Windows cannot access the specified device...

October 26, 2011 at 17:34:57
Specs: Windows Vista, 2.2ghz
"Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." error comes up when i try to run malwarebytes when i saw my computer turned off by itself with a blue screen and restarted. i tried to figure it out for like 3 days but i cant do anything Please help

See More: Windows cannot access the specified device...

Report •


#1
October 26, 2011 at 20:34:22
kjiheon,

In order to help identify the malware issue with your system, please do the following:

Download DDS from one of these locations:
http://download.bleepingcomputer.co...
http://download.bleepingcomputer.co...
tar
Save it to your Desktop

Make sure you temporarily disable your AntiVirus, Firewall, and any other AntiSpyware applications. They may interfere with the programs we are about to run.

If you wish to look at information on how to disable these programs, please refer to the information available through this link:
http://www.bleepingcomputer.com/for...

Windows Vista: Right-click DDS and select: Run as Administrator

When done, DDS opens two logs:
-DDS.txt (Opens on the Desktop)
-Attach.txt (Is minimized - will show on the TaskBar)

Save both reports to your Desktop, and post them in your reply.

However, since these reports can be large, please upload them to Megaupload:
http://www.megaupload.com/

It is very easy to use:
Click: Browse
Select a file to upload
Upload the file
To the right of 'Send', enter a file description:
Click 'Send'
Copy the link provided, and post it in your reply.


Also download aswMBR:
http://public.avast.com/~gmerek/asw...

Save it to the Desktop.

Windows Vista: Right-click the file and select: Run as Administrator

Click Scan

Upon completion of the scan, click ‘Save log’ and save it to the Desktop.
Note - Please do NOT attempt any fix anything!!

Also post the log produced by 'aswMBR' in your reply.
This is a shorter report, and you do not need to upload it.


You will notice that another file is created on the Desktop.
It is named MBR.dat

Please keep the file on the Desktop, and do not do anything with it.
This is important, just in case we need to have access to the Master Boot Record (MBR) information.

Thanks.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.
Malware Eliminator/Member of UNITE and the
Alliance of Security Analysis Professionals


Report •

#2
October 27, 2011 at 14:21:59
http://www.megaupload.com/?d=2J9BKIPL
http://www.megaupload.com/?d=RY112X2A

i tried running aswMBR but i saw an infected file but then it closed by itself. Also not its blocked with an error "windows cannot access...."


Report •

#3
October 27, 2011 at 14:42:31
i glimpsed saw the aswMBR run and saw infected file, it had to do with win32 Alureon AJI

Report •

Related Solutions

#4
October 27, 2011 at 14:50:45

Report •

#5
October 27, 2011 at 17:28:46
It appears that the 'DDS.txt' report was uploaded to VirusTotal.

Normally, what is uploaded to VT is the MBR.dat file produced by aswMBR.

Have no concern about that now. We will take care of it later.

I'll be back with further instructions after checking out the DDS logs.

Thanks for your patience.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.
Malware Eliminator/Member of UNITE and the
Alliance of Security Analysis Professionals


Report •

#6
October 27, 2011 at 18:07:48
kjiheon,

Let's press on...

Please do the following running ComboFix first, and TDSSKiller next.

If you have ComboFix (CF) already on your Desktop, please remove it. We'll download an updated version:

http://download.bleepingcomputer.co...

Save ComboFix.exe to your Desktop!! <<- Important!

Make sure you temporarily disable your AntiVirus, Firewall, and any other AntiSpyware applications. They may interfere with the running of CF.
Information on disabling these programs is available here:
http://www.bleepingcomputer.com/for...

Windows Vista/7: Right-click and select: Run as Administrator

Click on 'Yes', to continue scanning for malware.

When finished, CF produces a report.

Please provide a copy of the C:\ComboFix.txt in your reply by uploading it to Megauploads, as you did previously.


Notes:

1. Do not mouse-click the ComboFix window while it is running.
This action may cause it to stall.

2. ComboFix may reset a number of Internet Explorer's settings, including making IE the default browser.

3. CF disconnects your machine from the internet. However, the connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Now, please remove any previous download of TDSSKiller (if used) and download the latest version:
http://support.kaspersky.com/downlo...

Execute the file:
Windows Vista/ 7: Right-click and select: Run as Administrator

Press the button: Start Scan

The tool scans and detects two object types:
'Malicious' (where the malware has been identified)
'Suspicious' (where the malware cannot be identified)

When the scan is over, the tool outputs a list of detected objects (Malicious or Suspicious) with their description.

It automatically selects an action ('Cure' or 'Delete') for 'Malicious' objects. Leave the setting as it is.

It also prompts the User to select an action to apply to 'Suspicious' objects ('Skip', by default). Leave the setting as it is.

After clicking 'Next/Continue', the tool applies the selected actions.


A Reboot Required prompt may appear after a disinfection. Please reboot.


By default, the tool outputs its log to the system disk root folder (the disk with the Windows operating system, normally C:\.

Logs have a name like:
C:\TDSSKiller.2.4.7_23.07.2010_15.31.43_log.txt

Please post the TDSSKiller log in your reply, by uploading it also.


Uploading website:
http://uploading.com/files/upload/

In: Select files to upload, click 'Browse', and 'Look in' the Desktop.
Select the report you wish to upload, and click on 'Open'
You will see the following:
“Your file has been uploaded successfully: (Name and size of the file)”

Please copy the 'Download link', and provide it in your reply for each of the reports.

Need to see the following uploads in your reply:
**The 'ComboFix log'
**The 'TDSSKiller' log

Need to know:
**Whether TDSSKiller needed a reboot <<-

Thanks.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.
Malware Eliminator/Member of UNITE and the
Alliance of Security Analysis Professionals


Report •


Ask Question