vaughancoveny Posted May 29, 2008 Share Posted May 29, 2008 (edited) PC Tools OnDemand issued an "VERY HIGH" alert during .Net framework 3.5 installationfor MSIEXEC.EXE. I Quarantined it.Internet Security won't let me restore it. Neither will System Resore.Now Windows Installer won't work. The service cannot be re-enabled, access denied. Theservice won't start up automatically.I've disabled DCOM. Any way of saving the Event Viewer Log also? I can place it here. Edited May 29, 2008 by vaughancoveny Link to comment Share on other sites More sharing options...
Tripredacus Posted May 30, 2008 Share Posted May 30, 2008 You should probably turn DCOM back on. A lot of programs require that to be running. Link to comment Share on other sites More sharing options...
vaughancoveny Posted May 31, 2008 Author Share Posted May 31, 2008 I did but it did not remedy the problem.You may be getting confused with COM (ActiveX).Security programs often allow you to Disable DCOM, like DCOMobulator which phased outa few years ago, but there are other programs that do allow.Distributed COM, Distributed Transaction Coordinator and Task Scheduler all occupy, transmit andreceive through port 135 and are dangerous. Unless you need prefetch functionality use Freebyte Task Scheduler instead or do things manually. Link to comment Share on other sites More sharing options...
Mordac85 Posted June 2, 2008 Share Posted June 2, 2008 I'm not familiar with PC Tools OnDemand but I think you reacted to a false positive. You need to disable the PC Tools OnDemand and copy the missing msiexec.exe from %WinDir%\System32\dllcache. I admire your vigilence and care, but since you were in the process of installing an application from an assumed trusted source like Microsoft, you should have let it go and investigated the issue first. These apps are nice to help people out, but they are not 100% all the time. It probably picked up the installer as a false positive and now that you've Quarantined it, it isn't about to let it be restored.Also, the installer service is normally stopped in Manual and only started when needed for an installation. Link to comment Share on other sites More sharing options...
Tripredacus Posted June 2, 2008 Share Posted June 2, 2008 I'm not familiar with PC Tools OnDemand but I think you reacted to a false positive. You need to disable the PC Tools OnDemand and copy the missing msiexec.exe from %WinDir%\System32\dllcache. I admire your vigilence and care, but since you were in the process of installing an application from an assumed trusted source like Microsoft, you should have let it go and investigated the issue first. These apps are nice to help people out, but they are not 100% all the time. It probably picked up the installer as a false positive and now that you've Quarantined it, it isn't about to let it be restored.Also, the installer service is normally stopped in Manual and only started when needed for an installation.I have similar experiences with our corporate Anti-virus. It likes to detect my programming tools as 'trojans' and 'hack tools' and tries to erase them from my hard drive and our network drives. In my case, there doesn't seem to be an option to make it ignore those things... Link to comment Share on other sites More sharing options...
Jeremy Posted June 3, 2008 Share Posted June 3, 2008 It's a false positive.Remove it from the quarantined state and mark it as safe. Link to comment Share on other sites More sharing options...
Tarun Posted June 3, 2008 Share Posted June 3, 2008 As Jeremy mentioned it's a false positive. Unfortunately this is very common with PC Tools software (like SpywareDoctor).You may also want to give Dial-a-fix a go. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now