Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Tried removing Antivirus Suite 2010 - receiving Application Error


  • Please log in to reply
1 reply to this topic

#1 DonnaF

DonnaF

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:12 PM

Posted 21 September 2010 - 11:39 PM

Hello my name is Donna and I'm new here and need some help. I got the Antivirus Suite 2010 fake virus. I've followed the instructions to remove it. I get all the way to "Perform full scan" with Malwarebytes' Anti Malware . . . when I click on Scan it runs for about 4 seconds and then I receive the following error message:

"The instruction at "0x7c91b21a" referenced memory at "0x00000010". The memory could not be "written". Click on OK to terminate the program. Click on CANCEL to debug the program."

I've tried re-downloading the program and have gone through the process a few times and tried clicking on OK to terminate the program and also clicking on CANCEL to debug the program. Nothing seems to happen and each time after clicking one or the other I've tried to open the Malwarebytes program again to try running the scan again and I get the following message:

"Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."

I've been on my computer for a little bit and the Antivirus Suite 2010 has not been popping up again, but I don't know if it's gone yet. I don't think so. I think it will probably still be there when I reboot my computer again because I haven't actually been able to perform the full scan with Malwarebytes.

I've used the program a couple of previous times when I got a different fake virus and it worked great. Can anyone tell me why I keep getting these messages and why the program is not being able to perform the scan?

Thank you.

I forgot to say I have Windows XP

Edited by Pandy, 22 September 2010 - 01:18 AM.
Merged reply ~Pandy


BC AdBot (Login to Remove)

 


#2 kahdah

kahdah

  • Security Colleague
  • 11,138 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Florida
  • Local time:01:12 PM

Posted 28 September 2010 - 06:45 AM

Hello DonnaF

Welcome to BleepingComputer smile.gif
==========================
  • Download OTL to your desktop.
  • Double click on OTL to run it.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Under the Standard Registry box change it to All.
  • Under Custom scan's and fixes section paste in the below in bold

    netsvcs
    %SYSTEMDRIVE%\*.*
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\drivers\*.sys /90
    %systemroot%\system32\Spool\prtprocs\w32x86\*.dll

  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
====================
Please download Rootkit Unhooker and save it to your desktop.
  • Double-click RKUnhookerLE.exe to run it.
  • Click the Report tab, then click Scan
  • Check Drivers, Stealth Code, Files, and Code Hooks
  • Uncheck the rest, then click OK
  • When prompted to Select Disks for Scan, make sure C:\ is checked and click OK
  • Wait till the scanner has finished then go File > Save Report
  • Save the report somewhere you can find it, typically your desktop. Click Close
  • Copy the entire contents of the report and paste it in your next reply.
Note - You may get this warning it is ok, just ignore it."Rootkit Unhooker has detected a parasite inside itself!
It is recommended to remove parasite, okay?"

Please do not pm for help, post it in the forums instead.

If I am helping you and have not responded for 48 hours please send me a pm as I don't always get notifications.

My help is always free, however, if you would like to make a donation to me for the help I have provided please click here Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users