Go Back   Tech Support Forum > Microsoft Support > Windows 7 , Windows Vista Support

User Tag List

[SOLVED] iTunes update to version 11.2.2 fails

This is a discussion on [SOLVED] iTunes update to version 11.2.2 fails within the Windows 7 , Windows Vista Support forums, part of the Tech Support Forum category. The iTunes application on my computer notified me that an update to version 11.2.2 was available. Clicking the "Install" button


Closed Thread
 
Thread Tools Search this Thread
Old 06-24-2014, 12:35 PM   #1
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



The iTunes application on my computer notified me that an update to version 11.2.2 was available. Clicking the "Install" button and entering the administrator password led to downloading and installation of the update...except at the end of the process I receive a notice that there were errors in the installation of the updates and to try downloading the file and installing manually. When I follow this procedure, I receive the following error message:



I have tried uninstalling iTunes so I can re-install it but the uninstaller returns the same error. I have tried deleting the problem file manually but get a message that I "need permission from SYSTEM" to do so. (Apparently administrator access isn't sufficient.)

At this point I can neither uninstall nor install iTunes and have not found any help at the Apple website. Any suggestions for dealing with this situation will be much appreciated.
Tom_47 is offline  
Sponsored Links
Advertisement
 
Old 06-24-2014, 04:57 PM   #2
Microsoft MVP
Microsoft Team Moderator
Articles Team Manager
Hardware Team Moderator
 
Masterchiefxx17's Avatar
 
Join Date: Feb 2010
Location: Wisconsin, USA
Posts: 39,490
OS: Windows 10 Professional 64bit

My System


Use this program here to uninstall iTunes:

Revo Uninstaller Pro - Uninstall Software, Remove Programs easily, Forced Uninstall, Leftovers Uninstaller

Make sure to follow the entire deletion process.
Masterchiefxx17 is offline  
Old 06-25-2014, 04:38 AM   #3
TSF Emeritus
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



Quote:
I "need permission from SYSTEM"
You can try taking ownership of this file before running the install
  1. Click on the button. Inside the search box type in CMD
  2. Right click on CMD => Choose Run as Administrator
  3. Inside the Command Prompt windows copy and paste the following commands
    takeown /f "%programfiles%\iPod\bin\TBD349C.tmp"
    icacls "%programfiles%\iPod\bin\TBD349C.tmp" /grant administrators:F
  4. Please copy and paste the results back from the CMD window

This will give Admin Full access over this file

When you run iTunes make sure it is ran by admin
Go The Power is offline  
Sponsored Links
Advertisement
 
Old 06-30-2014, 11:09 AM   #4
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



Thanks for the replies.

Masterchiefxx17 - I downloaded the free trial version of Revo Uninstaller Pro from the link you provided. When I attempted to install it (as administrator) I received the following error message:



Clicking the "OK" button delivered the following:



Since I have no idea what "code 5" is or how to "correct the problem," I'm at a loss as to what to do next.


Go The Power - Running cmd as administrator with the first command copied and pasted returned the following error message:



Changing the directory from C:\Windows\System32\ to C:\ or C:\Windows\ produces the same error message.

I appreciate the suggestions and am open to any ideas on how to proceed from here.
Tom_47 is offline  
Old 06-30-2014, 01:37 PM   #5
TSF Emeritus
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



Hi Tom_47,

I can't see any of the pictures you posted.

Quote:
Since I have no idea what "code 5" is or how to "correct the problem," I'm at a loss as to what to do next.
Code 5 = Access Denied

Quote:
Changing the directory from C:\Windows\System32\ to C:\ or C:\Windows\ produces the same error message.
Please don't try and take ownership of C or C\windows or any system folders it can cause a lot of damage if done incorrectly.

How many users accounts do you have on this computer?
Go The Power is offline  
Old 07-03-2014, 10:17 PM   #6
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



Go The Power,

Let me try the images again.

1st Revo Uninstaller Pro error message:



2nd Revo Uninstaller Pro error message:



Cmd window error message:



I hope they come through this time.

I have 2 user accounts and 1 administrator account on this computer.

Thanks for working on this for me.
Tom_47 is offline  
Old 07-04-2014, 01:43 AM   #7
TSF Emeritus
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



Hello Tom,

Hmm... I wonder if an access denied message is appearing due to a running process blocking the Ownership/Install

Lets open up Task Manager -> Process -> Kill anything that you see that are related to apple, iPod, iTunes etc. (it might be easier to arrange processes by description

Some process names may include:
AppleMobileDeviceService,exe
iPodService.exe
mDNSResponder.exe
iPodService.exe
iTunesHelper.exe


Try the take ownership command again but this time over
takeown /f "%programfiles%\iPod\bin\TBD349C.tmp"
icacls "%programfiles%\iPod\bin\TBD349C.tmp" /grant administrators:F


If you still get Access Denied message lets make sure no program is 'Locking' this file

Resource Monitor
  • Click on Start -> In the search field type in Resource Monitor -> Select Resource Monitor
  • Click on the tab CPU -> Expand the Associated Handles section -> Inside the search field search for TBD349C
  • Do you get any results? if you do right click on each and End process

Try to take ownership and re installer iTunes.

If all the above fails lets take a look at the access levels on the file itself.

PowersShell ACL
  • Click Start -> Inside the search field search for Powershell.exe
  • Press Enter
  • Inside the PowerShell windows copy the following command
    get-acl "C:\program files\iPod\bin\*.*" >1
  • Press Enter
  • Type in notepad 1
  • Press Enter
  • You should now have a notepad file with a list of all the files inside the BIN folder along with all of there Security Permissions. Please post the contents back into this thread.

Thanks

Alex
Go The Power is offline  
Old 07-04-2014, 08:19 AM   #8
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



Hi Alex,

Here's what happened:

I found several Apple related processes in Task Manager and ended them. When I ran the take ownership command I got the same error message as before.

Resource Monitor showed no results at all in the Associated Handles section.

I did finally get some results with Powershell ACL which are these:

Directory: C:\program files\iPod\bin


Path Owner Access
---- ----- ------
iPodService.Resources NT AUTHORITY\SYSTEM NT SERVICE\TrustedInst...
iPodService.exe NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD1377.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD21E0.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD252A.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD2683.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD33C4.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD341.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD349C.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD48C1.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD64F4.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD65A1.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD7B38.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD9CE3.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBD9F75.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDA223.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDA2FF.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDA989.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDAF7D.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDBED6.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDC858.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDC9B0.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDD021.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDD5C0.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDD63E.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDD8F9.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDD9B5.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDE930.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDE98F.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...
TBDF211.tmp NT AUTHORITY\SYSTEM NT AUTHORITY\SYSTEM Al...

I hope this helps and really appreciate all you're doing.

Tom
Tom_47 is offline  
Old 07-04-2014, 09:23 AM   #9
TSF Emeritus
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



Hi Tom,

That cut of some information I was after.

Please run it again, but with the below commands now:

PowersShell ACL
  • Click Start -> Inside the search field search for Powershell.exe
  • Press Enter
  • Inside the PowerShell windows copy the following command
    get-acl "C:\program files\iPod\bin\*.*" | format-list >2
  • Press Enter
  • Type in notepad 2
  • Press Enter
  • You should now have a notepad file with a list of all the files inside the BIN folder along with all of there Security Permissions. Please post the contents back into this thread.
Go The Power is offline  
Old 07-04-2014, 10:35 PM   #10
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



Hi Alex,

Here's the output from PowerShell ACL using the new command:



Code:
Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\iPodSe
         rvice.Resources
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT SERVICE\TrustedInstaller Allow  FullControl
         NT SERVICE\TrustedInstaller Allow  268435456
         NT AUTHORITY\SYSTEM Allow  FullControl
         NT AUTHORITY\SYSTEM Allow  268435456
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Administrators Allow  268435456
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
         BUILTIN\Users Allow  -1610612736
         CREATOR OWNER Allow  268435456
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;S-1-5-80-956008885-3418522649-1831038044-185329
         2631-2271478464)(A;CIIOID;GA;;;S-1-5-80-956008885-3418522649-183103804
         4-1853292631-2271478464)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;FA;;;B
         A)(A;OICIIOID;GA;;;BA)(A;ID;0x1200a9;;;BU)(A;OICIIOID;GXGR;;;BU)(A;OIC
         IIOID;GA;;;CO)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\iPodSe
         rvice.exe
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD137
         7.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD178
         F.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD21E
         0.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD252
         A.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD268
         3.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD33C
         4.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD341
         .tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD349
         C.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD48C
         1.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD56C
         B.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD58E
         7.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD5AD
         A.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD64F
         4.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD65A
         1.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD6CC
         C.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD77C
         D.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD7B3
         8.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD8A0
         5.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD9CE
         3.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD9F7
         5.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDA22
         3.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDA2F
         F.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDA98
         9.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDAA2
         .tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDAF7
         D.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDBED
         6.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDC85
         8.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDC9B
         0.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDD02
         1.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDD5C
         0.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDD63
         E.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDD6C
         0.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDD8F
         9.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDD9B
         5.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDE93
         0.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDE98
         F.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDF21
         1.tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBDF2F
         .tmp
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)

I really appreciate your help with this.

Tom
Tom_47 is offline  
Old 07-05-2014, 02:01 AM   #11
TSF Emeritus
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



Hello again Tom

Something funny is going on with the access for TBD349.TMP it looks like everything should work fine.

Code:
Path : Microsoft.PowerShell.Core\FileSystem::C:\program files\iPod\bin\TBD349C.tmp
     Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow FullControl
     BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadAndExecute, Synchronize
Audit :
     Sddl : O:SYG:SYD:     AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)
It shows SYSTEM as the owner which is okay and also shows Admins to have Full control over the file, which in theory should make it work when you run the install as Admin.

All these files inside the folder Inherit their permissions from the Parent folder, in this case C:\program files\iPod\bin. We know this happens from the SDDL string AI which stands for SDDL_AUTO_INHERITED (the part I highlighted in blue)

As we are going to reinstall iTunes anyways lets see if we can just rename the whole folder.
  • Please map to C:\program files\iPod\bin
  • Rename bin to OLD__BIN
I Have a feeling it wont be quite so simple though. If it does rename try running the installer again. If not please continue.

**Note for anyone reading this:: Please be careful when tampering with permissions\Ownership the following steps should not be taken on any System files\folders**

Tom, the above note is just in case someone else comes across this thread and tries to take ownership of the wrong file\folder, your case is different were trying to remove the folder :)
  • Map to folder C:\program files\iPod\
  • Right click on bin -> Properties
  • Click on the tab Security -> Look for the bottom Advanced
  • Click the tab Owner -> In the field 'Current Owner' it should say SYSTEM
  • Click on Edit -> You should now be prompt with the available members to select -> Select you username and tick Replace owner on subcontainers and objects Click Ok ->
  • Now press OK on every box you have open until you are taken back to C:\program files\iPod\ folder.
  • Once back out the screen right click on the Bin folder again -> Properties -> Security
  • This time I want you to click on Edit -> Select your Username in the list -> then tick all the Permissions boxes -> Press OK

Now please try and rename Bin to OLD_BIN and it "should" rename.

Run iTunes installer again if the rename works or doesn't.

If this doesn't work we are going to have to try a more aggressive approach to delete the folder.
Go The Power is offline  
Old 07-08-2014, 02:03 PM   #12
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



Hello Alex,

Well, here's what happened this time.

I logged in as Administrator and first tried renaming the whole bin folder as you suggested. Not surprisingly, I got this error message:



So I next started through the process to change the folder ownership. I got as far as selecting my username as the new owner and ticking Replace owner on subcontainers and objects. When I clicked "OK" I received the following series of messages:









I guess we're going to have to try that "more aggressive approach" you mentioned.

Thanks again for your continuing help.

Tom
Tom_47 is offline  
Old 07-08-2014, 03:56 PM   #13
TSF Emeritus
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1


Hi Tom,

Are those photos in order of the error messages? If they are that is pretty normal to happen if you click ok on that last pop up and close out of all Properties. Then re launch the properties again of the folder are you now listed as the owner? If yes then try and make changes to the security permissions to allow all access.

If that doesn't work download File Assassin from here:
https://www.malwarebytes.org/downloads/

And add the folder C:\program files\iPod\bin into the program -> then run
Go The Power is offline  
Old 07-08-2014, 04:56 PM   #14
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



Hi again, Alex,

Yes, the photos are in the order of the messages. Where a couple were stacked on top of each other, I posted the bottom one first.

I just rechecked the ownership of the bin folder and its contents and it is still SYSTEM.

Working as Administrator, I downloaded and installed File Assassin. Adding C:\program files\iPod\bin into the text box and clicking "Execute" gave the following message:



Thinking that I might have to specify each file in the bin folder, I selected the first TMP file in the list and clicked "Execute." The result appeared promising:



Navigating in Windows Explorer to the file in question and attempting to delete it gave me this:



Next, I tried File Assassin again with the 'Delete file' option checked:



As far as puzzles go, this is a pretty good one -- way beyond my ability to solve. If you can think of anything else to try, please let me know. I really appreciate all the effort you're putting into this.

Tom
Tom_47 is offline  
Old 07-09-2014, 01:39 AM   #15
TSF Emeritus
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



These files are very suborn!

Please go Here and download PendMoves and MoveFiles -> Save the zip file to your desktop

Go to your desktop Right click on the PendMoves.zip file and choose Extra All -> Change the Browse location to Desktop -> Extract

Make sure Movefile.exe is on your desktop otherwise the next command wont work
  1. Right click on the button
  2. Click on Command prompt (Admin) => Press Yes on the prompt
  3. Inside the Command Prompt windows copy and paste the following command
    %userprofile%\desktop\movefile.exe "C:\program files\iPod\bin" ""

Restart your PC

Then map to the folder and see if BIN has been deleted.

If the above fails Download SUPERANTISpyware from Here

Then map to C:\program files\iPod\bin -> right click on BIN -> Choose SUPERDelete File Remover -> type in YES in the bos at the top and click Continue
Go The Power is offline  
Old 07-09-2014, 11:02 AM   #16
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



Hi Alex,

I got PendMoves and MoveFiles downloaded and extracted to the desktop but I'm not sure where to find the button? I tried right-clicking on the start button but my only options were 'Properties' or 'Open Windows Explorer.' I also opened a Command Prompt window as Administrator and pasted in the command in blue. When I hit 'Enter' I got this message:



Maybe I shouldn't have hit 'Enter' or maybe this was the wrong Command Prompt window?

Not to waste time, I next downloaded SUPERANTISpyware. I got the free trial of the professional version as I thought that might have all the features. Running the installer led to this:



It's likely I did something wrong with the PendMoves method so will wait to hear from you on that.

Once again, thanks for your help.

Tom
Tom_47 is offline  
Old 07-09-2014, 08:28 PM   #17
TSF Emeritus
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



Hi Tom,

Sorry about that, I made a few little mistakes with my instructions. For some reason I thought you were on Win8.
You did the right thing by going into the Command prompt as Admin. What’s strange is the %userprofile% defaulted to SYSTEM instead of your Admin account.

Let’s try again with MoveFile.exe. But this time please copy and paste MoveFile.exe into the C:\ drive (Path should end up like C:\MoveFile.exe).
Then run the following command from Command Prompt as Admin
C:\movefile.exe "C:\program files\iPod\bin" ""

You should hopefully get a successful message this time.
After you have entered the above command can you please enter in %username% and let me know the results.
Go The Power is offline  
Old 07-10-2014, 11:27 AM   #18
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



Hi Alex,

Here are the results of the retry:



I'm not sure if this is what you're looking for and it's also possible I've messed up your instructions.

Anyway, let me know, and thanks again for all your help. It's much appreciated.

Tom
Tom_47 is offline  
Old 07-10-2014, 01:00 PM   #19
TSF Emeritus
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1


The first part looks good. Can you please restart the PC? The folder should hopefully be deleted after that.

As for the second part it is showing your Admin account to be SYSTEM which is not correct. I am going to have to look into this. About to get ready for work, currently 5.30 AM here in South Australia .

EDIT:: Can you please also run the below command in Command prompt as Admin
reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s >123&&notepad 123 and post the results back into this thread.
Go The Power is offline  
Old 07-10-2014, 05:01 PM   #20
Registered Member
 
Join Date: May 2014
Location: Washington State USA
Posts: 59
OS: Microsoft Windows 10 Home (64 bit)



Hi Alex,

I rebooted the computer and the bin folder is still there.

Here is the output you requested:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
ProfilesDirectory REG_EXPAND_SZ %SystemDrive%\Users
Default REG_EXPAND_SZ %SystemDrive%\Users\Default
Public REG_EXPAND_SZ %SystemDrive%\Users\Public
ProgramData REG_EXPAND_SZ %SystemDrive%\ProgramData

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
Flags REG_DWORD 0xc
State REG_DWORD 0x0
RefCount REG_DWORD 0x1
Sid REG_BINARY 010100000000000512000000
ProfileImagePath REG_EXPAND_SZ %systemroot%\system32\config\systemprofile

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19
ProfileImagePath REG_EXPAND_SZ C:\Windows\ServiceProfiles\LocalService
Flags REG_DWORD 0x0
State REG_DWORD 0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
ProfileImagePath REG_EXPAND_SZ C:\Windows\ServiceProfiles\NetworkService
Flags REG_DWORD 0x0
State REG_DWORD 0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2907018271-4102885478-2313599798-1000
ProfileImagePath REG_EXPAND_SZ C:\Users\Tom
Flags REG_DWORD 0x0
State REG_DWORD 0x0
Sid REG_BINARY 0105000000000005150000001F9445AD66108DF436BBE689E8030000
ProfileLoadTimeLow REG_DWORD 0x0
ProfileLoadTimeHigh REG_DWORD 0x0
RefCount REG_DWORD 0x2
RunLogonScriptSync REG_DWORD 0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2907018271-4102885478-2313599798-1003
ProfileImagePath REG_EXPAND_SZ C:\Users\Lori
Flags REG_DWORD 0x0
State REG_DWORD 0x0
Sid REG_BINARY 0105000000000005150000001F9445AD66108DF436BBE689EB030000
ProfileLoadTimeLow REG_DWORD 0x0
ProfileLoadTimeHigh REG_DWORD 0x0
RefCount REG_DWORD 0x1
RunLogonScriptSync REG_DWORD 0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2907018271-4102885478-2313599798-1006
ProfileImagePath REG_EXPAND_SZ C:\Users\System Administrator
Flags REG_DWORD 0x0
State REG_DWORD 0x100
Sid REG_BINARY 0105000000000005150000001F9445AD66108DF436BBE689EE030000
ProfileLoadTimeLow REG_DWORD 0x0
ProfileLoadTimeHigh REG_DWORD 0x0
RefCount REG_DWORD 0x1
RunLogonScriptSync REG_DWORD 0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2907018271-4102885478-2313599798-501
ProfileImagePath REG_EXPAND_SZ C:\Users\Guest
Flags REG_DWORD 0x0
State REG_DWORD 0x80
Sid REG_BINARY 0105000000000005150000001F9445AD66108DF436BBE689F5010000
ProfileLoadTimeLow REG_DWORD 0x0
ProfileLoadTimeHigh REG_DWORD 0x0
RefCount REG_DWORD 0x0
RunLogonScriptSync REG_DWORD 0x0

Hope this helps and many thanks.

Tom
Tom_47 is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar Threads
Thread Thread Starter Forum Replies Last Post
FBI.Cybercrime lock-out
Hello and thank you in advance for helping me. I am locked out of my computer with a notice from "FBI.Cybercrime" to pay a fine or the FBI will be here to haul me off to prison. I received a suggestion that through Bleeping Computers I would find the instructions to follow for self help removal...
Cathy95820 Resolved HJT Threads 34 05-06-2013 03:49 AM
Help..xp bsod when i run virus scan.
Hi, this is Troy, i have windows xp with sp3 and i everytime i run a virus scan and have run multiple kinds from windows to maleware bytes...you name it. I get to a point in the scan where i get a blue screen and then computer shuts down. When i run it with out doing a scan the computer stays on....
sootherlol Virus/Trojan/Spyware Help 0 02-18-2013 05:31 PM
WMI broken + odd symptoms
Hi, First, my thanks to the people who run this site, There have been several instances where I have been walked through a malware removal by an analyst in the malware removal forum and can honestly say the work you guys do for free is astounding!! The person who helped me noted that the...
Chrisevans19 Windows 7 , Windows Vista Support 11 10-17-2012 01:27 AM
Help Please
Dear Sirs My computer crashed on Sunday night 18.03.2012. I can now only open it in safe mode. On Sunday night I was removing what I thought to be dangerous files, using my Antivirus Program Microsoft Security Essentials when the computer crashed. There were 4 Files that I was attempting...
Jack Willday Resolved HJT Threads 83 05-01-2012 02:51 PM
Bad Image Errors
I'm trying to get rid of some bad image errors and rundll errors during start-up on my windows xp computer. I ran the HiJackThis program and here is the log. I don't know which ones to delete. Please help. How do I avoid this in the future? Logfile of Trend Micro HijackThis v2.0.4 Scan...
Generalpork12 Resolved HJT Threads 15 02-16-2012 03:52 PM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 12:13 AM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts