Im having a bit of a problem here. Avast managed to detect a trojan, as it tends to do, but moving it to the chest did not bring about the desired results. The trojan itself seems to have activated anyway, causing avast to shut down and then fail to load. I then attempt to load windows safe mode (I have windows XP) but am not given the option to enter into safe mode after giving the f8 key a tap, it just askes me to select the boot device, then procedes to load windows normally. Upon reading through a few posts I decide to download and run malwarebyts anti-maleware program. In the same manner as avast, this program is unable to function as well. My next step will be to reinstall avast, then try a clean uninstall/reinstall, unless someone else has a better suggestion.
The two culprits appear to be…
7/15/2009 9:55:41 PM Brian 1552 Sign of “Win32:Tiny-II [Trj]” has been found in “C:\Documents and Settings\Brian\Local Settings\Temporary Internet Files\Content.IE5\66QMKALK\udvvmquz[1].htm” file.
7/15/2009 10:18:24 PM SYSTEM 1580 Sign of “Win32:Trojan-gen {Other}” has been found in “C:\program files\sfx\sfx.dll” file.
The Problem with avast appears to be…
7/15/2009 10:20:17 PM Brian 2020 Function setifaceUpdatePackages() has failed. Return code is 0x2000000A, dwRes is 2000000A.
Were you able to run a boot time scan with avast!?
(Right click the scanner screen, select ‘schedule a boot time scan’ and reboot when requested. (Or open the tab at the top left of the scanner screen and select the boot time option from there.))
It would appear Avast has been disabled,I do not see, reinstalling working. First I would rename the set up file of MBAM ( eg moon.exe ) Then install,( obviously, this is not necessary if mbam is already installed ) try to update,if not you can manually download the updates.Then go to C/program files,malwarebytes antimalware/mbam.exe, and rename mbam.exe,double click on renamed file,to run.
I would also do the same with Superantispyware.
An uninstall and reinstall of avast allowed me to perform a boot time scan, however the same problem persists. Im going to try to reinstall malewarebyte as suggested and see if that turns anything up…
If malwarebytes manage to find anything,make sure there is a check mark next to each threat.Then click quarantine.If it asks you to restart your computer,restart it.
Im still having severe issues. Ive tried avast, malwarebyte, and SUPERantispyware. Each program seems to follow the same pattern. The program will locate a virus(s) and remove them and then become non functional. Further attempts to run the application meets with a windows error saying ‘windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.’
I have attempted to rename the program as well, and am also unable to do this do to write protection. This pattern still persisted even efter uninstall and reinstall. In the case of malewarebyte, it will not even reinstall on my computer. Any thoughts or ideas would be greatly appriciated.
Can you post the names and locations/path of any infections found by MBAM etc
Also could you post a hijackthis log Choose scan and save a logfile, then copy/paste http://filehippo.com/download_hijackthis/
Now seems the time to ask experienced, certified, Volunteer “Malware
Removal Specialist(s)” for help who have access to and know how to use
little-known analytical programs to get rid of difficult malware . This would be
done on One of the many “Advanced Malware Removal” Forums, such as the
One at http://aumha.net , which is staffed by several certified “Microsoft
Most Valuable Professional(s)” . Nowadays, more and more of these
“Specialists” are NOT using the “HijackThis” program, but a more advanced
program .
Hi Triple :