cannot run security programs

unimatrix001 · Jul 1, 2012

I have tried to install malware bytes from both safemode and regular mode cannot install says i dont have permission to do so. this is a friends computer that his son had run several removal programs on before i got it. combofix the log is attached in the only program i could run from the list for malware removal guide. I did not want to rerun the combofix until i posted the logs. Also hitman pro will not install in either safe mode as administrator or regular mode.

Kestrel13! · Jul 1, 2012

I would like for you to use MSConfig to put this machine back into normal start up mode. Then... Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.

Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now!

unimatrix001 · Jul 1, 2012

I reset using msconfig here are the logs requested

Kestrel13! · Jul 2, 2012

You did not let me know how things are running currently. The logs look good. Combofix took out alot.

unimatrix001 · Jul 2, 2012

the computer runs good with the software thats in there. Cannot install any programs like malwarebytes superantispyware. I havent tried to install anything else on the computer but when i try to install those it gives me a "could not create directory" and a box to click ok and then the program ends. will not install. there is a folder in the windows/system32 folder called setup, I cannot access it on that machine can on all others. i booted to safe mode took ownership of the folder then tried to install and got the same results. I am thinking the registry is all mucked up and system restore will not restore to an earlier date. click on it and it just sits there does nothing for hours. click cancel and it closes instantly. I do appreciate your help very much. thanks again i will let them know of the problems that are still with the machine.

Kestrel13! · Jul 3, 2012

You say you cannot install security software, but what about anything else such as a browser for instance? Try to install anything non security related. If you still have the same problem I would advise you to post in the software forum about it.

unimatrix001 · Jul 4, 2012

I did as you suggested I installed firefox and all went well. I seems that any software that needs to install any files to the windows/system32/drivers folder I get an error "unable to write or create file or folder" access denied. I am logged in as administrator. I can view the contents of the folder but cannot write or copy any files into it. I took ownership of the folder still same problem. When restart the machine i have to retake ownership of the folder again. I do appreciate all your help and time. Sorry for the late response but work late the last couple of days and didnt get a chance to check this thread.

Kestrel13! · Jul 5, 2012

You're welcome. Hope you get it sorted.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /uninstall

Notes: The space between the combofix" and the /uninstall, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
related to MGtools and some other items from our cleaning procedures.

If you are running Win 7, Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 7 of the READ ME
for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Log in or Sign up

cannot run security programs

unimatrix001 Private E-2

Attached Files:

MGlogs.zip

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

unimatrix001 Private E-2

Attached Files:

MGlogs.zip

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

unimatrix001 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

unimatrix001 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member