Access denied everywhere and low memory warnings

Page 2 of 2 FirstFirst 12

  1. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #11

    Some Trojan:Win32/Malex.gen!E infections contain trojan and keyloggers which can be used to steal sensitive data like passwords, credit card, bank account information etc. You will need to change all your passwords using a 'clean' computer, not the infected one.

    Let's flush the dirty DNS cache and restore MS's Hosts file:

    Copy and paste these lines in Note pad.

    @Echo on
    pushd\windows\system32\drivers\etc
    attrib -h -s -r hosts
    echo 127.0.0.1 localhost>HOSTS
    attrib +r +h +s hosts
    popd
    ipconfig /release
    ipconfig /renew
    ipconfig /flushdns
    netsh winsock reset all
    netsh int ip reset all
    shutdown -r -t 1
    del %0

    Save as flush.bat to your desktop.
    Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.

    Next, download Combofix from any of the links below, and save it to your desktop.<--Important
    Link 1
    Link 2
    Link 3

    Click on this link Here to see a list of programs that should be disabled.
    The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
    Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.
    Next: Please disable all onboard security programs (all running with back ground protection) as it may hinder the scanner from working.
    This includes Antivirus, Firewall, and any Spyware scanners that run in the background.
    • Double click combofix.exe and follow the prompts.
    • When finished, it will produce a log for you. Post that log
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall
    Please be patient while the scan runs, at times it may appear to stall.
    When finished and after reboot (in case it asks to reboot), it should open a log, combofix.txt.
    After rebooting ensure your Security applications have been re-enabled.

    In your next reply post:
    ComboFix.txt
    ***A guide and tutorial on "How to use Combofix" can be found here:
    http://www.bleepingcomputer.com/comb...o-use-combofix

    IF CF won't run:
    During the download, rename Combofix.exe to sVchost.exe
      My Computer


  2. Posts : 8
    windows 7
    Thread Starter
       #12

    Hi Jacee

    Thanks for the post. I am going round in circles at the moment :)

    I managed the first bit okay and then re-booted and...

    Virus will not let me disable AVG or let me run the Combo file. Tried to rename it once it was downloaded but again PC would not let me.

    Couldn't work how to rename whilst actually downloading it but that might be irrevelant anyway seeing as I couldn't disable AVG.

    The strange thing is I did a scan with AVG and it came up clean and also the microsoft sweeper program didn't find anything after it's initiall detection and supposed removal of the aforementioned Trojan virus.
      My Computer


  3. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #13

    If you can, download it to a 'clean' flash drive, then change the name.
    Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.
    Plug the flash drive in, right click and choose "run as Administrator".
      My Computer


  4. Posts : 8
    windows 7
    Thread Starter
       #14

    Hi Jacee

    Once again managed to run the flash.bat file and successfully re-boot. I then ran the Combo file (renamed) in safe mode with networking and it did start to run. However I realised that I was still connected to the internet so I stopped it and then disabled my connection and tried to start it again. I then got a warning box come up with Abort, re-try etc.

    I then on tried on several occasions over a few hours with a different USB drive in both normal boot and in safe mode networking to run the program but the warning dialogue box came up instantly everytime.

    Time to give up and re-install windows 7??

    Steve
      My Computer


  5. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #15

    Hi Steve, do you want to try Dr.Web to remove Trojan:Win32/Malex.gen!E? It's free and the instructions are here
    Dr.Web Anti-virus - How To Remove Virus (Trojan:Win32/Malex.gen!E) - [DRWEBHK.COM]
    When the scan has finished, in the menu, click file and
    choose save report list ...save it to your desktop. The report will be called
    DrWeb.csv
    Close Dr.Web. Reboot your computer....it could be possible that files in
    use will be moved/deleted during reboot. After reboot, post the contents of the log from Dr.Web

    Did you change your passwords using a known 'clean' computer?
    Let's make sure your USB drive is 'vaccinated' Panda USB Vaccine - Free software downloads and software reviews - CNET Download.com

    Delete the copy of Combofix you have.
      My Computer


 
Page 2 of 2 FirstFirst 12

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 08:05.
Find Us