Removing Anti-Virus 2008
Anti-Virus 2008 looks to be helping you find and remove spyware and other malware. Unfortunately this software is in itself malware trying to trick you into installing it and taking your monies.
Spybot Search and Destroy does not remove this software, but I did find that malwarebytes http://www.malwarebytes.org did remove the software. This software did not fix the issues with Microsoft’s Windows Installer. Windows Installer is needed to install and un-install programs. This is especially helpful when you are trying to install Anti-Virus software (legitimate) to remove issues such as the AntiVirus 2008 malware.
A good link to the Symantec Information Page concerning this malware attack can be found here… http://www.symantec.com/norton/security_response/writeup.jsp?docid=2008-050906-3727-99
After I used the above malwarebytes to remove the issue, I still fond that I had an issue with the Microsoft Windows Installer. I then found the following information via the Microsoft web site KB article kb555175
How to resolve Common "Windows Installer" Problems
Author: Yuval Sinay MVP| Article ID | : | 555175 |
| Last Review | : | June 4, 2008 |
| Revision | : | 1.0 |
"The Windows Installer Service could not be accessed"
"Windows Installer Service couldn’t be started"
"Could not start the Windows Installer service on Local Computer. Error 5: Access is denied."CAUSEThe error messages usually appear after failed installation of MSI Package or Disabled "Windows Installer" service. RESOLUTION
Method 1
Unregister Windows Installer, and then reregister Windows Installer. To do this, follow these steps:
1. On the "Start" menu, click "Run:.
2. In the "Open" box, type "msiexec /unreg", and then press ENTER.
3. On the "Start" menu, click "Run".
4. In the "Open" box, type "msiexec /regserver", and then press ENTER.
Method 2
Upgrade to Windows Installer version 2 or newer version. To do this, follow these steps:
1. Start Microsoft Internet Explorer, and then browse to the following Microsoft Web site:
http://msdn.microsoft.com/downloads
2. In the left pane tree menu, click "Setup and System Administration", and then click "Setup".
3. Click "Windows Installer", and then click the appropriate link for your operating system.
4. Click "Download" to download and install Windows Installer version 2 or newer version.
Method 3
Use Windows Installer CleanUp Utility to uninstall the failed product.
Description of the Windows Installer CleanUp Utility
http://support.microsoft.com/default.aspx?scid=kb;en-us;290301
Method 4
The Windows Installer service may disabled on the machine.
1. Go to "Start" -> "Run" , type "services.msc" and press on "Enter" button.
2. Double-click on the service named "Windows Installer".
3. Check the value in the "Startup type:" field. If it's currently set to "Disabled", then this is the
problem. Change it by selecting "Manual" from the drop-down box.
Method 5
Empty user and system "temp" folders.
1. Empty "%systemdrive%\temp" folder.
2. Empty "%systemdrive%\%windir%\temp" folder.
3. Empty "%systemdrive%\Documents and Settings\%username%\Local Settings\Temp".
Method 6
Enable Windows Installer Logging and call to PSS support.
How to Enable Windows Installer Logging
http://support.microsoft.com/default.aspx?kbid=223300
How to Enable Windows Installer Logging in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;314852
Method 7
Check correct DCOM and System permissions:
http://support.microsoft.com/?id=319624
Method 8
If you just upgrade Windows XP workstation to service pack 2 and the windows installer
problem appear only after this upgrade, please review the following knowledgebase:
http://support.microsoft.com/default.aspx?scid=kb;en-us;885894
Method 9
Check that the installation path length and environment variables length are execute
255 characters
Method 10
If you get the message error "Error 1628: Failed to complete script based install"
And followed the instruction above and it didn’t resolve the problem and you just create fresh
installation packet by using InstallShiled tool, please disable "Cache installation on local machine"
option during the installation packet create process.
Method 11
Check if there pending installation/s:
Warning: You should only edit these registry entries if you really know what you're doing. Back up your hard disk first.
a. Empty "InProgress" Registry Key
Check the following registry key:
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress
and clean any entries that you find.
b. Empty/Rename "PendingFileRenameOperations" Registry Key:
Check the following registry key:
HKLM\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations
and clean any entries that you find.
Method 12
Obtain update MSI Package from the software manufacture.
MORE INFORMATIONThe Command-Line Options for the Microsoft Windows Installer Tool Msiexec.exe
http://support.microsoft.com/default.aspx?scid=kb;en-us;314881
Windows Installer 3.1 is available
http://support.microsoft.com/?id=893803
Windows Installer 4.5 Redistributable
http://www.microsoft.com/downloads/details.aspx?FamilyID=5a58b56f-60b6-4412-95b9-54d056d6f9f4&DisplayLang=en
Windows Installer Error Messages
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/msi/setup/windows_installer_error_messages.asp
PRB: "Setup Has Detected That Another Program Requires the Computer to Reboot" Error Message When You Try to Install Visual Studio .NET
http://support.microsoft.com/default.aspx?scid=kb;en-us;830608
Comments
nice blog, thanks
buy diflucan
Posted by: Wipqjsim | October 1, 2008 3:45 PM
get super antispywhere and webroot spy sweeper it helped me when i had "anti virus 2008" i have screen shots of the virus in action
the first two names in task maneger is the virus name be shure to check it out
http://www.turboimagehost.com/p/804094/ui.jpg.html
Posted by: virus hater | October 4, 2008 9:45 PM
This is truly epic :) Thanks for putting this online :D
Posted by: Sheryl Smolen | December 10, 2009 12:40 AM