MrCharlie Posted December 20, 2012 ID:625395 Share Posted December 20, 2012 Can you zip that file up and attach it for me? MrC Link to post Share on other sites More sharing options...
Symesko Posted December 20, 2012 Author ID:625456 Share Posted December 20, 2012 It won't let me zip it. I disabled my AV in case it was that blocking me, but it keeps saying "File not found or no read permission". Link to post Share on other sites More sharing options...
MrCharlie Posted December 20, 2012 ID:625458 Share Posted December 20, 2012 OK, how's the computer so far as the redirects?? MrC Link to post Share on other sites More sharing options...
Symesko Posted December 21, 2012 Author ID:625590 Share Posted December 21, 2012 It hasn't been redirecting me for the past few days... hopefully we have solved the issue, whether it was that file, or the addon that I removed. Link to post Share on other sites More sharing options...
MrCharlie Posted December 21, 2012 ID:625621 Share Posted December 21, 2012 OK, what was the path to kbd101.dll??That file is supposed to be related to "JP Japanese Keyboard Layout for 101" < that sound familiar??I thought you had disabled all the add-ons before.MrC Link to post Share on other sites More sharing options...
Symesko Posted December 21, 2012 Author ID:625742 Share Posted December 21, 2012 The file was in C:\Windows\SysWOW64\I could zip all the other files in the folder(that I attempted), it was only this file that as blocked from my access. I'm not sure why there would be a Japanese Keyboard Layout on my comp, unless it's something that comes with a language pack. I know I've never installed that directly.The addon I was referring to was a World of Warcraft addon... they are like mods which change the UI of the game. Link to post Share on other sites More sharing options...
MrCharlie Posted December 21, 2012 ID:625745 Share Posted December 21, 2012 I'm curious about the file, if it's bad...we should get it into the system.See if this works:Please download GrantPerms and save it to your desktop.Unzip the file and depending on the system run GrantPerms.exe or GrantPerms64.exeCopy and paste the following in the edit box:C:\Windows\SysWOW64\kbd101V.dllClick Unlock. When it is done click "OK".Click List Permissions and post the result (Perms.txt) that pops up. A copy of Perms.txt will be saved in the same directory the tool is run.See if you can work with the file now, MrC Link to post Share on other sites More sharing options...
Symesko Posted December 22, 2012 Author ID:626101 Share Posted December 22, 2012 GrantPerms by Farbar Ran by Symesko (administrator) at 2012-12-22 12:41:21===============================================\\?\C:\Windows\SysWOW64\kbd101V.dll Owner: BUILTIN\Administrators DACL(NP)(AI): NT AUTHORITY\SYSTEM FULL ALLOW (I) BUILTIN\Administrators FULL ALLOW (I) BUILTIN\Users READ/EXECUTE ALLOW (I)This is the result, i'll try working with the file now. I'll try to run the tool you asked me to use first, if that doesn't work, I'll zip it and upload it in my next post. Link to post Share on other sites More sharing options...
Symesko Posted December 22, 2012 Author ID:626102 Share Posted December 22, 2012 kbd101V.zipI ran it through VirusTotal, it came up with detection ratio of 14/45. I have uploaded a zipped copy of the file in this post as well so you can inspect it further. Link to post Share on other sites More sharing options...
MrCharlie Posted December 22, 2012 ID:626104 Share Posted December 22, 2012 OK...Thanks.Has the redirecting?? MrC Link to post Share on other sites More sharing options...
Symesko Posted December 24, 2012 Author ID:626512 Share Posted December 24, 2012 I haven't had any redirects in the past few days, so it seems to be better. Link to post Share on other sites More sharing options...
MrCharlie Posted December 24, 2012 ID:626515 Share Posted December 24, 2012 Great, I guess we can wrap this up A little clean up to do....Please Uninstall ComboFix: (if you used it)Press the Windows logo key + R to bring up the "run box"Copy and paste next command in the field:ComboFix /uninstallMake sure there's a space between Combofix and /Then hit enter.This will uninstall Combofix, delete its related folders and files, hide file extensions, hide the system/hidden files and clears System Restore cache and create new Restore point(If that doesn't work.....you can simply rename ComboFix.exe to Uninstall.exe and double click it to complete the uninstall)---------------------------------Please download OTL from one of the links below: (you may already have OTL on the system)http://oldtimer.geekstogo.com/OTL.exehttp://oldtimer.geekstogo.com/OTL.comhttp://www.itxassoci...T-Tools/OTL.exeSave it to your desktop.Run OTL and hit the CleanUp button. (This will cleanup the tools and logs used including itself)Any other programs or logs you can manually delete.IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, C:\FRST, MBAR, etc....AdwCleaner > just run the program and click uninstall.-------------------------------Any questions...please post back.If you think I've helped you, please leave a comment > click on my avatar picture > click Profile Feed.Take a look at My Preventive Maintenance to avoid being infected again.Good Luck and Thanks for using the forum, MrC Link to post Share on other sites More sharing options...
Maurice Naggar Posted December 24, 2012 ID:626625 Share Posted December 24, 2012 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts