[JSntgRvr]

Download the enclosed folder.

Save and extract its contents to the desktop. It is a folder containing a Registry Entries file, RpcSs.reg . Once extracted, open the folder and double click on the RpcSs.reg file and select Yes when prompted to merge it into the registry.

Restart and run Farbar Service Scanner once again and post its report.

[Advertisements]

Unfortunately I can't run winzip. My trial has ended for 17. When I try to purchase I get the message there was a problem sending the command to the program. I then attempted to download winzip 18 and when I try to install I get a message that says it can't install the gui. I belive mbam may be stopping the install as I get a pup install core warning. Not sure what to do.  I appreciate all of your help and perseverance. Anything else you can do is greatly appreciated.

[Warden]

Unfortunately I can't run winzip. My trial has ended for 17. When I try to purchase I get the message there was a problem sending the command to the program. I then attempted to download winzip 18 and when I try to install I get a message that says it can't install the gui. I belive mbam may be stopping the install as I get a pup install core warning. Not sure what to do.  I appreciate all of your help and perseverance. Anything else you can do is greatly appreciated.

[JSntgRvr]

Edit the registry as follows:

• Copy the entire contents of the Quote Box below to Notepad(except the word quote).
• Leave an empty line at the end of the script
• Name the file as fix.reg
• Change the Save as Type to All Files
• and Save it on the desktop
• Once saved, double click on the fix.reg file and merge it into the Registry.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs]
"Description"="Provides the endpoint mapper and other miscellaneous RPC services."
"DisplayName"="Remote Procedure Call (RPC)"
"ErrorControl"=dword:00000001
"Group"="COM Infrastructure"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,20,00,2d,00,6b,00,20,00,72,00,70,00,\
63,00,73,00,73,00,00,00
"ObjectName"="NT Authority\\NetworkService"
"Start"=dword:00000002
"Type"=dword:00000010
"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,\
00,02,00,00,00,60,ea,00,00
"ServiceSidType"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
72,00,70,00,63,00,73,00,73,00,2e,00,64,00,6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,8d,00,02,00,01,01,00,00,00,00,00,\
05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\
00,18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Enum]
"0"="Root\\LEGACY_RPCSS\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

Restart and run Farbar Service Scanner once again and post its report.

[Warden]

Farbar Service Scanner Version: 21-05-2014

Ran by Presenter (administrator) on 22-05-2014 at 18:02:43

Running from "C:\Documents and Settings\Presenter\My Documents\Downloads"

Microsoft Windows XP Service Pack 3 (X86)

Boot Mode: Normal

****************************************************************

 

Internet Services:

============

 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.

 

 

Windows Firewall:

=============

 

Firewall Disabled Policy: 

==================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall"=DWORD:0

 

 

System Restore:

============

 

System Restore Disabled Policy: 

========================

 

 

Security Center:

============

 

 

Windows Update:

============

 

Windows Autoupdate Disabled Policy: 

============================

 

 

Other Services:

==============

 

 

File Check:

========

C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit

C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit

C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit

C:\WINDOWS\system32\netman.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\srsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit

C:\WINDOWS\system32\wscsvc.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\wuauserv.dll => MD5 is legit

C:\WINDOWS\system32\qmgr.dll => MD5 is legit

C:\WINDOWS\system32\es.dll => MD5 is legit

C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit

C:\WINDOWS\system32\svchost.exe => MD5 is legit

C:\WINDOWS\system32\rpcss.dll => MD5 is legit

C:\WINDOWS\system32\services.exe => MD5 is legit

 

Extra List:

=======

Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4) 

0x0700000005000000010000000200000003000000040000000600000007000000

IpSec Tag value is correct.

 

**** End of log ****

[JSntgRvr]

That looks great. How about the taskbar? See post #25

[Warden]

So I have noticed a few things.  Taskbar appears to be normal and working as it did prior to the issue. Having some issues with winzip.  Free portion is complete and I have downloaded latest version but am having problems purchasing.  Will keep working on that.  Windows installer can't be accessed to add/remove programs.  I have tried to delete microsoft security essentials and winzip 17 from control panel>add/remove programs but can't.  

 

I also noticed that windows has taken back control of the wireless network from the proset wireless connection utility.  This had changed during the past few days as well. Windows was in control prior to the issue. yesterday and today, proset had control. After I ran the last command you gave me and rebooted, windows once again had control.  

 

BTTray-can't start bluetooth stack still pops up.  Not sure if this is an issue.

 

Here is the latest mbam scan

 

Malwarebytes Anti-Malware

www.malwarebytes.org

 

Scan Date: 5/22/2014

Scan Time: 7:15:32 PM

Logfile: mbamlog.txt 5-22.txt

Administrator: Yes

 

Version: 2.00.1.1004

Malware Database: v2014.05.22.12

Rootkit Database: v2014.05.21.01

License: Trial

Malware Protection: Enabled

Malicious Website Protection: Enabled

Chameleon: Disabled

 

OS: Windows XP Service Pack 3

CPU: x86

File System: NTFS

User: Presenter

 

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 374813

Time Elapsed: 17 min, 3 sec

 

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Shuriken: Enabled

PUP: Warn

PUM: Enabled

 

Processes: 0

(No malicious items detected)

 

Modules: 0

(No malicious items detected)

 

Registry Keys: 6

PUP.Optional.Speedial.A, HKLM\SOFTWARE\INSTALLCORE\Speedial, Quarantined, [7103252f06756ec874339af2c53d669a], 

PUP.Optional.Speedial.A, HKU\S-1-5-21-3866077675-454247996-117300071-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\speedial, Quarantined, [80f4084ca3d8ba7c2d7e4e3e828020e0], 

PUP.Optional.InstallCore.A, HKU\S-1-5-21-3866077675-454247996-117300071-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Quarantined, [24509db73b4073c3ba34990a26dcd12f], 

PUP.Optional.Speedial.A, HKU\S-1-5-21-3866077675-454247996-117300071-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\Speedial, Quarantined, [88ece66eaecdd3631d8bbece28da43bd], 

PUP.Optional.InstallCore.A, HKU\S-1-5-21-3866077675-454247996-117300071-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Quarantined, [8de74b094a31191d6695f0c91de648b8], 

PUP.Optional.Speedial.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Speedial, Quarantined, [720243116219da5c9c676d169969f010], 

 

Registry Values: 1

PUP.Optional.InstallCore.A, HKU\S-1-5-21-3866077675-454247996-117300071-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 1V2X1Q1R1M1F, Quarantined, [8de74b094a31191d6695f0c91de648b8]

 

Registry Data: 2

PUP.Optional.Speedial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://speedial.com/...r=282919698&ir=, Good: (www.google.com), Bad: (http://speedial.com/?f=2&a=spd_wnzp_14_21_ie&cd=2XzuyEtN2Y1L1QzutDtDtBtByCyEyDyC0BtAyD0FyDtB0ByCtN0D0Tzu0SzzyBtAtN1L2XzutBtFtBtDtFtCyBtFtDtN1L1CzutCyEtDtAtDyD1V1OtN1L1G1B1V1N2Y1L1Qzu2StCyB0FtB0A0EyCtDtGtBzyyD0EtG0C0CyByCtGtBtAtC0AtGtA0FyBzy0ByBtC0EyCtCzzzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByC0B0E0F0CtDzytG0DyB0F0FtG0ByB0F0CtG0B0AtAyEtGtD0FtDyD0AtD0ByB0E0FyByD2Q&cr=282919698&ir=),Replaced,[492ba8ac2a51c86e2b2e5ceedf25659b]

PUP.Optional.Speedial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://speedial.com/...r=282919698&ir=, Good: (www.google.com), Bad: (http://speedial.com/?f=1&a=spd_wnzp_14_21_ie&cd=2XzuyEtN2Y1L1QzutDtDtBtByCyEyDyC0BtAyD0FyDtB0ByCtN0D0Tzu0SzzyBtAtN1L2XzutBtFtBtDtFtCyBtFtDtN1L1CzutCyEtDtAtDyD1V1OtN1L1G1B1V1N2Y1L1Qzu2StCyB0FtB0A0EyCtDtGtBzyyD0EtG0C0CyByCtGtBtAtC0AtGtA0FyBzy0ByBtC0EyCtCzzzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByC0B0E0F0CtDzytG0DyB0F0FtG0ByB0F0CtG0B0AtAyEtGtD0FtDyD0AtD0ByB0E0FyByD2Q&cr=282919698&ir=),Replaced,[bbb90c4895e63bfb461164e65fa5a060]

 

Folders: 6

PUP.Optional.Speedial.A, C:\Program Files\Speedial, Quarantined, [720243116219da5c9c676d169969f010], 

PUP.Optional.Speedial.A, C:\Program Files\Speedial\1.8.29.15, Quarantined, [720243116219da5c9c676d169969f010], 

PUP.Optional.Speedial.A, C:\Program Files\Speedial\1.8.29.15\bh, Quarantined, [720243116219da5c9c676d169969f010], 

PUP.Optional.Speedial.A, C:\Documents and Settings\Presenter\Application Data\Speedial, Quarantined, [0371490b8af1fc3a798d9de691716898], 

PUP.Optional.Speedial.A, C:\Documents and Settings\Presenter\Application Data\Speedial\icons_2.20.17.0, Quarantined, [0371490b8af1fc3a798d9de691716898], 

PUP.Optional.Speedial.A, C:\Documents and Settings\Presenter\Application Data\Speedial\UpdateProc, Quarantined, [0371490b8af1fc3a798d9de691716898], 

 

Files: 12

PUP.Optional.InstallCore.A, C:\Documents and Settings\Presenter\Desktop\winzip18.exe, Quarantined, [dd974a0aec8f72c4b50ca3a510f43cc4], 

PUP.Optional.InstallCore.A, C:\Documents and Settings\Presenter\My Documents\Downloads\winzip18.exe, Quarantined, [571d490b413a1125249dd672c4404db3], 

PUP.Optional.SpeeDial.A, C:\Documents and Settings\Presenter\Local Settings\temp\is838815544\273047_stp\SpeeDial.exe, Quarantined, [2450ba9a770483b30f732306a65c2ad6], 

PUP.Optional.InstallCore.A, C:\Documents and Settings\Presenter\Local Settings\Temporary Internet Files\Content.IE5\A9Y00FTR\winzip18[1].exe, Quarantined, [cda77ed699e2a09611b04bfd49bbd32d], 

PUP.Optional.Speedial.A, C:\Program Files\Speedial\1.8.29.15\FavIcon.ico, Quarantined, [720243116219da5c9c676d169969f010], 

PUP.Optional.Speedial.A, C:\Program Files\Speedial\1.8.29.15\Sqlite3.dll, Quarantined, [720243116219da5c9c676d169969f010], 

PUP.Optional.Speedial.A, C:\Program Files\Speedial\1.8.29.15\uninst.dat, Quarantined, [720243116219da5c9c676d169969f010], 

PUP.Optional.Speedial.A, C:\Program Files\Speedial\1.8.29.15\uninstall.exe, Quarantined, [720243116219da5c9c676d169969f010], 

PUP.Optional.Speedial.A, C:\Documents and Settings\Presenter\Application Data\Speedial\UpdateProc\config.dat, Quarantined, [0371490b8af1fc3a798d9de691716898], 

PUP.Optional.Speedial.A, C:\Documents and Settings\Presenter\Application Data\Speedial\UpdateProc\info.dat, Quarantined, [0371490b8af1fc3a798d9de691716898], 

PUP.Optional.Speedial.A, C:\Documents and Settings\Presenter\Application Data\Speedial\UpdateProc\UpdateTask.exe, Quarantined, [0371490b8af1fc3a798d9de691716898], 

PUP.Optional.Speedial.A, C:\Documents and Settings\Presenter\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (      "search_url": "http://speedial.com/...ults.php?f=4&q={searchTerms}&a=spd_wnzp_14_21_ie&cd=2XzuyEtN2Y1L1QzutDtDtBtByCyEyDyC0BtAyD0FyDtB0ByCtN0D0Tzu0SzzyBtAtN1L2XzutBtFtBtDtFtCyBtFtDtN1L1CzutCyEtDtAtDyD1V1OtN1L1G1B1V1N2Y1L1Qzu2StCyB0FtB0A0EyCtDtGtBzyyD0EtG0C0CyByCtGtBtAtC0AtGtA0FyBzy0ByBtC0EyCtCzzzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByC0B0E0F0CtDzytG0DyB0F0FtG0ByB0F0CtG0B0AtAyEtGtD0FtDyD0AtD0ByB0E0FyByD2Q&cr=282919698&ir=",), Replaced,[acc8aea619627fb7517e91ef17edb848]

 

Physical Sectors: 0

(No malicious items detected)

 

 

(end)

 

and the latest farbar

 

Farbar Service Scanner Version: 21-05-2014

Ran by Presenter (administrator) on 22-05-2014 at 19:32:47

Running from "C:\Documents and Settings\Presenter\My Documents\Downloads"

Microsoft Windows XP Service Pack 3 (X86)

Boot Mode: Normal

****************************************************************

 

Internet Services:

============

 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.

 

 

Windows Firewall:

=============

 

Firewall Disabled Policy: 

==================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall"=DWORD:0

 

 

System Restore:

============

 

System Restore Disabled Policy: 

========================

 

 

Security Center:

============

 

 

Windows Update:

============

 

Windows Autoupdate Disabled Policy: 

============================

 

 

Other Services:

==============

 

 

File Check:

========

C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit

C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit

C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit

C:\WINDOWS\system32\netman.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\srsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit

C:\WINDOWS\system32\wscsvc.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\wuauserv.dll => MD5 is legit

C:\WINDOWS\system32\qmgr.dll => MD5 is legit

C:\WINDOWS\system32\es.dll => MD5 is legit

C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit

C:\WINDOWS\system32\svchost.exe => MD5 is legit

C:\WINDOWS\system32\rpcss.dll => MD5 is legit

C:\WINDOWS\system32\services.exe => MD5 is legit

 

Extra List:

=======

Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4) 

0x0700000005000000010000000200000003000000040000000600000007000000

IpSec Tag value is correct.

 

**** End of log ****

[JSntgRvr]

Download the Windows Installer 4.5 Redistributable. Select the WindowsXP-KB942288-v3-x86.exe and download. Install the application and restart the computer.

[JSntgRvr]

Follow the instructions here to manually uninstall winzip. If you need help with the registry modification, please let me know.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DA}}

 

Click here to download a tool that will remove Microsoft Security Essentials.

 

7-zip is a free utility to compress and expand files and folders. Read here.

[Warden]

I followed the instructions and deleted winzip.  I do need some assistance with the regedit portion. I did a ctrl+f to search for

 

 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DA}}

 

It said it did not find that key.  I deleted winzip file from the program files computer as well. I didn't want to proceed without checking with you first.  Thanks again.

[Warden]

Also, I was able to install 7- zip with no problems,but when I tried to install the MSE removal tool, I got the error message saying that windows installer can't be accessed.

[JSntgRvr]

Edit the registry as follows:

• Copy the entire contents of the Quote Box below to Notepad (Except the word quote).
• Leave an empty line at the end of the script
• Name the file as installer.reg
• Change the Save as Type to All Files
• and Save it on the desktop
• Once saved, double click on the installer.reg file and merge it into the Registry.

Windows Registry Editor Version 5.00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSIServer]
"Type"=dword:00000020
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,\
  5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,73,00,69,\
  00,65,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,20,00,2f,00,56,00,00,00
"DisplayName"="Windows Installer"
"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
"DependOnGroup"=hex(7):00,00
"ObjectName"="LocalSystem"
"Description"="Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start."
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSIServer\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
  05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
  00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSIServer\Enum]
"0"="Root\\LEGACY_MSISERVER\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

 
Run these command:

cmd /c Reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DA}} /f
msiexec /regserver
 
Restart and  try  running the MSE removal tool once again.

[Warden]

I ran the installer.reg and merged the file into the registry.  When I open the command prompt and run that command I get error: the system was unable to find the specified registry key or value.  

[JSntgRvr]

You mean this? (It had an error, too many brackets)

cmd /c Reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DA} /f

How abut this one?

msiexec /regserver
 

 

Were you able to run the MSE removal tool?

[Warden]

I was able to execute the command successfully.  I rebooted the machine and tried to run the mse removal tool but get the same error message when preparing to install.windows installer can't access

Attached Thumbnails

• 

[JSntgRvr]

Lets re-install Windows Installer. We will need to remove some files throughout a batch file.:

• Copy the entire contents of the Quote Box below to Notepad (except the word Quote). 

• Leave an empty line at the end of the script

• Name the file as fix.bat

• Change the Save as Type to All Files

• and Save it on the desktop

• Once saved, click on the fix.bat file. The MSDOS window will flash for a second. That is Normal.

Echo off
net stop MSIServer
Ren C:\WINDOWS\system32\msi.dll msi.old
Ren C:\WINDOWS\system32\msiexec.dll msiexec.old
Ren C:\WINDOWS\system32\msihnd.dll msihnd.old
Del %0

Restart the computer and re-install Windows Installer. You had previously downloaded the install file.