spybot, hijackthis will not run

[johnsillitto]

I have the same problem as a lot of other folk on here it seems.

I guess have picked up a virus from somewhere.

I ran spybot which started to scan and then just disappeared. Trying to run it again gave the error, "Windows cannot access the specified device, path, or file. You may not have the appropriate permissionsto access the item.".

The same happened with hijackthis and malawarebytes.

I've tried reinstalling but the same thing happened.

I tried system restore but none of the restore points work. It goes through the process and then says, "Your computer cannot be restored"

I'm running Windows XP Pro SP3.

Any help would be very very much appreciated.

[km2357]

Hello and welcome to Safer Networking.

My name is km2357 and I will be helping you to remove any infection(s) that you may have.

I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.

Please do not start another thread or topic, I will assist you at this thread until we solve your problems.

Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.


Step # 1 Download and run DDS

Download DDS and save it to your desktop from here (http://www.techsupportforum.com/sectools/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.



Step # 2 Download and run RootRepeal


We Need to check for Rootkits with RootRepeal
Download RootRepeal from the following location and save it to your desktop.
Direct Download (Recommended)
Primary Mirror (http://ad13.geekstogo.com/RootRepeal.exe)
Secondary Mirror (http://download.bleepingcomputer.com/rootrepeal/RootRepeal.exe)
Secondary Mirror (http://rootrepeal.psikotick.com/RootRepeal.exe)
Secondary Mirror (http://ad13.geekstogo.com/RootRepeal.exe)

Zip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)

Primary Mirror (http://rootrepeal.googlepages.com/RootRepeal.zip)

Secondary Mirror (http://ad13.geekstogo.com/RootRepeal.zip)

Secondary Mirror (http://rootrepeal.psikotick.com/RootRepeal.zip)

Rar Mirrors - Only if you know what a RAR is and can extract it.

Primary Mirror (http://ad13.geekstogo.com/RootRepeal.rar)

Secondary Mirror (http://ad13.geekstogo.com/RootRepeal.rar)

Secondary Mirror (http://rootrepeal.psikotick.com/RootRepeal.rar)


Extract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).
Open http://billy-oneal.com/forums/rootRepeal/rootRepealDesktopIcon.png on your desktop.
Click the http://billy-oneal.com/forums/rootRepeal/reportTab.png tab.
Click the http://billy-oneal.com/forums/rootRepeal/btnScan.png button.
Check all seven boxes: http://billy-oneal.com/forums/rootRepeal/checkBoxes2.png
Push Ok
Check the box for your main system drive (Usually C:), and press Ok.
Allow RootRepeal to run a scan of your system. This may take some time.
Once the scan completes, push the http://billy-oneal.com/forums/rootRepeal/saveReport.png button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.



In your next post/reply, I need to see the following:

1. The two DDS Logs (DDS and Attach.txt)
2. The RootRepeal Log

[km2357]

johnsillitto? Do you still need help?

[km2357]

This topic has been archived due to inactivity.

If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a new HijackThis log with a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

Applies only to the original poster, anyone else with similar problems please start a new topic.