Cannot inatall some programs

Discussion in 'Malware Help (A Specialist Will Reply)' started by Dave1525, Dec 26, 2007.

  1. Dave1525

    Dave1525 Private E-2

    Hello to one and all.
    I'm in safemode otherwise all hell seems to break loose.
    That is Firefox stops responding. Not on it's own I might add. But read on.
    I tried to install SILKYPIK, a raw conversion program. Trouble was it w'snt on its own. ATI driver upgrade either gave the error 1607, or windowid install and found that at timesinstaller could not install'
    So I tried WindowsInstaller_KB8930803_V2_86.exe
    InstallerShieldEngineUpdate1100.exe.
    D/L Process Explorer, this did install, and so at times dumprep.exe is at 50 and a second dumprep is taking the other 50 or so per cent.
    I'm having programs hanging, freezing and not responding.
    Even writting this email is a pain.
    So Iv'e picked up some thing. SpySweeper andAvira Antivir cannot find(?) the problem.
    I repaired XP Home using slippstream installation, is this corrupted?
    At times the programs are so slooooow you cannot believe it
    Its Xmas Santa please help
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    First let's begin with some questions.

    Is your copy of Windows legally registered to you and activated

    Are the below valid full working programs or are the trials? If trials, uninstall
    • Spyware Doctor
    • Spy Sweeper
    Is there a reason you skipped installing and running Spybot as requested in the READ ME?

    Also where is the requested log from AVG Antispyware?

    What are the below? Are they really from Adobe???? Why would you run these all the time?

    Let's begin by removing a rogue service.
    • Click on Start, then Run ... type services.msc into the box that opens up, and press 'OK'.
    • On the page that opens, scroll down to Windows
    • then right click the entry, select Properties and press Stop Service.
    • When it shows that it is stopped, next please set the Start-up Type to 'Disabled'.
    • Click OK until you get back to Windows.
    Run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

    Uninstall the below old versions of software:
    J2SE Runtime Environment 5.0 Update 11

    Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "F:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O23 - Service: Windows - Unknown owner - C:\WINNT\srvany.exe

    After clicking Fix, exit HJT.

    Now download The Avenger by Swandog46, and save it to your Desktop.
    • Extract avenger.exe from the Zip file and save it to your desktop
    • Run avenger.exe by double-clicking on it.
    • Check the 'Input script manually' box.
    • Click on the magnifying glass icon.
    • Copy everything in the Quote box below, and paste it in the box that opens:
    • Now click the 'Done' button.
    • Click on the traffic light icon and OK the prompt.
    • You will be prompted to restart, OK the prompt and your PC should reboot, if not, reboot it yourself.
    • A log file from Avenger will be produced at C:\avenger.txt
    Now run Ccleaner!

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this and also attach the log from Avenger.

    Make sure you tell me how things are working now!
     
  3. Dave1525

    Dave1525 Private E-2

    Windows is legal and activated.
    Spy Ware Doctor limited from Google.
    Spy Sweeper subscription service.
    I've used SpyBot before and various forums have recommended SpySweeper over SpyBot.
    Log from AVG was over 450kb, and was rejected as being to large, have included rar version.
    Adobe????? No they are from an internet training service, since closed and renamed due to trade mark conflict with Adobe.
    I have progressed as far as Uninstall J2SE and recieve the messege Windows Installer could not be accessed Error1719.
    Do you wish me to run SpyBot?
    Should I procced with the rest of the instructions?
     
  4. Dave1525

    Dave1525 Private E-2

    Hi again.
    For some reason the log file has was transmitted so I'ii try again.
    Just noticed rar files are not valid, will try zip
    Yours Dave
     

    Attached Files:

  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Uninstall it since you have Spy Sweeper. They will cause conflicts with each other making each less effective and will slow your PC down.

    Yes but the READ ME requested that you install it and run it. If you follow our instructions and do not install Teatimer, it is only used as a back up scanner and it does provide some very good free and useful protection with the Immunize feature. It will not interfere with Spy Sweeper and it provides you with a backup scanner.


    Do you need them? If not uninstall any related software or fix those startup lines with HijackThis.


    Yes and yes.


    Your AVG AS log was only that large because you have save a ton of unnecessary cookies on your C drive and also have another copy on the G drive from a very old FireFox V 1.04 installation. See the folders referenced in your log and clean this stuff up:

    C:\Documents and Settings\DR\My Documents\
    G:\My Documents\My Documents\
     
  6. Dave1525

    Dave1525 Private E-2

    Thanks for your reply.
    Spyware Doctor uninstalled, Spybot run, it took three attempts as first one hung with 'not responding message', second one with memory fault 0x0000008E, then memory dump.
    Adobe ???? removed with HJT.
    Analyse.exe , no 04-HKCU\...\Run: [MSMSGS] or 023- Service:Windows- Unknown owner, items not found.
    On installing Avenger, ProcessDLL.exe failed to initialize properly (0x0000135)
    On restarting SpySweeper gave messages to the effect it was stopping various internet sites to load. At the time I was not connected to the internet, 'not responding message' appeared. CPU at 100%, dumprep.exe (2) running and hogging CPU. Cannot install, same message Windows Installer etc.
    Operating in Safe Mode as system unstable in normal mode. Some good has come , typos have stopped, before screen was not keeping up with keyboard.
    As allways in hope.
    Dave
     

    Attached Files:

  7. Dave1525

    Dave1525 Private E-2

    A quick return,
    found Avenger.txt file and sending.
     

    Attached Files:

  8. Dave1525

    Dave1525 Private E-2

    Hi
    System is at present stable under normal start up, but still having problems with Windows Installer.
    Dave.
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your logs are clean. You should pursue issues with Windows Installer in the Software Forum.


    If you are not having any other malware problems, it is time to do our final steps:
    1. If we used Pocket Killbox during your cleanup, do the below
      • Run Pocket Killbox and select File, Cleanup, Delete All Backups
    2. If we used ComboFix then UNINSTALL COMBOFIX (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN
      • Now type combofix /u in the runbox and click OK.
      • Note: The space between the X and the U, it must be there.
    3. If we user SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
    4. If we used SmitFraudFix, you can delete all files and folders related to it now including the c:\rapport.txt log.
    5. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
    6. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
    7. If we had you run Avenger, you can delete all files related to Avenger now.
    8. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    9. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    10. If you are running Windows XP or Windows ME, do the below:
      • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    11. After doing the above, you should work thru the below link:
     
  10. Dave1525

    Dave1525 Private E-2

    Thanks for all your help.
    I hope its the first and last time.
    Many lessons have been learned and I hope remembered.
    Dave
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds