Hello.. We need to straighten this out so you can be helped. First I am moving this from HJT malware removal to Am I Infected
You can try this to get Malwarebytes etc. to run. I am guessing XP here.How to take ownership of a file or a folder in Windows XP
To stop that error message.
Its not unusual to receive such an error after using specialized fix tools.
A "Cannot find...", "Could not run...", "Error loading... or "specific module could not be found
" message is usually related to malware that was set to run at startup but has been deleted. Windows is trying to load this file but cannot locate it since the file was mostly likely removed during an anti-virus or anti-malware scan. However, an associated orphaned registry entry
remains and is telling Windows to load the file when you boot up. Since the file no longer exists, Windows will display an error message. You need to remove this registry entry so Windows stops searching for the file when it loads.
To resolve this, download Autoruns
, search for the related entry and then delete it.
Create a new folder on your hard drive called AutoRuns (C:\AutoRuns) and extract (unzip) the file there. (click here
if you're not sure how to do this.)
Open the folder and double-click on autoruns.exe
to launch it.
Please be patient as it scans and populates the entries.
When done scanning, it will say Ready
at the bottom.
Scroll through the list and look for a startup entry related to the file(s) in the error message.
Right-click on the entry and choose delete
your computer and see if the startup error returns.Credit to quietman7
Now if you still cannot run the other tools and post a log here then..
As there are some new variants of rootkits in the wild right now that will require custom scripts to remove the infection, the process must be completed by HJT team member.Failure to follow the proper removal process can and will cause serious damage to a machine. Recovery of the machine may be difficult, if not impossible.
Now ... Download this Utility
and save it to your Desktop.
Double-click the Utility to run it and and let it finish.
When it states Finished! Press any key to exit
, press any key to close the program.
It will save a .txt
file to your desktop automatically. Double-click on the Win32kDiag.txt
file that is located on your Desktop and post the entire contents of that log as part of the reply in the topic you will create below..
Next please go here HijackThis Logs and Virus/Trojan/Spyware/Malware Removal
,click New Topic,give it a relevant Title and post the Rootrepeal log and the above log.
Let me know how that went.
Edited by boopme, 15 September 2009 - 11:56 AM.