All cleaning programs are killed and locked out.

Discussion in 'Malware Help (A Specialist Will Reply)' started by P.O.L. Mafia, Aug 21, 2009.

  1. P.O.L. Mafia

    P.O.L. Mafia Private E-2

    I am not new to cleaning bugs and virus off of computers, but I have never seen this. Any program I try to run to hunt for spyware or viruses, is killed in the middle of scaning and locked out by permissions if you try and run again. I’ve tried, Malware bytes, adware se, highjack, Smitfaud from S!R! (not the bogus one) and the list goes on. All will start to run, then die in the middle and when you try and relaunch, access is denied. Must reset securities to launch. Doesn’t matter if it is safe mode or not. Even service packs are killed before file swaps.

    Windows xp home, sp3.

    Any ideas? In 10 years of cleaning computers this is the first one I may have to reload from scratch.
     
  2. P.O.L. Mafia

    P.O.L. Mafia Private E-2

    I was reading in another post about scecie.dll being corrupt and how replacing it has fixed the new bug. Did it and it worked like a charm. I got it from here, thanks for all you guys do, I know it is a tough job, I do it my self. If you all need some help, I’d be glad to help when I can.
    If you want to bump a line, im at ccworks@ccworks.org.

    Thanks again!
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    You're welcome. That is just one form of the infection where scecli.dll has been replaced. Others use evertlog.dll or netlogon.dll. There are other files that may come along with this infection. Are you sure you are clean?
     
  4. P.O.L. Mafia

    P.O.L. Mafia Private E-2

    No program dies when run, was able to reinstall SP3 with no hitch and the box is no longer broadcasting on the net. Is there something else i need to look for? I'll keep those file names for future referance.

    Thanks Again!

    By the way, is there somewhere to find out what files are used, or is it a "hunt down till you find" it type thing Like i do all the time.
     
    Last edited: Aug 26, 2009
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay but that does not necessarily mean you are clean.


    Malware changes constantly so you also constantly have to figure out what it is that they are doing now. For example, this same infection is now sometime infecting C:\WINDOWS\system32\mspmsnsv.dll
     
    Last edited: Aug 29, 2009

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds