there is a program on my computer called something like antivirus pro 2010. I had a program like this a couple months ago and removed it easily with malwarebytes. This time, however, when i go to scan my computer with malwarebytes, it says "preparing for scan" and then the window disappears and never returns. If I then try to reopen malware bytes a window comes up that says "windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item". I read somewhere to try to rename malwarebytes and then run it, but the same thing happens (the screen disappears when I try to scan my computer).
Also, when i try to run hijack this the scan starts and the the program window dissappears and never returns. When I try to reopen hijack this a window comes up that says "windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item"
The only other thing that I have tried to do is remove it in the control panel under add/remove programs. It seems to be a little better, but every now and then a window will pop up and it will act like it is installing antivirus pro 2010. I have been closing it out before it finishes loading.
Also, there is a red circle with a white x icon on the bar at the bottom of the screen. A balloon will popup from whenever the cursor arrow gets near it. It says something about my computer being infected.
I am running windows xp professional, but i'm not sure about the specs. if u need more info i can probably figure it out.
after reading leonkun's post about his problems mine sound exactly the same.
thanks for the help.
Right-click on the Fixswen.inf file and click install (This is a small file. It does not display any notice or boxes when you run it.)
Next
Download the file UnHookExec.inf and save it to your desktop.
Right-click the unhookExec.inf file and click install. (This is a small file. It does not display any notice or boxes when you run it.)
Next
Download and run Win32kDiag:
Download Win32kDiag from any of the following locations and save it to your Desktop.
Download Win32kDiag (Win32kDiag.exe) - #1
Download Win32kDiag (Win32kDiag.exe) - #2
Download Win32kDiag (Win32kDiag.exe) - #3
Double-click Win32kDiag.exe to run Win32kDiag and let it finish.
When it states "Finished! Press any key to exit…", press any key on your keyboard to close the program.
Double-click on the Win32kDiag.txt file that is located on your Desktop and post the entire contents of that log as a reply to this topic.
Next
Download Combofix from either of the links below. Youmustrename it before saving it.
Save it to your desktop.
**Note: In the event you already have Combofix, delete it, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**
If you are using Firefox, make sure that your download settings are as follows:
Tools->Options->Main tab
Set to "Always ask me where to Save the files".
Link 1 Link 2
During the download, rename Combofix to Combo-Fix as follows:
It is important you rename Combofix during the download, but not after.
Please do not rename Combofix to other names, but only to the one indicated.
———————————————————–
Double click on Combo-Fix.exe & follow the prompts.
When finished, it will produce a report for you.
Please post the "C:\Combo-Fix.txt" for further review.
**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**
———————————————————–
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Click onthis linkto see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
———————————————————–
NOTE:If ComboFix asks to install the Recovery Console, please ALLOW it to do so.
