Taking 'ownership' questions.

[tkmops]

Latest findings:ran chkdsk on my 3 'C' drives(one is my main 'C', one is an old HD, one is an old SSD drive),
all finished OK. Did a sfc /scannow on all three 'C' drives, all ran OK.

As per the Trend tech, I changed the ownership of my old HD to Administrators(Tod-PC\Administrators), and ran the chkdsk and sfc again...both ran OK.

Then Trend hung at 26% scanning my old HD(E) drive.

Emailed this to the Trend tech...waiting for a response.

Thanks everyone for all your help...will post back when I have more info.       

[patio]

You should give him a heads up...a previous install of another A/V app may be causing the hangs...just a suggestion.

[tkmops]

Latest news:The Trend tech wanted to know exactly what file Trend was hanging on...I told him, along with the fact that when I scanned just that file, Trend ran OK.

Then I ran a scan using right-click on the drive(instead of using the Trend interface), and it hung.

Then I ran a scan on just the file it hung on, and it ran OK.

So, I asked the Trend tech why does Trend hang when running scans on whole drive, but works OK when scanning individual files. Waiting for response.... 

I don't have any other A/V, unless you count Windows Defender...and I've been using that and Trend for years with no issues.

[tkmops]

I don't know if this is related or not, but since it happened right after I changed the ownership, WMP is not working again. I've tried to change the owner of my old PC 'C'(E) drive back to 'TrustedInstaller', it comes up with 'name cannot be found'. How can I change this back?

[tkmops]

I googled how to do this and was able to use NT SERVICE\TrustedInstaller to put my E drive back to TrustedInstaller owner. WMP still won't work, maybe it will take a reboot? Will post back later...

[tkmops]

After many hours of un-installing/installing, research, this is what happened:

1) I uninstalled Trend
2) uninstalled Mal-Ware Bytes...I didn't know I had this, as there was no desktop, or task bar icon.
3) Noticed that 'TrustedInstaller' was 'stopped' in task manager/services, at first, I got 'unable to start service', but after a few trys, it started.
4) Re-installed Trend, and a 'C' scan to completion(first time in 5 weeks)
5) Re-installed Mal-Ware Bytes, ran a 'C' scan OK
6) Ran another Trend 'C' scan...it hung.

So, it seems that Trend work fine by itself, but hangs when Mal-Ware Bytes is running.

7) Un-installed both Trend and Mal-Ware Bytes
Installed Mal-Ware Bytes first this time, then...
9) Installed Trend.
10) Ran a Trend 'C' scan, it hung.

Not sure why this is happening now, as I've had Trend and Mal-Ware Bytes(unknown to me) running for years. Maybe one of the Trend updates has made it impossible to work with Mal-Ware Bytes?

So, after all this, I have just Mal-Ware Bytes running. I have about 6 months left on my Trend subscription, but it's only about $18...so no big deal.

My two questions now are:should I have 'TrustedInstaller'  stopped, or running in Task Manager\services? And, is just having Mal-Ware Bytes(Premium 3.1.2) going to be sufficient protection?

(Latest:'TrustInstaller in Task Manager\Services is Stopped, and I get 'Access Denied' when trying to start it...is this a concern?) 

For every scan Mal-Ware Bytes checks for updates, pre-scan operations, scan for rootkits, scan memory, scan startup files, scan registry, scan file system, and Heuristics Analysis.

In the Mal-Ware Bytes dashboard, it has:Web Protection On, Exploit protection On, Malware protection On, and Ransomware protection On.

If just running Mal-Ware Bytes is not going to be enough protect, can the forum community recommend a anti-virus-mal-ware-ransomware/internet protection product? OK if paid.   

According the Mal-Ware Bytes web site, it does this:

Protects you from advanced (zero-day) threats, including ransomware, so you can surf the Web without worry
Removes all traces of malware for complete safety
Removes potentially unwanted programs (PUPs) that make your computer run poorly
Scans fast so you don't have to sit around and wait for your security to finish working
Easy to use, just set it and forget it
Can replace antivirus or run alongside other antivirus programs(eh, this part not true)

[patio]

You running both scans at once ? ?
Cause i've never seen MBAM cause this running standalone...

[BC_Programmer]

The  background protection forms of Malwarebytes I'd expect to have or cause issues with other AV programs.

Doing a search and I can find loads of people saying they have issues in one or the other program which go away when the opposite program is removed from the system.

[tkmops]

Oh no, I was not running both at the same time. It seems Mal-Ware Bytes is a better program...but not sure. Any one out there have any opinion, as to which is better...Trend, or Mal-Ware Bytes Premium? Care to tell me which anti-virus program you're using?

[Geek-9pm]

Maybe somebody wants to try and  duplicate your findings.
So can you:
Provide exact version of Mal-Ware Bytes?
Likewise excavate version of TredMicro?
Os your Windows  7 up to date?

[tkmops]

Mal-Ware Bytes is premium 3.1.2, Trend is 11.0...both have been updated as of today, and my win7 is updated. 

[tkmops]

Can someone address the issue of if 'TrustedInstall' in task manager\services(Windows Modules Installer) should be 'stopped', or 'running'?

[BC_Programmer]

Can someone address the issue of if 'TrustedInstall' in task manager\services(Windows Modules Installer) should be 'stopped', or 'running'?

It's not "supposed" to be either; If it is installing something- Windows Updates, certain programs, etc. then it is running. if it isn't, it will be Stopped. It requires admin privileges to start or stop. It doesn't make much difference either way. It is not really related to the TrustedInstaller account.

[tkmops]

Oh, OK, I guess I was getting the 'TrustedInstaller' owner thing confused with the 'TrustedInstall' service in Task Manager? They are two different, separate things? 

[Geek-9pm]

Maybe this could hlp clarify the question about trustedinstaller.

http://www.makeuseof.com/tag/what-is-trustedinstaller-and-why-does-it-keep-me-from-renaming-files/

TrustedInstaller is a built-in user account in Windows 8, Windows 7, and Windows Vista. This user account “owns” a variety of system files, including some files in your Program Files folder, your Windows folder, and even the Windows.old folder that is created after you upgrade from one version of Windows to another. To rename or delete these files, you’ll have to take ownership of them away from the TrustedInstaller user account.

...

The TrustedInstaller user account is used by the Windows Modules Installer service included with Windows. This service is responsible for installing, modifying, and removing Windows updates and other optional Windows components, so it has the exclusive ability to modify them.

...

Warning – the TrustedInstaller user account owns your system files. If TrustedInstaller is preventing you from renaming or deleting a folder, it’s often for a good reason. For example, if you rename the C:\Windows\System32 folder, your operating system will stop functioning and will need to be repaired or reinstalled.

Video:
https://www.youtube.com/watch?v=rGGImf6_S9Y