[SleepyDude]

Hi,

Is your windows in English?

Please download SystemLook from one of the links below according to your OS Architecture and save it to your Desktop.
SystemLook (32-bit)
SystemLook (64-bit)

• Double-click SystemLook.exe to run it.
• Accept the prompt Allow the program to make changes to this computer (UAC prompt)
• Copy the content of the following codebox into the main textfield:
  

  :service
  msiserver
  

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

[Advertisements]

Hi there,

Yes, it's in English.

Here's the log file you asked for:

SystemLook 30.07.11 by jpshortstuff
Log created at 23:24 on 03/11/2012 by Pockets
Administrator - Elevation successful

========== service ==========

msiserver
Instalator Windows
"Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start."
Current Status: Stopped
Startup Type: Disabled
Error Control: Unable to Determine
Binary: C:\Windows\system32\msiexec.exe /V
Group: (none)
SafeBoot:
Dependencies:
->rpcss
Dependant Services:
(none)

-= EOF =-

[praxidice]

Hi there,

Yes, it's in English.

Here's the log file you asked for:

SystemLook 30.07.11 by jpshortstuff
Log created at 23:24 on 03/11/2012 by Pockets
Administrator - Elevation successful

========== service ==========

msiserver
Instalator Windows
"Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start."
Current Status: Stopped
Startup Type: Disabled
Error Control: Unable to Determine
Binary: C:\Windows\system32\msiexec.exe /V
Group: (none)
SafeBoot:
Dependencies:
->rpcss
Dependant Services:
(none)

-= EOF =-

[SleepyDude]

Hi,

Strange "Instalator Windows" sounds like Italian!

Open the Services console, press then type services.msc
on the list of services locate Instalator Windows right click and choose Properties
Change the Startup Type to Manual, click on the Recovery tab and change the options to match the image above:



Confirm the changes and try to start the service.
Please post the result.

[praxidice]

Hi there,

I know, I don't think "instalator" is an English word!

Also, the first time I saw it, it said "Windows Instalator," and now it has changed to "Instalator Windows." So strange...

So, I tried to change the properties for Instalator Windows, but I received an error message "Access is denied."

I tried running services.msi as Administrator too. Same error message.

Any ideas? Thank you!

[SleepyDude]

Hi,

Lest try to fix that...
- First create a System Restore point following the instructions on this article.

- next download the zip file msi-fix.zip
- extract the msi-fix.zip file to the Desktop or other place, it should create a folder called msi-fix
- inside the folder you will find a script called msi-fix.cmd right click the file and choose Run as Administrator
- at the end notepad will open with a log file please post the result on your reply

The script will try to reset the permissions of the Windows Installer service to the default.
If the script successfully fixed the service permissions you should be able to do the changes from post #18

[praxidice]

Hi,

When I follow the directions to create a system restore point, I receive this error: "There was an unexpected error in the property page. The Volume Shadow Copy Service used by System Restore is not working. For more information view the event log. (0x81000202) Please close the property page and try again."

I tried a few times but received the same error.

So, I tried running System Restore by running "System Restore" from the program file, and received this message: "System Restore does not appear to be functioning correctly in this system. A Volume Shadow Copy component encountered an unexpected error. Check the application event log for more information. (0x80042302)"

So, should I go ahead and run the msi.fix anyway? I backed up my system before I started trying to fix this, so I should be okay.

By the way, using System Restore to go back to before the Windows Installer error started happening was one of the first things I tried. I haven't been able to use System Restore since the Installer error started.

Thanks!

[SleepyDude]

So, should I go ahead and run the msi.fix anyway? I backed up my system before I started trying to fix this, so I should be okay.

Yes go ahead the script its safe.
After running the script execute the steps from post #18

For the other problems, please download Farbar Service Scanner to the Desktop
- run the FSS tool
- Check all the options
- click Scan

Post the generated log on your reply.

Any virus problem lately that we should know of?

[praxidice]

Hi there,

I ran the msi.fix and restarted the computer. But, when I try to change the properties for Instalator Windows (from post #18), I get the error message "Access is denied." (I also tried running services.msi as administrator.)

I have run my anti-virus program (Avira) and it shows nothing. I wanted to try other scans, but since I can't install anything, I haven't been able to.

Here are the two logs:
msi.fix

::: Restoring msiserver service security permissions
msiserver : nt authority\system is the new owner
msiserver : nt authority\system is the new Primary Group
msiserver : Resetting Audit Acl
msiserver : new ace for \everyone
msiserver : Resetting Perm. Acl
msiserver : new ace for nt authority\system
msiserver : new ace for builtin\administrators
msiserver : new ace for nt authority\interactive
msiserver : new ace for nt authority\service
msiserver : 10 change(s)

Done.


```````````````````````````````````````
FSS
Farbar Service Scanner Version: 04-11-2012
Ran by Pockets (administrator) on 05-11-2012 at 23:59:35
Running from "C:\Users\Pockets\Downloads"
Microsoft Windows 7 Home Premium (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
mpsdrv Service is not running. Checking service configuration:
The start type of mpsdrv service is OK.
The ImagePath of mpsdrv service is OK.

MpsSvc Service is not running. Checking service configuration:
The start type of MpsSvc service is set to Demand. The default start type is Auto.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.


Firewall Disabled Policy:
==================


System Restore:
============
SDRSVC Service is not running. Checking service configuration:
The start type of SDRSVC service is OK.
The ImagePath of SDRSVC service is OK.
The ServiceDll of SDRSVC service is OK.

VSS Service is not running. Checking service configuration:
The start type of VSS service is OK.
The ImagePath of VSS service is OK.


System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys
[2012-02-15 08:22] - [2011-12-28 12:59] - 0499200 ____A (Microsoft Corporation) DB9D6C6B2CD95A9CA414D045B627422E

C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2012-05-09 18:51] - [2012-03-30 20:09] - 1895280 ____A (Microsoft Corporation) 624C5B3AA4C99B3184BB922D9ECE3FF0

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll
[2012-06-14 05:24] - [2012-04-24 14:59] - 0182272 ____A (Microsoft Corporation) F02786B66375292E58C8777082D4396D

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

[SleepyDude]

Hi,

Something is wrong with the windows services, lets try with another tool...

Download Windows Repair (All In One)
- extract the tweaking.com_windows_repair_aio.zip to c:\ the zip will extract to a folder called Tweaking.com - Windows Repair
- execute the file Repair_Windows.exe from the Tweaking.com - Windows Repair folder
- click on the tab Start Repairs, next click the Start button
- accept the prompt to create the Backup
- click the Start button again
- click the button Unselect All
- check the following boxs:

• Repair Windows Firewall
• Repair Volume Shadow Copy Service
• Repair MSI (Windows Installer)

- check the box Restart/Shutdown System When Finished > Restart System
- click the Start button

Edited by SleepyDude, 05 November 2012 - 04:20 PM.

[praxidice]

Hi there,

I ran the Windows Repair (All in one) and restarted the computer.

Windows Firewall is definitely back up and running.

I tried restarting Instalator Windows and still have the "Access denied" message.

What should I do next?

[SleepyDude]

Hi,

Please check if System Restore is working, try to create a System Restore point following the instructions on this article.

[praxidice]

Hi,

When I try to run System Restore, I get the same error that the Volume Shadow Copy Service is not functioning.

[SleepyDude]

Hi Praxidice,

Last try download Eset Services Repair save the tool to the Desktop
Execute the ServicesRepair tool and follow the instructions.

Let me know the result.

[praxidice]

Hi there,

I wish I had good news, but I don't. I ran Services Repair and restarted the computer. Then I tried to restart Instalator Windows (as in post #18) and I still receive the error "Access is denied."

Argh.

[SleepyDude]

Hi there,

I wish I had good news, but I don't. I ran Services Repair and restarted the computer. Then I tried to restart Instalator Windows (as in post #18) and I still receive the error "Access is denied."

Argh.

Ok, but let me know if the System Restore is working or not.