan thing. so now I am here

" Avira PE classic found Gen trojan " is the thread I was helped in.

I get the following message

it says, Windows installer service could not be accessed this can occur if you are running windows in safe mode (which I am not) or if not correctly installed. when I try to access the SAS


. The main thing i notice now is that add and remove programs still will not work and gives that notice about Windows installer. I have a Hallmark card program that I use quite a bit also it quit working when this stuff started showing up it gives the message " application failed to start because MSVCR 70.dll was not found reinstall may help but when you go to add and remove it gives the windows installer message too.

the windows installer message also comes up when you try to uninstall the old java.

We ran the windows installer cleanup and it did not seem to help. :cry

Thank you for any help you may have for me.
steph

 

If the error message is the same as listed in "Symptoms" try Method 2. Reinstall Windows Installer here:

http://support.microsoft.com/kb/315346

Print the instructions and since you're free of malware, back-up any needed files prior.

 

Thank you Cat for your quick response,
I did the post by the letter got the windows installer a screen pops up and says I have XP sp3 and I have no need for the installer but my add remove and other programs still do not work. I was afraid to uninstall sp 3 without your approval so I jumped back here for further instructions:confused
Steph

 

Hi
This might help:
http://support.microsoft.com/?kbid=315353

 

Hi Steph,

Please try Sharagoz's post above...hoping we can get to a point that you can install again. Malware corrupts files but not an exact fix sometimes, so kind of hit or miss till one of us hits what will work.

Did you back up your files? Again be careful and print instructions, it has to be exact.

Good luck,

Cat

 

Hey ya'll,
I printed out and followed to the letter the file backup, registry backup system restore, and then the fix I could not access add and remove at all the hallmark gives the same error message and so does the SAS. Also now the computer runs so slow I had to reboot from ctrl alt del twice to be able to get back to here.:cry
steph

 

Do you have XP CD?

 

yes Cat I have the windows xp home edition that came when I bought the computer
steph

 

I'm out of ideas... so unless someone comes up with something I would try a repair install. But let's wait and see if I missed the boat here (been known to happen). I will keep an eye on you.

 

OK Cat.
I will keep an eye out here for a few days. I have to have rotator cuff surgery this week so after the first few days I will need something to do anyway. Thanks so much for all your help.
steph

 

Hey Cat
Since I posted the above my friend forwarded this to me and I figured what cAN I lose I also noticed that some of this fix is in what you and I have already done so I did the first steps until 4 and some things started to work and some others still dont but I thought it might be a trigger for something so here goes what do you think ? still a repair install

This is a not uncommon problem, particularly after either a major hardware upgrade or a Windows reinstall. There are 3 probable causes for the problem:

1. The Windows Update Temporary folder is corrupted.

2. Update Agent 3.0 is not installed properly.

3. Installer 3.1 is corrupted.

Here’s how to fix them:

1. Clean up Windows Update temporary folder

1.1. Click Start, Run, type: cmd and press Enter. Please run the following command in the opened window.

Net stop WuAuServ

1.2. Click Start, Run, type: %windir% and press Enter.

1.3. In the opened folder, rename the folder SoftwareDistribution to Sdold. You will loose your history but not important.
1.4. Click Start, Run, type: cmd and press Enter. Please run the following command in the opened window.

Net start WuAuServ

2. Reinstall Windows Update Agent 3.0

2.1. Download the file from the following link:

http://download.windowsupdate.com/v7/windowsupdate/redist/standalone/WindowsUpdateAgent30-x86.exe

2.2. Save the file to C: drive Root (C

2.3. Click Start, Run, type: "C:WindowsUpdateAgent30-x86.exe /wuforce" (without quotations) and then press Enter to install the Windows Update engine. (There is a space between "C:WindowsUpdateAgent30-x86.exe" and "/wuforce")
Note: If you are using Windows Vista, please save the downloaded file to the D: drive, because the file cannot be launched directly from the C: root directory.

3. Reinstall Windows Installer 3.1 (important)

3.1. Press Start and choose Run.

3.2. Type in "cmd" (without quotation marks) and press OK.

3.3. In the command line, type in the following command and press Enter:
MSIexec /unregister (Note: there is a space before the “/”)

3.4. Then, type in the following command and press Enter:
MSIexec /regserver (Note: there is a space before the “/”)

4. Now, try running updates again. If they still fail, then you’ll need to do a reinstall of Windows Installer:

4.1. Start, click Control Panel, and click Add/Remove Programs to check if Windows Installer 3.1 has been installed.

4.2. If it has, highlight and remove it.

4.3. After that, reinstall Windows Installer 3.1 from the following link.

http://www.microsoft.com/downloads/detai

I went all the way to 4.1 and windows installer is not in add and remove.
I cannot get to my help and support from start menu anymore but the SAS started to work and I uninstalled the old Java and the corrupted Hallmark program which I have not been able to do the SAS removed 31 more ADware problems and my computer is running much faster now.
The things that I cannot do now is
windows update
access help and support
do you think this might be a move forward?:confused
steph

 

WTG Steph,

Nice that you got to 4.1 (my installer is not listed either and working fine) Oh I see link not working in 4.3 hmm they have a new version of installer let's give it a shot, Installer 3.1 does not list SP3, so lets try installer 4.5

You want this one (last one listed)

For Windows XP Service Pack 2 and Windows XP Service Pack 3 (32-bit platforms):
WindowsXP-KB942288-v3-x86.exex86

http://www.microsoft.com/downloads/...6F-60B6-4412-95B9-54D056D6F9F4&displaylang=en

Yes, think your fixing it *grins* Think maybe we were trying to replace files with an older version of installer so nixed it... before you try above look at Windows Installer and see what settings are. Mine are Manual and depends on RPC Remote Procedure Call (another service) which is set to Automatic. Since I never changed must be defaults.

To look: start/run/services.msc
If you need help with this look here under More Info: http://support.microsoft.com/?kbid=315346

"removed 31 more ADware problems" where are you surfing at, most I ever get is a couple of cookies, be careful.

Wishing you an uneventful surgery and speedy recovery if we don't touch base prior.

Cat

 

Hey Cat,
Gettin ready to go to the hospital to get the lab work and I thought I would drop in I did the procedures in your last post the first odd thing was that I could not get to my c drive from my computer where I had saved the Windows installer was after a search it showed
a version from
from 1\1\08 that is when the first problem started.
a revised version from 9/24 the other day
windows installer clean up
but no v3 version that I downloaded and saved to c:
after I downloaded it and I could not get to C to get it I just ran it from the link which I still see no evidence of the newest version on my machine do you know what else I can do to get that new installer could I get it on another machine and save it to a jump drive? Maybe too many installers is part of my problem?
I am off now be back later today to get ready for surgery in a. m.
I just went to crap cleaner and was cleaning up and what did I see but a bunch of old uninstall files for the v3 windows installer I wonder how come?
As for my surfing I have some cooking sites I visit, I pay bills, my space and facebook. just regular stuff. I have every piece of protection yall ever recommended and I dont believe in the porno crap so I dont really know where I got the gen trojan or adware stuff from exactly I just know when my scans and avira started showing me problems.
steph
steph

 

Hi Steph,

The CCleaner files I would not worry about, most likely all the attempts to fix this created the files you're seeing. CCleaner is safe, I've used it for years and never had a problem as long as it's at default settings.

Re Adware, most likely just junk from cooking sites and such...if still a problem after you fix these issues you can post/attach a screenshot or log in Malware and let them decide if you need another cleaning. (as long as it's not listing as a real nasty like trojan or virus)

There are like 8 threads about this issue now, dlb had success in one thread with cleaning temp files, then installing Windows Installer 4.5 manually. But now stuck in another thread with similar issue, repair install didn't work for this issue, so we can nix that I think. Whatever is causing the problem seems to have different factors depending on the PC, so pain in the rear. Also, check that your time is set correctly.

Yes you can save Windows Installer 4.5 to another PC and move it to your PC, file will be the same name as the download (just did it) The newer installer should overwrite the old installer, you will just have one installer.

Please make sure that you've backed up all pics/docs and anything you don't want to lose. We might be better off sitting patiently and waiting for the guys to figure this one out (they fix PCs all day).

Watch this thread too: http://forums.majorgeeks.com/showthread.php?t=170732 if dlb finds a fix he will post it. I will keep an eye out too.

Do this again just to humor me: Start/Run/services.msc

Check that these services are Not disabled:

Automatic Updates
Background Intelligent Transfer Service (BITS)
Cryptographic Services
Remote Procedure Call (RPC)
System Restore Service

May the luck of the Irish be with you,

Cat

 

BITS is enabled
all others show runnning auto
I will keep a watch still retty stupid from the anesthesia surgey went well
steph

 

Hi Steph,

Hope you're feeling better, just checking on you...any progress with this?