Can't access certain folders, Can't refresh windows OS either

[Jaye]

There are certain folders that I am almost certain were not there before I got infected; in particular there is one called Wdeurka.exe that I do not have access to open. If I try I get the error of "access denied." Zenma identified it but was unable to delete it, it seems like. Ii considered resetting the whole laptop but was unable to through settings. Attached is the log created by Zenma last time I ran it.

Thank you!

 

[TwinHeadedEagle]

Hello,


Download

Malwarebytes Anti-Rootkit to your desktop.

• Double-click the icon to start the tool.
• It will ask you where to extract it, then it will start.
• Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
• Click in the introduction screen "next" to continue.
• Click in the following screen "Update" to obtain the latest malware definitions.
• Once the update is complete select "Next" and click "Scan".
• When the scan is finished and no malware has been found select "Exit".
• If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
• Open the MBAR folder and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"
  • "system-log.txt"

 

[Jaye]

I am on my administrator account (the only one on my laptop) and it will get as far as asking for permission to run but the program does not launch and it does not show up as running on the task manager either.

Hello,


Download

Malwarebytes Anti-Rootkit to your desktop.

• Double-click the icon to start the tool.
• It will ask you where to extract it, then it will start.
• Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
• Click in the introduction screen "next" to continue.
• Click in the following screen "Update" to obtain the latest malware definitions.
• Once the update is complete select "Next" and click "Scan".
• When the scan is finished and no malware has been found select "Exit".
• If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
• Open the MBAR folder and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"
  • "system-log.txt"

 

[TwinHeadedEagle]

Can you start it with mbar.cmd file inside its folder?

 

[Jaye]

Sorry but what folder is the mbar.cmd file in because mine gets as far as this and after that does not run.

 

[TwinHeadedEagle]

When you double click on mbar-1.10.2.1002-nr.exe archive it should extract on your Desktop. You should see a mbar folder, open it and find the icon like on the picture above.

 

[Jaye]

Sorry but I have no such folder on my desktop? I'm assuming it does not get past that asking for permission bit for it to extract it.

 

[TwinHeadedEagle]

What happens when you click Yes on that permission window?

 

[Jaye]

That's the thing nothing happens after i click yes.

 

[TwinHeadedEagle]

Can you download mbar.zip from this link and unpack the archive?

mbar.zip (16.79MB) - SendSpace.com

Then try to start it by using mbar.cmd

 

[Jaye]

In order I got these messages so it loaded but has still not scanned

 

[TwinHeadedEagle]

Can you follow this procedure to reboot MBAR to recovery?

 

[Jaye]

I did but recovery would not boot it just restarts like normal

 

[TwinHeadedEagle]

Can you try MBAR from this link, that is an updated version:

https://malwarebytes.app.box.com/s/flmkkcawxhohv6jf6wlkentlvycq0f3z

 

[Jaye]

No it’s still not working :^/ it’s doing the same thing it was doing the first time I downloaded the .exe file

 

[TwinHeadedEagle]

Did you try to start this one via mbar.cmd?

 

[Jaye]

I did but it did not run at all and did not extract any folder from it.

 

[TwinHeadedEagle]

Can you try right click and Run as Administrator on mbar.cmd?

 

[Jaye]

It runs but continues to show me the error for the missing drive that I have not been able to install

 

[TwinHeadedEagle]

Okay, this seems to be a tough one.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.