Odd computer happenings

[Shaba]

Well first of all key without files isn't dangerous.

Please try this next. After taking ownership, attempt again to delete that key. Let me know how it went.

 

[jvanosda]

It still tells me that there was an error when I try to delete the key. When I attempt to take ownership of just the key, it allows that, but wont allow deletion. When I attempt to change permission using the checkbox "Replace owner on subcontainers and object", it tells me access is denied.

 

[Shaba]

Please try then first to take ownership of any subkeys and then for parent key.

 

[jvanosda]

I cant see the subfolders when using regedit, only when using gmer to look at the registry. Then it shows the subfolder, regedit does not show the subfolder or all the other registry entries for that registry item. I can take a screenshot for you and post it to compare the differences if you would like.

 

[Shaba]

So let's then try this:

• Go here and download subinacl.msi
• Double click on subinacl.msi to start the installation of Subinacl
• Click Next>
• Select I accept and click Next>
• Click browse
• From the drop down menu select C:\
• Double click on WINDOWS and then system32
• Click OK
• Click Install now
• Click Finish

Copy text below to Notepad and save it as remgaopdxserv.bat (save it as all files, *.*)

@echo off
FOR %%R IN (
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\gaopdxserv.sys"
) Do (
subinacl.exe /subkeyreg %%R /setowner=%username% /grant=%username%=F
reg delete %%R /f
)

It should look like this ->

Doubleclick remgaopdxserv.bat; black dos windows will flash, that's normal.

Let me know if gmer still finds it.

 

[jvanosda]

No, I don't see the gaop* root in my regedit or gmer registry anymore:

 

[Shaba]

Great

Please go to Kaspersky website and perform an online antivirus scan.

Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select ''Run as administrator'' to perform this scan.

1. Read through the requirements and privacy statement and click on Accept button.
2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
3. When the downloads have finished, click on Settings.
4. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
   • Spyware, Adware, Dialers, and other potentially dangerous programs
     Archives
     
5. Click on My Computer under Scan.
6. Once the scan is complete, it will display the results. Click on View Scan Report.
7. You will see a list of infected items there. Click on Save Report As....
8. Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
9. Please post this log in your next reply along with a fresh HijackThis log.

If you need a tutorial, see here

 

[Shaba]

Due to the lack of feedback this Topic is closed.

If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than four days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required.

Everyone else please begin a New Topic.