Unable To Rename Folders (but Able To Delete Them)

• Please download a ZeroAccess Removal Tool (By Webroot)to your desktop.
• Double click on it to run it (If running Vista or Windows 78, and 10, right click on it and select "Run as an Administrator")
• Type y and press enter to run the scan .
• Hit any key to exit once it has finished it's scan.
• Attach the log which will be in the same location as you ran the tool from. (Should be desktop)

 

• Download TDSSKiller from Kaspersky directly onto your Desktop
• Now double click the TDSSkiller.exe file to run it ( if using Vista or Windows 7,8 and 10, do not double click on it but rather, right click and select Run As Administrartor. )
• If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123tdk.com).

• If you do not see the file extension, please refer to: How to view hidden, system files & folders!
• You may see a window similar to the below appear

http://forums.majorgeeks.com/chaslang/images/TDSSkiller/tds1.jpg

• Click on Run to allow the application to run properly.
• If you see any popup warnings from your antivirus or firewall about it trying to access the nework or similar, make sure that you allow it to run/have access.
• It will start the scan and run rather quickly and will notify you of whether anything is found or not.

You will then see the below window
http://forums.majorgeeks.com/chaslang/images/TDSSkiller/tds2.jpg

• Click on the Start scan button to begin the scan and wait for it to finish. When it finishes, you will see a window similar to below accept you may have one indicating infections were found.

http://forums.majorgeeks.com/chaslang/images/TDSSkiller/tds3.jpg

• Follow the instructions to delete/quarantine if asks you what to do when if finds something.
• Whether an infection is found or not, a log file should already be created on your C: drive ( or whatever drive you boot from) in the root folder named something like TDSSKiller.2.1.1_27.12.2009_14.17.04_log.txt which is based on the program version # and date and time run. Please attach this log to your next reply. (See:
  

 

Ok, just to be sure, please copy just the bold text below to notepad (Do not include any space above the word REGEDIT). Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

Make sure that you tell me if you receive a success message about adding the above
to the registry. If you do not get a success message, it definitely did not work.

Now use file explorer to find and delete:
C:\Windows\Installer\{0205b625-cc33-8a26-79e6-57587836b401}

Reboot and rerun Hitman and attach the log.

 

The file is a remnant of an old infection that MBAM probably took care of. I wouldn't worry about it. The rest of your logs are clean. Your original issue should probably be further investigated in the software forum.

If you are not having any other malware problems, it is time to do our final steps:

1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
2. Re-enable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
4. If running Vista, Win 7 or Win 8, it is time to make sure you have re-enabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
5. Now go to the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 or 10 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
7. After doing the above, you should work thru the below link:
   • How to Protect yourself from malware!

 

If you just want to delete the empty folder:
Right click Start->Run, copy/paste the following command into the box and press OK:

A blank command window will open on your desktop, then close in a minute or two. This is normal.

 

You are welcome.