When computer boots, Windows Installer starts...

[Tony]

Hi Guys,

When my computer boots, the Windows Installer window opens saying "preparing to install..." and then a dialog opens asking for the "PhotoGallery" CD.

I recently got infected with a trojan, which I believe I have eliminated.

I've attached some logs from MBAM, HiJackThis. Can you help me to stop this installer from coming up when I boot?

Tony

[jholland1964]

Looks to me like MBAM took care of pretty much everything. You have LOTS of unnecessary starts, one of those is that preparing to install PhotoGallery business.
I would like you to do the following;
Uninstall that Trojan Scanner program. Really unnecessary, don't know much about it but it obviously didn't work since you had so many Trojans on the system.
I would also like you to Uninstall that Sunbelt CounterSpy Antispyware too.
Now I can't say either of these programs are bad program, there are just BETTER ones.
Next I would like you to download and install Codestuff Starter
This is a very easy way to control auto starting entries and those auto starting as services.
Once installed I would like you to go through and disable these auto start items, ALL of these can be run manually so I would recommend the setting be disabled;
SunJavaUpdateSched
Sonic\Update Manager
RealTray
HPHUPD06 )
HPHmon06 )
HP Software Update )-4 separate HP items noted, disable all.
HPHped06 )
QuickTime Task
iTunesHelper
Dell Support Agent
DellSupport
MSMSGS
swg
DellSupportCenter
OpenOffice
Acrobat Assistant
Adobe Gamma Loader
HP Image Zone Fast Start
Microsoft Office
WinZip Quick Pick

Once you have disabled the noted items in the Startups Tab then click the Services Tab go to each item noted and double click. Box will open where you will change settings. First TURN off each item and then set each to Manual unless otherwise noted.
Apple Mobile Device
CA License Client-Turn off and DISABLE. You might do a search for Computer Associates, it seems to refer to an old antivirus program. If you find it, delete it.
Sunbelt CounterSpy Antispyware-disable if this remains after the uninstall.
Once you have changed the settings above with CodeStuff Starter, REBOOT the computer.
Run a new HJT scan and post it here and we can see if there are any other items needing fixing.
Judy

[Tony]

When I set the startup items you suggested to manual, and disabled the specified services, the system did not bring up the Windows Installer this time. So I think this is great!

Attached is the new HJT log for your review. Let me know if you recommend further action.

Thanks,
Tony

[jholland1964]

Think your log looks pretty good. Do you feel the computer is running better?
I would suggest you add SpywareBlaster as a good, FREE program to prevent dialers and hijackers. Link can be found HERE

[Tony]

I think the PC is faster now, in addition to not having the infection. Many thanks. I will download the product you recommended.

Tony