Threat won't allow S&D to run

[Basscott]

Hi I know I have an infection as it has disabled my attempt to run S&D, Malwarebytes and Windows defender. But I don't know what it is. I have had an attack from Platte Media some year or so ago, and somehow cleaned that up, but I notice that there are two folders with Platte in their name in the program files folder. Perhaps I did not deal with it thoroughly enough. I have tried to do a HJT scan and it just closes it down on starting.

Please help

Thanks

[Basscott]

I hope this is done right. I have not had any response for more than 4 days.

I can't run ANY of my AV or antispyware programs, or HJT to get a log. Here is my original post http://forums.spybot.info/showthread.php?t=51875

I'm getting to the end of my tether and am ready to reinstall windows as I think it may be the only way to get somewhere.

Ill be forever grateful if you can help.

[Basscott]

I'm really sorry, this has not been pending for 4 days, I got mixed up, please accept my apology, I did not intend to jump the queue.

[ken545]

Hello Basscott

Welcome to Safer Networking.

Please read Before You Post
That said, All advice given by anyone volunteering here, is taken at your own risk.
While best efforts are made to assist in removing infections safely, unexpected stuff can happen.



Please download exeHelper to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of log.txt (Will be created in the directory where you ran exeHelper.com)
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).






Please download RootRepeal one of these locations and save it to your desktop
Here
Here
Here

• Open on your desktop.
• Click the tab.
• Click the button.
• Check just these boxes:
• 
• Push Ok
• Check the box for your main system drive (Usually C:, and press Ok.
• Allow RootRepeal to run a scan of your system. This may take some time.
• Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your post.

Download DDS by sUBs from one of the following links. Save it to your desktop.

• DDS.com
• DDS.scr
• DDS.pif
  
• Double click on the DDS icon, allow it to run.
• A small box will open, with an explaination about the tool. No input is needed, the scan is running.
• Notepad will open with the results, click no to the Optional_Scan
• Follow the instructions that pop up for posting the results.
• Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control Here

[spybotsandra]

note: re-opened for user via e-mail request to webmaster

[ken545]

Good Morning Sandra,

I replied to this last night and thought that I had reopened it. I PMd him with the link

Thanks,
Ken

[Basscott]

Thanks for the instructions. I've started the process, but unfortunately the first download stops at 99% and I get an "Error copying file or folder" which says "cannot copy exeHelper[1]: access is denied"

I'll try to copy to a memory stick and then to the destktop

[Basscott]

In the end I needed to go into Safe Mode and download there. Going back to normal mode I tried to run exeHelper but nothing seemed to happen. so I made a shortcut to it and ran that - I got a DOS window and in it the message "Access denied".

I have not tried to run the other tools yet, awaiting your instructions.

Thanks

[ken545]

Hi,

Glad we didn't lose you.

Try right clicking on exehelper and rename it to explorer.exe

[Basscott]

Ken, I'm glad too!!!

Unfortunately, it did the same. I went into the properties and found a check box where it said it may be blocked if it came from another computer. I unticked that and then attempted to re-run. Ths gave me a message "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access this item".

Should I try and run this from Safe mode?