2 replies to this topic

[Thomas Hobbes]

tl;dr version of below: The trojan is stopping the anti-virus programs from running, as seems to happen fairly often.

Howdy folks! So I downloaded a thing I probably ought to know better than to have downloaded, and now my computer is throughly borked to the point where it can run in safe mode and browse but that's it, including Malwarebytes and HijackThis shutting down seconds into their first scan and then telling me that "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access them." I tried, as one sticky suggested, renaming mbam.exe to winlogon.exe (so if I should change that back, tell me). I also downloaded (and mostly uninstalled, because they didn't help) various other tools before mbam struck me as the answer. An unregistered copy of McAfee is a pre-existing condition on the computer. If it helps, one of the culprit malware programs seems to be Windows Police Pro, and in safe mode I get a "dllhost.exe application error" message box that reappears as soon as I "Click on OK to terminate the program."

Anything else you want to know? Thanks in advance for the help!

[LonnyRJ]

Welcome to the forum Thomas

Download (dont run yet) this tool
http://download.bleepingcomputer.com/rootr.../Win32kDiag.exe
http://ad13.geekstog.../Win32kDiag.exe
Place it on your desktop.
Go start run copy then paste in the line below and press enter
"%userprofile%\desktop\Win32kDiag.exe" -r -f
when it is finished a log should open, post it.

[AdvancedSetup]

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.