Access Denied - c:\program files

Discussion in 'Malware Help (A Specialist Will Reply)' started by Malleus, Oct 31, 2009.

  1. Malleus

    Malleus Private E-2

    I had a trojan hit my computer that mcafee seemed to catch, but also seemed to be caught in an endless loop of quarantine. system was running exceptionally slow with the CPU running at 100% non-stop.

    I performed a system recovery, and this seems to have resolved the issue with one snag. I can no longer get access to my c:\program files directory.

    I am posting in the malware area, as this was the cause of the initial issue.

    I've run the various programs as outlined in the "Read Me First" area. I have attached the various logs. Any assistance you can provide would be greatly appreciated.
     

    Attached Files:

    Malleus, Oct 31, 2009
    #1
  2. Malleus

    Malleus Private E-2

    here's the last log... Also, my computer seems to be running normally (post recovery), with the exception of not being able to access the c:\program files directory.
     

    Attached Files:

    Malleus, Oct 31, 2009
    #2
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What exactly do you mean by this?
    • Did you use System Restore to restore an older restore point?
    • Did you actually use a factory recovery CD or partition to return to a factory ship state?
    • Did you do a Windows Repair?
    • Something else?
    May just be due to what you did and since we see no malware in your logs and don't know what Symantec ( you said McAfee but you don't have McAfee) really was finding. Thus you may have to work this out in the Software Forum; however, it would be worth a try doing the below.

    Run this: Resetting Registry and File Permissions


    Uninstall the below old versions of software:
    J2SE Runtime Environment 5.0 Update 5

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
    O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)

    After clicking Fix, exit HJT.

    After a reboot, install the current version of Sun Java from: Sun Java Runtime Environment
     
    chaslang, Nov 2, 2009
    #3
  4. Malleus

    Malleus Private E-2

    Chaslang,

    Thank you for the information below. I ran through the "reset" process, and it worked like a charm.

    I was working with HP Tech Support, and they had me run the System Recovery process, which appears to be a Windows Fix, but also appears to reload the factory software. This is why the Norton AV shows up in the system logs. I actually use Mcafee. So, it looks like I lost data through this process, which is unfortunate, but all crucial info is backed up on a separate WD MyBook drive.

    Anyway, I have access to the Program Files directory again, and I removed all the old factory pre-load software, including Norton, and reinstalled Mcafee without issue.

    Thanks again for your help. Let me know if there's anything else I need to do as part of a final "cleanup" process.

    Regards,
    Malleus
     
    Malleus, Nov 4, 2009
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    3. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    7. Go to add/remove programs and uninstall HijackThis.
    8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    10. After doing the above, you should work thru the below link:
     
    chaslang, Nov 7, 2009
    #5

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds