MS Patch , Any Idea's ? ?

[AndyManchesta]

Hi everyone ,

Ive been trying to help a MSAS user on these newsgroups
who has problems, He has installed a patch which seems to
have damaged MSAS and made it impossible to remove, Some
of the Checkpoints are de-activated and he said its not
possible to re-activate them, repair MSAS or Remove MSAS
using the Add/Remove screen

Here's some screen shots from the Add/Remove screen on
his system

http://andymanchesta.com/MSAS/MSPATCH1.jpg
http://andymanchesta.com/MSAS/MSPATCH2.jpg
http://andymanchesta.com/MSAS/MSPATCH3.jpg

I wanted to get some advise on what the nest step should
be , If he cannot remove MSAS using the Add/Remove screen
in normal mode and safe mode then I dont think he will be
able to remove the MSAS folder in C:drive (I've tried
while MSAS is running and it shows "Cannot Delete
gcAntiSpywareLibrary.dll:Access Is Denied" If MSAS is
shut down it then shows "Cannot Delete
shellextention.dll:Access Is Denied" untill the
add/remove screen entry is removed)

I was thinking of trying "Windows Installer Clean Up"

http://support.microsoft.com/default.aspx?scid=kb;en-
us;290301

But this only seems to remove the Add/Remove screen entry
and then I tried again to delete the Antispy folder in
c:drive and was given the above "Access is Denied"
message. Ive checked a Hijack This log from his pc and
there is no malware problems showing in the log so this
is probably a download from MS that has somehow entered
itself as a patch for MS Antispy

I received the screen shots today and this message

"Something i forgot to mention was when in safe mode, i
was told windows installer could not be used in safe mode
or windows installer was not installed/configured
properly? I did download a redistributable version from
the microsoft website thinking this might correct
something "

I'm not sure if this was to repair the patch problem or
has maybe caused it but thought I'm best asking other
helpers for thier opinion on this as it's not a common
problem ?


Thanks Andy

 

[AndyManchesta]

Think I may be getting somewhere, I asked him to try all
the usual methods to remove and repair MS Antispy but its
not possible then asked him to Send the MSAS folder into
a compressed Zipped Folder and email it to me incase it
contains this patch,

If I compress my MSAS folder its about 4.7MB but he said
even after compressing his its about 15MB so he cannot
send it, This makes it look like the patch is in the MSAS
folder as Id already said to delete the contents of
Quarantine and the error file and its still that size,

He's now sent some more screen shots and some of the
items zipped up from the MSAS folder and he thinks the
update patch is included so I will check through them
abit later and install it on my system and see if I can
find a way to fix things


Andy