Adlice forum
General Category => Malware removal help => Topic started by: Buckman117 on April 23, 2017, 11:42:14 PM
-
I currently am unable to run programs like spybot search and destroy rkill.exe and most other forms of malware or virus removal programs due to requested resource is in use errors. i have run MSE and it picked up and cleaned a few thingsenought to get me to boot without safe mode but the only other software that i am able to run is rougeKiller i have done 2 passes and it has made things betters but on the second pass it came up with a few errors went from over 200 hits to 45 but the dataup.exe is impossible to remove. i can rename folders but am unable to change permissions or details on folders that i don't recognize as software that I want.
If I can get rkill.exe or iexplorer.exe to run then i think i can handle it from there.
attached is the text log
-
I got malware bytes anti rootkit beta running and it has identified at bunch of stuff once it finishes then ill post if i can get rkill and the rest to work.
-
Hi Buckman,
Welcome to Adlice.com Forum and thanks for supporting our product.
How are your drives organised ? Is the system configured to store data on partition E ?
Please download Farbar Recovery Scan Tool (x64) (http://download.bleepingcomputer.com/farbar/FRST64.exe) and save it to your Desktop.
- Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce a log called FRST.txt in the same directory the tool is run from.
- Please attach log back here.
- The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe). Please also attach that along with the FRST.txt into your reply.
Please download SystemLook (http://jpshortstuff.247fixes.com/SystemLook_x64.exe) and save it to your desktop.
- Double-click SystemLook.exe to run it.
- Copy the content of the following codebox into the main textfield:
:dir
E:\CATIA\license server /s /md5
E:\temp files
E:\temp files\tmp
- Click the Look button to start the scan.
- When finished, a notepad window will open with the results of the scan. Please attach this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Regards.
Note : This thread has been moved to the "Malware removal help" section for clarity.
-
Thanks for moving the post and the advice.
Yes the drive was configured to store temp data there because i didn't want it taking up space on the ssd.
once i ran the malwarebytes anti rook kit running it cleaned at lot of trojan files up and then I could then follow the remainder of your self help guide all the way to running malware bytes and adwcleaner
I've got it figured out now thanks for the fast reply.
-
Hi Buckman,
You are welcome.
Regards.