Need Help..Windows Installer Has Taken Over

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by CM282, Aug 14, 2004.

Thread Status:
Not open for further replies.
  1. CM282

    CM282 Private E-2

    I hope someone can help me here. I am new to this.
    I believe I some sort of virus or trojan has taken over my CPU . Everytime I try to open explorer or programs like my computer, I get a windows installer box that opens. It states that it is for money 2003. I have tried to re-install the program with the orginal disk as well as deleting it, all with no luck.
    I have ran ad-aware, spybots s&d, cw shedder and a host of other spyware killers as well as a trojan finder. At first there where varaius spyware programs found, but I deleted them and all programs now show that my cpu is clean, but I still have the same problem.
    I also have run Norton anti-virus as well as AVI ?.
    My os is windows xp home. Any help would be gratly appriciatedn
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you at one point have a problem with the Home Search Assistant aka HSA aka Only the Best hijacker? Or about:blank hijacks? And did you use HSremove to fix it or about:Buster?


    By the way did you happen to try allowing Windows installer to go through it's motions, if you get prompted for an installation CD then provide that CD to let the repair complete? I know you said you reinstalled it, but did you allow the Windows Installer popup to reinstall it?
     
    Last edited: Aug 14, 2004
  3. CM282

    CM282 Private E-2

    Chaslang, First thanks for your reply.
    To my knowledge I have never had problems with the hijacks that you have mentioned, therefore I have never run either of those programs.
    As far as the installer goes, yes I have tried to let it run its course and it takes hours and then says it needs the original money disc which I put in, then after a couple more hours it says there is a file missing and can't continue and backs everything out.
    This AM I tried running Spybot S&D, Ad-Aware, CW shredder and Trojanhunter all in safe mode...results the same. System clean but still have installer taking over.
    I also downloaded and ran a "windows installer" utility. I believe it was to either to repair or clean up this program. I'm sorry I don't remember the name and if I try to go into my computer and find it. The windows installer will take over and I could lose this connection that took me about 45 min to get. I found the program on this site, it was given as a suggestion to someone having a similar problem as mine. Anyway, this didn't help either.
    Anymore help would be great or if more info is needed I will do my best to provide it. Oh, I have also ran the hijack this program, but I have no idea what to do with it..Afraid I'll mess stuff up even more...Thanks again.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I think you are talking about the Windows Installer Cleanup Utility. See this link: http://support.microsoft.com/default.aspx?scid=kb;en-us;290301

    If you read that link, it gives your the following warning:

    "If you use this utility, you may have to reinstall other programs. Caution is advised. "
    I do not think HijackThis would show anything related to this. You said, "At first there where varaius spyware programs found, but I deleted them". Do you remember what it was that you fixed?

    It may be that this question belongs in the Software Forum but let's wait. I'll see if I can get some input right here from some other knowledgeable users.
     
  5. Jasca

    Jasca Private E-2

    Hi CM282,

    In your case, it doesn't sound like a Trojan (unless a previous Trojan ate the file that was found missing), rather it sounds more like a glitch in the Windows Installer from a conflict in the registry entries it's finding. Have you installed a new program or Windows Update (especially SP1) before this just happened? Have you tried removing MSMoney using ADD/REMOVE programs from the Control Panel and not just deleting the directory?

    MSMoney DOES use shared files from Internet Explorer. Microsoft has said that those using MSMoney without Internet Explorer installed or configured properly may experience problems.

    I would try this first before doing anything else:

    a) Re-boot in SAFE MODE to ensure a file is not in use by another program as a shared resource, especially with Microsoft products which are known for doing this.

    b) Make sure you're logging in as the ADMINISTRATOR to make sure you have the rights to every file you're after.

    c) Download CCleaner from www.ccleaner.com or here at majorgeeks.com and use their TOOLS section to remove MSMoney and then use their other features to remove remnants of removed programs thereafter.

    d) Install a firewall (a good free one is ZoneAlarm from Zone Labs - also available for download from majorgeeks.com) if you already haven't. Deny access to the internet from any program during this procedure. Make a note of any program you're unfamiliar with.

    e) Go back to Windows Update at Microsoft's site and do a scan for your updates and download/install them.

    Personally, I would try to reinstall Internet Explorer 6 SP1 from ( www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx ) after removing MSMoney completely and then if everything seems fine, reinstall MSMoney and see what happens from there.

    Start with these though and let me know how it goes.

    Good luck to you :)
     
  6. Jasca

    Jasca Private E-2

    Ok, I found the article by Microsoft which talks about the connection between Internet Explorer and MSMoney:

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;173436

    Notice it states: "When you install Microsoft Money, the Setup program relies on Microsoft Internet Explorer Setup to install the following components:

    Web browser
    Wininet.dll
    Schannel.dll

    Reinstalling Money does not start Internet Explorer Setup so these three components are not installed."

    I'd be curious to know exactly what file the Installer found missing, what version of IE you are using and what version of MSMoney.

    Also note that Internet Explorer comes with various different versions of MSMoney and that link gives you directions on how to reinstall IE from the MSMoney CD.

    HOWEVER, if you've already upgraded to a higher version of IE than is on that CD, you won't be able to do that and you'll need that link to IE 6 SP1 I posted earlier.

    Either way, get rid of MSMoney for now, install Internet Explorer 6 SP1, and THEN reinstall MSMoney.
     
  7. CM282

    CM282 Private E-2

    Jasca and chaslang, thanks for the suggestions. I will try doing what you said now and get back to you with the results. I will write down any thing that seems out of the ordinary, so I'll have more complete info if more help is needed...thanks
     
  8. CM282

    CM282 Private E-2

    chaslang, I now think you may be right, this is looking like a software problem.
    Jasca, I tried what you suggested. I was unable to run ccleaner from safe mode or at least the uninstaller, that goes for windows uninstaller in control panel also. However, I was able to run issues portion of ccleaner. I did this and had fix the various problems. They where alot relating to missing files in the registry.
    I also down lowed the IE updates that you suggested.
    I then tried ccleaner uninstall in regular mode. Still would not do it. I then used the "Windows Installer" utility that I talked about in earlier post. That program is msicuu2. With this I removed Microsoft money 2003 and its service pack. This did get rid of the constant pop up box for "windows installer", but for some reason I can't reinstall money.
    When I try it takes forever, I'm talking 4-5 hrs. I received to different errors.
    1ST: Microsoft money setup Bootstrapper has encounter a problem and needs to close.
    Retried and after getting mid-way through proses (about 3 hrs) got this error:
    Error 1317: an error occurred while attempting to create the directory: C:/program files/Microsoft/money/media
    I hit retry and got same error, then hit cancel and it went into rolling back what had taken place to that point. I then got error 2330.1 which was same as above with "jue" behind media.
    So, I guess I should be happy that the installer box is gone but so are all my finances. I do have money files backed up but I can't seem to reinstall to use them. Maybe I should go to quicken...will that program read money files.
    Therefore, I guess this is a software issue...sorry for being in the wrong place, but does anyone have more suggestions?
    Thanks
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    CM282,

    Yes, I do believe it is time for this to move to the software forum. You should be able to get more help there. You should make a post there and put in a link to this current thread (http://forums.majorgeeks.com/showthread.php?t=39754) so that people can see the starting history without you having to write all of it down.
     
  10. Jasca

    Jasca Private E-2

    Well, don't run to Quicken just yet. Give me some time to check those error codes. There's got to be a way to install MSMoney again. It's probably just being tempermental, especially after you used that Windows Installer Cleanup Utility. I always thought that thing was good for using on programs known to be gone and just stuck in registry as a listed component, but not really there. I use CCleaner for that as I don't trust what MS does, usually. :p When you use it on programs that are still there, that's not such a good idea, so...

    Look on the bright side, you've cleaned up your computer, updated the operating system and fixed the Installer problem with your browser.

    That's progress! :)

    I'll get back to you with an answer after I research what's happened so far.
     
  11. Jasca

    Jasca Private E-2

    In the meantime, check and see if the directory C:/program files/Microsoft/money/media or C:/program files/Microsoft/money exists on your hard drive now. If so, does it contain any files? Don't do anything to them yet, I just need to know if the directory exists or not and if it has files in them. Thanks :)
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I have copied this thread to the software forum where it now belongs. Continue your comments there. This thread is closed (will delete later when I'm sure you have been able to see the new thread).
     
Thread Status:
Not open for further replies.

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds