Member Avatar for Stolentimes

I desperately need to install Windows Live Writer.

I previously Installed Writer in my xp system.

But now, after formatting my XP, I can not Download the Windows Live Installer in my computer.

The strange thing is that I can’t not even access any Microsoft.com pages.

However, I downloaded Windows Live Installer thought my friend’s system. But when I try to run the Installer It comes up with a Error message saying that “ Couldn’t Install Programs. Use windows update to download the latest version of Windows Installer, and then try again”


What should I do now??

  • 2 Contributors
  • 8 Replies
  • 315 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by caperjack

Dani AI

Generated

Quick summary and what to try next

This thread shows did the right first steps (reinstall/activate XP and run malware cleanup) and correctly pointed toward activation and a malicious autorun. If Microsoft sites are still unreachable and the Windows‑Installer error persists, the remaining causes are usually local name/redirecting problems (hosts or proxy), a corrupted networking layer (Winsock/DNS), or a broken Windows Installer registration. Follow these checks in order.

Quick checklist (run these from an Administrator command prompt or via the GUI)

nslookup microsoft.com
ping microsoft.com
tracert microsoft.com

ipconfig /flushdns
netsh winsock reset
msiexec /unregister
msiexec /regserver

What each step and why

  • Check and reset the Hosts file — malware often adds entries that redirect or block microsoft.com; restore the default hosts file or remove suspicious lines before testing again. (support.microsoft.com)
  • Check Internet Explorer / system proxy settings (Tools → Internet Options → Connections → LAN Settings) and remove any proxy the machine shouldn’t be using; some infections set a proxy to intercept traffic. (support.microsoft.com)
  • Reset Winsock and flush DNS to remove broken Layered Service Providers or cached wrong addresses; reboot after the reset. (learn.microsoft.com)
  • Re‑register the Windows Installer service if MSI installs fail (msiexec /unregister then msiexec /regserver), or install the matching Windows‑Installer redistributable for XP if needed. (support.microsoft.com)

Malware double‑check and cautions

  • Run a second independent scanner (for example Malwarebytes or Microsoft’s removal tools) to ensure no remnants remain; infections can survive one cleanup pass. (malwarebytes.com)
  • Back up the hosts file before editing, and avoid running winsock reset if a VPN/enterprise LSP is required without verifying settings (it can remove VPN helpers).

If the commands show DNS resolves correctly but browsers still fail, test from another network/router and verify no router-level blocks or parental controls are in place. If all else fails, consider an in‑place repair (repair install) or reinstall with all current service packs.

Recommended Answers

All 8 Replies

Member Avatar for caperjack

have you activated your new install of windows yet ,has to be done before you can run windows updates .
you need lates window install not windows live installer ,check here .

Edited by caperjack because: n/a
Member Avatar for Stolentimes

But I can not browse any web Page related to Microsoft .com

Member Avatar for caperjack

But I can not browse any web Page related to Microsoft .com

so download it on a friends ,
you miss my question in last post ??????????????????
did you activate windows yet,if yes ,then scan computer for viruses

Edited by caperjack because: n/a
Member Avatar for Stolentimes

I activate my Windows and the Live Installer Seems to be ok. Thanks for your tips.
But It cants Install any Program as My Browsers cant access the server at Microsoft.com.

Now What to do with this. Please Help.

Member Avatar for Stolentimes

I am also putting a HijackThis log file here

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:47:30 PM, on 3/8/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\S3trayp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DAP\DAP.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\sagor\LOCALS~1\Temp\herss.exe
O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: BlogJet This! - {6AB94FCC-8E1D-4B05-9F01-56481A9ED14C} - C:\Documents and Settings\sagor\Local Settings\Application Data\DiFolders Software\BlogJet\blogthis.js
O9 - Extra 'Tools' menuitem: BlogJet This! - {6AB94FCC-8E1D-4B05-9F01-56481A9ED14C} - C:\Documents and Settings\sagor\Local Settings\Application Data\DiFolders Software\BlogJet\blogthis.js
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{1834F884-6B42-448F-9232-BF0A9EB53465}: NameServer = 8.8.8.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{1834F884-6B42-448F-9232-BF0A9EB53465}: NameServer = 8.8.8.8
O17 - HKLM\System\CS2\Services\Tcpip\..\{1834F884-6B42-448F-9232-BF0A9EB53465}: NameServer = 8.8.8.8
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 3956 bytes
Member Avatar for caperjack

you have a trojan virus on you computer here!
O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\sagor\LOCALS~1\Temp\herss.exe

use hijackthis to stop it . then get this program to clean up computer .
http://www.superantispyware.com/

Member Avatar for Stolentimes

Thanks for your Replay.

I deleted the trojan virus with hijackthis and then cleaned my system using your recommended software.( I could not accessed to http://www.superantispyware.com/, I downloaded it through a Proxy browser)

The problem, however still remain, I can not browse any Microsoft page.

Latest hijackthis log file of my system

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:42:56 PM, on 3/8/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 SP2 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\S3trayp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: BlogJet This! - {6AB94FCC-8E1D-4B05-9F01-56481A9ED14C} - C:\Documents and Settings\sagor\Local Settings\Application Data\DiFolders Software\BlogJet\blogthis.js
O9 - Extra 'Tools' menuitem: BlogJet This! - {6AB94FCC-8E1D-4B05-9F01-56481A9ED14C} - C:\Documents and Settings\sagor\Local Settings\Application Data\DiFolders Software\BlogJet\blogthis.js
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{1834F884-6B42-448F-9232-BF0A9EB53465}: NameServer = 8.8.8.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{1834F884-6B42-448F-9232-BF0A9EB53465}: NameServer = 8.8.8.8
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 2869 bytes
Member Avatar for caperjack

open internet explorer ,go to tools /internet option /advanced ,down the bottom reset ie default settings .
also if you can download ccleaner program and run the file clean up and the registry cleanup .
www.ccleaner.com

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.