malware attack? comodo corrupted? unable to install spybot.

Looks like there might be permission issue.

Did you include this to fix.reg?

[-HKEY_LOCAL_MACHINE\SYSTEM\Software\Comodo]
 
Yes so it is then permission issue.

  • Go here and download subinacl.msi
  • Double click on subinacl.msi to start the installation of Subinacl
  • Click Next>
  • Select I accept and click Next>
  • Click browse
  • From the drop down menu select C:\
  • Double click on WINDOWS and then system32
  • Click OK
  • Click Install now
  • Click Finish

Save text below in Notepad as remkeys.bat:

Code: 
@echo off
FOR %%R IN (
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDAGENT"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDGUARD"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDHLP"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_INSPECT"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDAGENT"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDGUARD"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDHLP"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_INSPECT"
"HKEY_LOCAL_MACHINE\SYSTEM\Software\Comodo"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDAGENT"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDGUARD"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDHLP"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_INSPECT"
"HKEY_USERS\S-1-5-21-1163117370-1042333568-1001750587-3129\Software\CFP"
"HKEY_USERS\S-1-5-21-1163117370-1042333568-1001750587-3129\Software\ComodoGroup"
"HKEY_USERS\S-1-5-21-1163117370-1042333568-1001750587-3129\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\COMODO"
) Do (
subinacl.exe /subkeyreg %%R /setowner=%username% /grant=%username%=F
reg delete %%R /f
)

Doubleclick remkeys.bat, black dos window will flash; it is normal.

Do another search for comodo and post back results, please.
 
permission issue?

does permission issue mean that i am not allowed to uninstall comodo? have i managed to change my permissions? or is this related to the fact i have forgotten my administrator password?

will start on the next steps right away & pst back the results =)
 
Well at least you don't seem to have rights to delete those keys by default.

Does your user account have admin rights?
 
Due to the lack of feedback this Topic is closed.

If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than four days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required.

Everyone else please begin a New Topic.
 
You must log in or register to reply here.
Back
Top