MSI service won't start

[J-Hob]

I think I've had this problem a while but it's only recently that I have been trying to install a couple of new programs that I have really noticed it.

Basically the installer service in XP pro won't start, if I try to start it manually it just starts and stops. I have tried the following to fix the issue:

• unregister and re-register the service
  
• windows repair install
  
• installed all service packs
  
• Updated installer service to v4.5
  
• Checked msiexec.exe has correct path in registry
  

I have tried basically everything I could have that relates to the issue from MS knowledge base and from what I could turn up by googling the error. Nothing has fixed the error or even caused a change in its behaviour.

I am now totally stuck and really not sure where I go from this now. It seems the next step would be a clean install but I am loathe to do this until I absolutely have to because of the time involved in getting it all sorted. Here's some of the logs relating to the error from event viewer:

Event Type: Error

Event Source: MsiInstaller

Event Category: None

Event ID: 11719

Date: 01/03/2009

Time: 14:36:09

User: JOHN-PC\John

Computer: JOHN-PC

Description:

The description for Event ID ( 11719 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Product: VideoStudio -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled., (NULL), (NULL), (NULL), (NULL), , .

Data:

0000: 7b 46 39 39 46 39 45 32 {F99F9E2

0008: 34 2d 45 45 32 46 2d 34 4-EE2F-4

0010: 37 46 44 2d 41 45 42 30 7FD-AEB0

0018: 2d 46 44 42 38 32 38 35 -FDB8285

0020: 39 42 35 43 39 7d 9B5C9}

Event Type: Warning

Event Source: MsiInstaller

Event Category: None

Event ID: 1015

Date: 01/03/2009

Time: 14:36:05

User: JOHN-PC\John

Computer: JOHN-PC

Description:

The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80080005, (NULL), (NULL), (NULL), (NULL), , .

And here's the hijackthis log, if that helps:

Logfile of HijackThis v1.99.1

Scan saved at 14:42:12, on 01/03/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe

C:\Program Files\COMODO\Firewall\cmdagent.exe

C:\Program Files\CheckPoint\SSL Network Extender\slimsvc.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Kontiki\KService.exe

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Pen_Tablet.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe

C:\WINDOWS\system32\Pen_Tablet.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\ASUS\AI Gear2\GearHelp.exe

C:\Program Files\ASUS\Ai Nap\AiNap.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe

C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.4\apdproxy.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\Google\Google Talk\googletalk.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\WINDOWS\tsnp2std.exe

C:\WINDOWS\vsnp2std.exe

C:\Program Files\Taskix\Taskix32.exe

C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\Program Files\COMODO\Firewall\cfp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\NetMeter\NetMeter.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

C:\Program Files\Pantone\hueyPRO\hueyPROTray.exe

C:\Program Files\Sitecom\Sitecom Wireless Network USB Adapter Turbo G WL-172\Installer\WLANUTL.EXE

C:\Program Files\Windows Desktop Search\WindowsSearch.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Dropbox\dropbox.exe

C:\Program Files\Password Safe\pwsafe.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\mmc.exe

C:\WINDOWS\System32\vssvc.exe

C:\WINDOWS\System32\dllhost.exe

C:\WINDOWS\System32\dllhost.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\WINDOWS\system32\mmc.exe

C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Program Files\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: IE Developer Toolbar BHO - {CC7E636D-39AA-49b6-B511-65413DA137A1} - C:\Program Files\Microsoft\Internet Explorer Developer Toolbar\IEDevToolbar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [skyTel] SkyTel.EXE

O4 - HKLM\..\Run: [Ai Gear Help] "C:\Program Files\ASUS\AI Gear2\GearHelp.exe"

O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\Ai Nap\AiNap.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [Name of App] C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe r

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.4\apdproxy.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe

O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe

O4 - HKLM\..\Run: [Taskix] C:\Program Files\Taskix\Taskix32.exe start

O4 - HKLM\..\Run: [Carbonite Backup] C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe

O4 - HKLM\..\Run: [ElbyCheckAnyDVD] "C:\Program Files\SlySoft\AnyDVD\ElbyCheck.exe" /L AnyDVD

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [DNS7reminder] "C:\Program Files\Nuance\NaturallySpeaking9\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\Nuance\NaturallySpeaking9\Ereg.ini

O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h

O4 - HKLM\..\Run: [iSUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [C:\Program Files\NetMeter\NetMeter.exe] C:\Program Files\NetMeter\NetMeter.exe

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\John\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - Startup: Dropbox.lnk = C:\Program Files\Dropbox\dropbox.exe

O4 - Startup: Password Safe.lnk = C:\Program Files\Password Safe\pwsafe.exe

O4 - Global Startup: hueyPROTray.lnk = C:\Program Files\Pantone\hueyPRO\hueyPROTray.exe

O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Program Files\Sitecom\Sitecom Wireless Network USB Adapter Turbo G WL-172\Installer\WLANUTL.EXE

O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe

O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201

O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200

O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203

O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Open with KUSO EXIF Viewer - C:\Program Files\KUSO EXIF Viewer\EXIF.htm

O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll

O9 - Extra 'Tools' menuitem: &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll

O9 - Extra button: IE Developer Toolbar - {48FFE35F-36D9-44bd-A6CC-1D34414EAC0D} - C:\Program Files\Microsoft\Internet Explorer Developer Toolbar\IEDevToolbar.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll

O11 - Options group: [iNTERNATIONAL] International*

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1222601183843

O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - https://vpn1.hw.ac.uk/sre/ICSScanner.cab

O16 - DPF: {B4CB50E4-0309-4906-86EA-10B6641C8392} (SlimClient Class) - https://vpn1.hw.ac.uk/SNX/CSHELL/extender.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)

O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Avira AntiVir Personal

[exile360]

You can try Dial-a-fix

Unzip it and run Dial-a-fix.exe then click the check box next to Fix Windows Installer under MSI although it seems you've already performed most of those steps, it's still worth a shot.

If that doesn't work, then run regedit by clicking Start and selecting Run then type "regedit" without the quotes in the run box.

Right click on HKEY_CLASSES_ROOT and select "Permissions". Make sure that SYSTEM and Administrators both have a checkbox next to Full Control.

[J-Hob]

I had already tried dial-a-fix which didn't work. I'll take a look at the registry permissions when I'm back from work tonight. Thanks for the suggestions.

[AdvancedSetup]

Have you actually checked and scanned for Malware or Virus with multiple products or had someone assist you with such logs?

[J-Hob]

I just checked the HKEY_CLASSES_ROOT and permissions are correctly set for system and administrators so that's not the problem.

I have run malwarebytes and avira to check for infections there but nothing has turned up. I posted the hijackthis log above, which I don't fully know what I'm looking for with but noboday seems to have noticed anything untoward with that that.

I seem to be regrettably heading towards clean install territory...

[AdvancedSetup]

Well HJT can't really look at much. It is a very cursory tool to assist. If you like you can open a new post in the HJT forum and myself or someone else can take a deeper look and see if we can find anything. It's up to you, but a bit of Malware scanning and review might be faster or more educational than a wipe and restore.

I can't promise how quickly we can get to your post though as there are lot of people seeking assistance right now, but we do try our best.

[J-Hob]

Well HJT can't really look at much. It is a very cursory tool to assist. If you like you can open a new post in the HJT forum and myself or someone else can take a deeper look and see if we can find anything. It's up to you, but a bit of Malware scanning and review might be faster or more educational than a wipe and restore.

I can't promise how quickly we can get to your post though as there are lot of people seeking assistance right now, but we do try our best.

I have now opened a new thread in the HJT forum. I appreciate that you are all doing this voluntarily and I am very grateful for any assistance offered in getting to the root of my issues.

I would be over-joyed if my issues can be resolved and I don't have to flatten my PC!

[AdvancedSetup]

Okay, I've replied. Please follow-up in the other forum with the requested information.

[rydall]

iv found that many virus and spyware remove of set the installer service to manual, and then corrupt it, so you cannot start it.

after a clean bill of health is given from Malwarebites scan do the following

Unregister Windows Installer, and then reregister Windows Installer. To do this, follow these steps:

1. On the "Start" menu, click "Run:.

2. In the "Open" box, type "msiexec /unreg", and then press ENTER.

3. On the "Start" menu, click "Run".

4. In the "Open" box, type "msiexec /regserver", and then press ENTER.

You may also want to download a new version of windows installer 2.0 or 3.5 from the Microsoft site after this

[AdvancedSetup]

Thanks for the feedback Rydall

The issue did turn out to be Malware that was still live on the system. I provided him with information on removal and the Windows Installer Service is now operational and he has applied Service Pack 3 - though after some more manual cleaning as a previous SP2 install had failed.

Attempting a Service Pack install while infected can cause a lot of unexpected damage to the file system and the Registry.

[rydall]

Thanks for the feedback Rydall

The issue did turn out to be Malware that was still live on the system. I provided him with information on removal and the Windows Installer Service is now operational and he has applied Service Pack 3 - though after some more manual cleaning as a previous SP2 install had failed.

Attempting a Service Pack install while infected can cause a lot of unexpected damage to the file system and the Registry.

thats good to hear, sorry for butting in on this post.

[AdvancedSetup]

No need to apologize, you were not butting in. This is an open General PC Help forum and everyone is welcome to provide their ideas and input trying to assist helping other users.

Thank you again for your feedback.