Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Got "Access Denied" while trying to install malwarebytes

Posted on 2012-03-26
14
Medium Priority
?
1,573 Views
Last Modified: 2016-11-23
Greetings mates,

I have some sticky situations here.

First, all my files under Start are gone.

Only icon left there is Solitaire.

Second, when I attempted to install malwarebytes, I was unable to.

Half way through the install, I get "Access Denied" and the install stops.

I know there are some virus/malware invasions on my PC.

Any ideas how to get things back on the laptop again?

Not that it matters but it is dell insprion, running windows 7 home edition.

I tried system restore.

It was successful in terms of running but nothing was restored or fixed.

Thanks alot in advance
0
Comment
Question by:sammySeltzer
14 Comments
 
LVL 4

Assisted Solution

by:kdubendorf
kdubendorf earned 288 total points
ID: 37769414
Can you put it into Safe Mode with Networking (hit F8 at startup) then try to load Malwarebytes?   Then run Malwarebytes in Full Scan mode.
0
 
LVL 29

Author Comment

by:sammySeltzer
ID: 37769436
I tried that already. got same "access denied" error.
0
 
LVL 32

Assisted Solution

by:willcomp
willcomp earned 288 total points
ID: 37769438
Try these instructions from younghv: http://www.experts-exchange.com/Software/Internet_Email/Anti_Spyware/A_6209-Windows-XP-Vista-Recovery-rogue-Desktop-icons-missing-Empty-program-files.html

If you still cannot run any malware removal programs or still have hidden files, let us know.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 32

Expert Comment

by:willcomp
ID: 37769442
Ooops. That article is by rpggamergirl, not younghv. Sorry about that rpg!
0
 
LVL 16

Assisted Solution

by:Raymond Peng
Raymond Peng earned 288 total points
ID: 37769444
Try renaming malware bytes to a random.exe and try running again.   You are running as admin right?
0
 
LVL 29

Author Comment

by:sammySeltzer
ID: 37769518
sorry guys. Everything you suggested, I have attempted but still same access denied error.

I reminder that I have os windows 7.
0
 
LVL 1

Assisted Solution

by:DrMadAxe
DrMadAxe earned 284 total points
ID: 37769805
Open in safe mode as layed out above.

You will need to make sure you are the administrator. Do the steps outlined above and rename the malwarebytes file to something else but make sure you add the .exe .

From there right click on it and "run as administrator"

see if that works.

If not download superantispyware and try that as well. It may find the problem and fix and then you can also add malware bytes afterwards and use both for scans.

Let us know how you fair. http://www.superantispyware.com/download.html
0
 
LVL 30

Assisted Solution

by:Sudeep Sharma
Sudeep Sharma earned 284 total points
ID: 37769860
Though it is mentioned in the article posted above by willcomp, however I would still like to emphasize. Did you tried TheKiller yet?

Right click on the tool and select "Run as Administrator", then run RogueKiller in the same manner.

Once done try to install MalwareBytes by again doing Right Click on the installer and selecting "Run As Administrator".

Thanks
Sudeep
0
 
LVL 5

Assisted Solution

by:9660kel
9660kel earned 284 total points
ID: 37770541
The key instruction from the article by younghv, (posted by willcomp) is the fixNCR.reg.

It replaces the infected registry keys that block install and administrative activities. That needs to happen first, and may need to be repeated if the pest regenerates. Then run thekiller, rogue killer, or rkill, to stop infected processes from interfering with the rest of the removal process.

I recommend that you download all apps from a clean computer, rename the files to something random, or at least shorten them to keep the infection from interfering, and burn them to optical media. USB sticks are very convenient, but can be a risk for spread of infection.
0
 
LVL 29

Author Comment

by:sammySeltzer
ID: 37771960
Thanks guy.

I was going to take my laptop with me to work today so I can continue working on it but i forgot it.

I will try the steps enumerated above.

But just so you guys know, I did try renaming malwarebytes to random.exe - no help.

I was able to install superantispyware successfully, ran it successfully but for some strange reason(s), it did *not* find anything other than cookies.

I started by running fixNCR.reg, then killer.

In short, I pretty much followed your instructions.

I will try again when I get home later this evening and then post back.
0
 
LVL 38

Accepted Solution

by:
younghv earned 284 total points
ID: 37772068
My recommendation is to always use the IE "Save As" function when downloading the various anti-malware tools. It is my understanding that downloading and renaming will not work to trick the malware.

In all cases you are better off using a clean computer to download the tools you need, then burning them to CD (best) or Thumb Drive - using the new names - then carrying them to the infected computer.
0
 
LVL 29

Author Comment

by:sammySeltzer
ID: 37772170
It is my understanding that downloading and renaming will not work to trick the malware.



i will have to agree with you here. Even after renaming the file, once you click to run it, the original file name is exposed again anyway.

I was working off of Thumb Drive.
0
 
LVL 29

Author Comment

by:sammySeltzer
ID: 37779848
sorry guys but I have gotten myself into a bigger mess.

I tried to follow the instructions and may have done something silly as right now, I can't even log into the laptop without getting a new error:

Group policy Client Service failed the logon. Access Denied"

I have googled this problem and everything I tried has failed.

I am able to log in via safe mode though but could do nothing from there.

I also found that out when I try checking the radio button that says, "Show hidden files and folders"

When I click apply and Ok, it reverts back to Do NOt show hidden files and folders.

I am bushed, really.
0
 
LVL 29

Author Comment

by:sammySeltzer
ID: 37832666
I ended up deleting the profile and recreating it, in the process, losing all data.

Thanks all for your help.
0

Featured Post

WatchGuard Case Study: Museum of Flight

“With limited money and limited staffing, we didn’t have a lot of choices in terms of what we could do to bring efficiency. WatchGuard played a central part in changing that.” To provide strong, secure Wi-Fi access within the museum, Hunter chose to deploy WatchGuard’s AP120 APs.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Securing your business data in current era should be your biggest priority. Numerous people are unaware of the fact that insiders commit more than 60 percent of security breaches. You need to figure out the underlying cause and invoke your potential…
It’s a season to be thankful, and we’re thankful for users like you who engage on site, solve technology problems, and network with others in the industry. What tech are we most thankful for? Keep reading.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…

926 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question