Post Malware Issue

I received help in the Malware forum that help to rid a laptop I am working on of malware. Everything seems to be running great now but I am having a problem with something that I think a virus or trojan horse did. I am unable to delete anti-spyware executables.

I was originally not able to run any anti-spyware programs after installing them. I was able to clean the machine up partially on my own and finished with the help in the Malware forum. I have old folders from spybot and windows defender and SAS that I cannot delete because a virus changed the programs exe file attributes to read-only, hidden and system but I am unable to remove those attributes. I even went into command prompt and tried to remove the attributes that way as well but I still get the "Access Denied" error.

Is there any other way that I can remove those attributes so I can finish cleaning up the laptop by deleting those old folders and exe files so I can reinstall the programs into their default folders? I currently have them installed in different folders so I can run the programs. Thanks!

 

The unlocker worked like a charm. But I have a new problem that just cropped up. I started getting the windows update shield in the taskbar indicating an update. It claims i need to update KB890830. After running the update it comes back stating I need to update again. Even going to the windows update site it shows that as an update. I tried downloading and installing the update manually from the desktop in normal and safe mode but it keeps stating that I need to install it when I go to windows update site. I found a thread on another site where someone recommended updating the MRT reg key for "version" and "guid" to see if that works but it didn't for me. The manual update download is 8Mb download but the windows update shows the update as 0kb. Any ideas? I am attaching a hijackthis log file.

 

I didn't run the installer cleanup utility since I wasn't sure what programs I would have to reinstall. It is a friends computer and not sure what programs she still has.

I did fix the R3 URLsearchhook entry

I uninstalled the Ask toolbar that was the questionable entry

I disabled "device detector" and SAS to run at startup

I did find a GameMon.des file in my windows/sys32 folder but not the GameMon.des.exe file. I deleted the file anyways.

I saved and ran the text file, remove.bat, with no errors at all.

I rebooted and am still getting the yellow windows update shield for the windows malicious tool remover update that is 0kb. I even get the update available on their update site but nothing happens when I run it. I am including a new HJT log. I only have till friday to get this back to her.

I really appreciate all the help I have been getting from this site. You guys are wonderful!

Thanks,

rculley1970

 

try this fix on microsoft.com
http://support.microsoft.com/kb/910339

a list of other update suggestions, not necessarily related to this problem tho
http://support.microsoft.com/ph/6527