PDA

View Full Version : Spybot, ad-aware, AVG, other malware removal programs ineffective...help!



bfett81
2009-09-19, 12:31
Been having some problems, surfed around and found this place.

Read this post, seemed to be similar to my problem.

http://forums.spybot.info/showthread.php?t=51909

My problem: Even in safe mode, spybot, ad-aware, AVG won't work. I run them once after installing, and they basically flake out as soon as a scan begins.

I am guessing my problem has a similar solution to the one posted in that thread, but Avenger seems like it could really screw some stuff up, so I am posting for some expert advice!

I did run the scan as the other thread suggested. I have attached a text file, however my results seem to be quite different. Hope you fine fellows can help! BTW, I am using Windows 7 RC.


Running from: C:\Users\bfett81\Desktop\Win32kDiag.exe

Log file at : C:\Users\bfett81\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\Windows'...



Found mount point : C:\Windows\AppPatch\Custom\Custom

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP47E8.tmp\ZAP47E8.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9137.tmp\ZAP9137.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\temp\temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\tmp\tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\CSC\v2.0.6\namespace\namespace

Mount point destination : \Device\__max++>\^

Cannot access: C:\Windows\CSC\v2.0.6\pq



ERROR OCCURRED!

------------------------------

Windows Version: Windows Vista SP0

Exception Code: 0xc0000005

Exception Address: 0x00402415

Attempt to write to address: 0x00000000
--------------------------------
Edit

If the infection prevents HJT from running, please start a topic, make note of the situation and wait for a response. Please do not add logs from other scans. :)
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

bfett81
2009-09-19, 23:44
Oooh...sorry! My bad.

bfett81
2009-09-20, 02:36
Apparently I have the W32.Ahlem.A@mm worm

tashi
2009-09-20, 06:14
Hello bfett81,

From the forum FAQ, link posted above.


Posting additional comments or logs before a volunteer responds, can push you back instead of forward, because your thread ends up with a newer date. In addition helpers would think you are already being assisted because of the post count.

Could you start a new topic please. ;)

tashi
2009-09-20, 18:28
New topic: http://forums.spybot.info/showthread.php?t=52028