permissions changed

[risingflight]

My computer is infected with virus.
It is not allowing me to install any antivirus software nor install any program.
My pc is not even going to safe mode.

i can see c:\windows\system32\installer folder and it has the rights.
i tried to remove all the temp files but few are not deleting.
i gave permissions even in registries but nothing is working out.
i even gave permissions to program files folder
when the file is being extracted in temp folder i gave access to that file in temp folder.
my antivirus services are stopped and even when i try to start i get error access is denied.

i am getting errors like Error:2755.Server returned unexpected error 1622 attempting to install package
c:\users\admin\aapdata\local\temp\vse880.msi

windows cannot find c:\users\admin\downloads\combofix.exe make sure you typed the name correctly.

 

[Vuxy]

Hello RisingFlight,

That certainly does not sound good.

Have you been running Combofix? Refer to this thread of the potential risk: http://www.sevenforums.com/system-security/227589-do-not-use-combofix-your-own.html

As you cannot install or update any anti-virus, the solution I can give you, is to download the program onto another computer and then copy it onto a disk, to put into the infected computer.

What is Windows Defender Offline? - Windows Help
Kaspersky Rescue Disk 10
How To - Remove threats - Removal Tools | F-Secure
How to create a Bitdefender Rescue CD
Download Avira Rescue System | Official Website
http://www.avg.com/us-en/avg-rescue-cd-download
Dr.Web LiveCD ? ???? ?????????? ?????????????? ???????
SUPERAntiSpyware - SUPERAntiSpyware Portable Scanner
Anti-rootkit utility TDSSKiller

Are you able to get into your computer desktop or not?

Thank you,
VinnyBuxton

 

[risingflight]

I tried and still not working please guide me

 

[Vuxy]

Hello RisingFlight,

Which did not work?

I also asked this question:
Are you able to get into your computer desktop or not?

Thank you,
VinnyBuxton

 

[risingflight]

I can go to my Computers Desktop

I tried combofix but i am getting below error
windows cannot find H:\combofix.exe make sure you typed the name correctly.

what i can see is C:\Users\admin\AppData\Local is read only attribute and even for C:\Program Files
some permissions issues with folders i belive

 

[Vuxy]

Hello RisingFlight,

Who instructed you to run/use Combofix?

What is happening when you try to install/update security software?

Thank you,
VinnyBuxton

 

[risingflight]

Error:
windows cannot find H:\combofix.exe make sure you typed the name correctly.

 

[Layback Bear]

Hi risingflight.

Vinny is off line and I will leave helping you with your problem to him but I have noticed something.

Remember you are our eyes and ears. We can only work with what you post.
We all need to get on the same page.

To help Vinny help you he will need you to answer his questions in a precise manner.

Are you able to run any of the programs he lists in post #2? Yes or No. If no explain why not.
Are you able to get to your Desktop? Yes or No. This was asked twice with no reply from you.

He asked you what is not working.
Could you in detail explain what is not working?

Another 2 questions in post #6 that are not answered.

Who instructed you to run/use Combofix?

What is happening when you try to install/update security software?
------------------

I have one question at this time for you.

Is combofix still installed on your problem computer at this time?

 

[risingflight]

Are you able to run any of the programs he lists in post #2? Yes or No. If no explain why not.

I did not run any one of these programs.

Are you able to get to your Desktop? Yes or No.
Yes

He asked you what is not working.
Could you in detail explain what is not working?

I am not able to install any programs in C:\Program Files folder,
I tried to install sophos virus removal tool , kaspersky virus removal tool.
i am getting errors like
Error:2755.Server returned unexpected error 1622 attempting to install package
c:\users\admin\aapdata\local\temp

Access is denied: unable to write in C:\Program files folder.

Combofix is not installed on my computer, i am not able to install this software nor any other software
i am getting error
windows cannot find H:\combofix.exe make sure you typed the name correctly.
i downloaded as well as copied from other computer on to my local hard drive but same error.

Finally i used one tool from bleeping computers FixExec, there was one exe file continuously running
using this tool i terminated it and then i tried to install McAfee Antivirus but i am getting errors
unable to write on c:\progra files then i created a folder on desktop and installed it and put it to scan
and virus is detected and deleted.

Now the issue left is unable to write on C:\program files folder & c:\users\admin\aapdata\local\

how to reset folder permissions to default.

 

[Vuxy]

Hello RisingFlight,

Thank you for that information.

Who asked you to install ComboFix though, because I didn't mention it in my previous replies.

Are you using an administrator account or a standard user?

Please run the following FixIt from Microsoft: What happened to the Windows Installer Cleanup Utility (MSICUU2.exe)?

Thank you,
VinnyBuxton

 

[Layback Bear]

Thank you for the information risingflight; it will be helpful.

I will go back to watching.

 

[risingflight]

Administrator account

 

[jbmedia]

Get yourself a copy of Hirens Boot Disk. That should help you out

 

[risingflight]

Earlier for windows xp i used Microsoft's subinacl tool, is there any similar tool for windows 7.
The trojan which infected my computer is newer, i never came across this kind in last 5 years.

 

[Jacee]

What Anti-virus program do you use?


Why do you suspect a Trojan?

 

[risingflight]

i used mcafee

 

[Jacee]

Okay... let's go through a couple of download applications to find what's going on.


Download DDS from one of these links:
DDS.com

DDS.pif

• Disable any script blocking protection... disconnect from the net, and close McAfee!
• Right click the dds icon and choose to run as Administrator to run the tool.
• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt <--- will be minimized in the task tray
• Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.

 

[risingflight]

View attachment Attach.txt

View attachment dds.txt

the problem started when installing poweriso software

 

[Jacee]

Can you tell me where you were able to download and install Microsoft Windows 7 Enterprise?

 

[risingflight]

its trial version