Solved Unable to run anti virus programs

[brandonc_06]

Dataup.exe Winvmx.exe and start up Cpx I cannot disable. I also have drmkpro64.sys virus. The problem is Winvm client runs like 5 of them and I end them and they start back up. I cannot use any antivirus programs because it says "Requested resources in use". I even tried Rkill and that doesn't work to stop it from happening. I tried deleting everything off the computer from a reset and it tells me something has occurred and no changed were made and then it brings me back to windows

 

[TwinHeadedEagle]

Hello,


Please download Zemana AntiMalware and save it to your Desktop.

• Install the program and once the installation is complete it will start automatically.
• Without changing any options, press Scan to begin.
• After the short scan is finished, if threats are detected press Next to remove them.

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.​

• Open Zemana AntiMalware again.
• Click on
  
  icon and double click the latest report.
• Now click File > Save As and choose your Desktop before pressing Save.
• The only left thing is to attach saved report in your next message.

 

[brandonc_06]

That is the problem. The virus blocks all these programs. It doesn't let me install Zemana AntiMalaware

 

[TwinHeadedEagle]

Can you try to download Zemana from THIS link?

 

[brandonc_06]

Can you try to download Zemana from THIS link?

It says It cant run on this pc and to check which version does.

 

[brandonc_06]

Okay wait yes it opened.

 

[brandonc_06]

Here is the report from the program.

 

[brandonc_06]

I ran it twice more and it is unable to remove "svccmx", "drmkpro64.sys", and "tprdpw32.exe"

 

[brandonc_06]

"svcvmx" correction

 

[TwinHeadedEagle]

Download

Malwarebytes Anti-Rootkit to your desktop.

• Double-click the icon to start the tool.
• It will ask you where to extract it, then it will start.
• Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
• Click in the introduction screen "next" to continue.
• Click in the following screen "Update" to obtain the latest malware definitions.
• Once the update is complete select "Next" and click "Scan".
• When the scan is finished and no malware has been found select "Exit".
• If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
• Open the MBAR folder and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"
  • "system-log.txt"

 

[brandonc_06]

It doesn't let me open it. It says "requested resource in use".

 

[brandonc_06]

Is there a different link like the antivirus program you sent me for it to open?

 

[TwinHeadedEagle]

Can you try to download it from this link?

Removal instructions for Adware.Yelloader

 

[brandonc_06]

No its saying the same thing which unfortunately makes me screwed. Its impossible to remove this virus believe it or not. Nobody is able to remove this dumb virus drmkpro64.sys. Which brings more viruses after a period of time. It doesn't let me open any anti virus programs. The only one is the one you sent me and I was surprised it actually lets it open, but it doesn't remove drmkpro64.sys

 

[TwinHeadedEagle]

It can be removed, don't worry. It just need a little more force.


Please download Farbar Recovery Scan Tool x64 and save it to a flash drive.

• Plug the flashdrive into the infected PC.
• Click Start and while holding Shift key on your keyboard click Power --> Restart.

Note: It is important that you keep Shift key pressed while doing this or it won't work.​

• Now you should get a window like this where you need to click Troubleshoot.

• In the next window, click Advanced options and select Command Prompt.
• Now you should log in into your account and after that Command Promptwindow.

Access the notepad and identify your USB drive

In the Command Prompt please type in:

notepad

and press Enter.

• When the notepad opens, go to File menu.
• Select Open.
• Go to Computer and search there for your USB drive letter.
• Note down the letter and close the notepad.

Scan with Farbar Recovery Scan Tool

Once back in the command prompt window, please do the following:

• Type in e:\frst64.exe and press Enter.
  You need to replace e with the letter of your USB drive taken from notepad!
• FRST will start to run. Give him a minute or so to load itself.
• Click Yes to Disclaimer.
• In the main console, please click Scan and wait.
• When finished it will produce a logfile named FRST.txt in the root of your pendrive and display it. Close that logfile.

Transfer it to your clean machine and include it in your next reply.

 

[brandonc_06]

Okay I did that. Here is the log file.

 

[TwinHeadedEagle]

Download attached fixlist.txt and save it to your USB flashdrive as fixlist.txt

>> Boot into Recovery Environment


Start FRST in a similar manner to when you ran a scan earlier, but this time when it opens ....

• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your USB flashdrive.

>> Exit out of Recovery Environment and post me the log please.



Try to boot Windows normally...

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition.txt option is checked.
  
  
  
  
  
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please attach report into your next reply.

 

[brandonc_06]

Okay here is what I got.

 

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.



How is your computer behaving now?

 

[brandonc_06]

Well the drmkpro64.sys virus is gone and I can run anti virus programs now!