Massive headhack!

Post new topic   Reply to topic

View previous topic View next topic Go down

Solved Massive headhack!

Post by woodbum on Sat 15 Mar 2008, 6:43 pm

Ok, i give up! Got a soft on ASTA but the freaking thing doesn't want to be installed!! :confused:
It's the autocad 2009 in ISO, burned OK but when installing, popup window ask for the "DISK"!
Tried mounting it on virtual "E" and same thing happens, also had other error" error 2738, Could not access VBScript run time for custom action"?!
I know that some could install and some other! Well ya know the story.
Could i have a bug or missing REG somewhere with the installer?
Posted in the tread at ASTA and few guys have the same problem Suspect

Any recommendation guys?

TKS
Woody
Use it or loose it!
But don't ever doubt about it!
That's it!

woodbum
Newbie Surfer
Newbie Surfer

Posts : 16
Joined : 29 Dec 2007
Country : http://geekpolice.net/users/89/79/54/album/defaul10.png

Back to top Go down

Re: Massive headhack!

Post by Doctor Inferno on Sat 15 Mar 2008, 11:43 pm

"error 2738, Could not access VBScript run time for custom action"

This error message indicates that the VBScript engine is not currently registered on the machine where the install/uninstall is taking place.

Resolution:


As a security measure, Windows Installer will not load script engines registered in HKEY_CURRENT_USER. As a user-writable store, a normal user could get an elevated install to run their library masking as a script engine if the custom action was not explicitly attributed with msidbCustomActionTypeNoImpersonate (0x0800).

This is an elevation of privileges attack; thus, Windows Installer returns error message 2738 or 2739 for custom actions type 6 and type 5, respectively, and returns Windows error 1603, ERROR_INSTALL_FAILURE.


Check that vbscript.dll and jscript.dll aren't registered in HKEY_CURRENT_USER (HKCU), checking for the registry keys below.

* VBScript, HKCU\SOFTWARE\Classes\CLSID\{ B54F3741-5B07-11CF-A4B0-00AA004A55E8}
* JScript, HKCU\SOFTWARE\Classes\CLSID\{ F414C260-6AC0-11CF-B6D1-00AA00BBBB58}


Remove these keys if they exist in HKEY_CURRENT_USER.

Also be sure that if you need to re-register vbscript.dll or jscript.dll, you run regsvr32.exe in an elevated console on Windows Vista and newer with UAC enabled; otherwise, you'll end up registering the runtimes in HKCU.


I Don't Jump High, I Fly Low.

Doctor Inferno
RESIDENT SURGEON
RESIDENT SURGEON

Posts : 2349
Joined : 26 Dec 2007
Location : †Virus Vault†
Operating System : [Dual Boot] XP Pro & Vista Ultimate
Country : http://www.forumer.com/resources/images/flags/flag_singapore.png

Back to top Go down

Re: Massive headhack!

Post by woodbum on Sun 16 Mar 2008, 5:33 am

Tks for the answer Doc, but i look in the HKCU and there is no keys like the one you ask me to remove.

Is there a way to now if the windows XP is running in normal configuration, like if somebody in my house played in the REG and erased some keys by mistake?
I was down to rebooting with the OS in the installation and try a XP repair from the disk but i have no clue as per if it is a virus or deleted keys from the REG.
I did a CHKDSK and pass with geeksquad, check CCleaner, deleted old softwares, Vundoo and scans etc,etc...

I don't know if a HJlog would help you to but i'm getting confused a bit!

Help again!
TKS
Use it or loose it!
But don't ever doubt about it!
That's it!

woodbum
Newbie Surfer
Newbie Surfer

Posts : 16
Joined : 29 Dec 2007
Country : http://geekpolice.net/users/89/79/54/album/defaul10.png

Back to top Go down

Re: Massive headhack!

Post by Doctor Inferno on Sun 16 Mar 2008, 11:06 am

Well, you could post a Hijackthis Log in the Malware Removal & HJT log file analysis for me to check and see if it is the cause of the problem.

Another possbility of this problem would be the person who shared the software did not burn it properly resulting in the problem of not being able to install it properly.


I Don't Jump High, I Fly Low.

Doctor Inferno
RESIDENT SURGEON
RESIDENT SURGEON

Posts : 2349
Joined : 26 Dec 2007
Location : †Virus Vault†
Operating System : [Dual Boot] XP Pro & Vista Ultimate
Country : http://www.forumer.com/resources/images/flags/flag_singapore.png

Back to top Go down

View previous topic View next topic Back to top


Permissions of this forum:
You cannot reply to topics in this forum