Author Topic: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!  (Read 32948 times)

0 Members and 1 Guest are viewing this topic.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #15 on: April 18, 2013, 05:51:07 PM »
he may have his after dinner nap now.... or a pint with something cold in.  ;)


cla11826

  • Guest
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #16 on: April 18, 2013, 06:25:16 PM »
Haha, cool.  ;D

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #17 on: April 18, 2013, 07:26:53 PM »
Hi you still have Kaspersky active on your system

Uninstall from the control panel and then run the removal tool found here http://support.kaspersky.com/1464

Once done

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:OTL
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk = C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk = C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
[2013/04/15 17:15:04 | 000,005,120 | -HS- | M] () -- C:\windows\assembly\GAC_32\Desktop.ini

:Files
C:\$Recycle.Bin\S-1-5-18

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
THEN

Download and Install Combofix
 
Download ComboFix from one of the following locations:
Link 1
Link 2
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.
  • Accept the disclaimer and allow to update if it asks




  • When finished, it shall produce a log for you.
  • Please include the C:\ComboFix.txt in your next reply.[/b]
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

3.  If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

cla11826

  • Guest
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #18 on: April 18, 2013, 08:22:31 PM »
Here is the log from the "Run Fix".

cla11826

  • Guest
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #19 on: April 18, 2013, 08:23:25 PM »
Here is the log from the "Quick Scan".

cla11826

  • Guest
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #20 on: April 18, 2013, 08:24:45 PM »
Working on combofix now.

Rathmon

  • Guest
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #21 on: April 18, 2013, 08:51:45 PM »
Pondus- I can't send you a PM, and had no idea where else to post this-

I am an expert tech with over 15 years experience.  Virus/malware cleaning is one of the many services I perform on a daily basis- for my own company.  Sorry that I stepped on toes by offering a valid solution to cleaning sirefef off a PC.  Had you asked me before removing my post in this thread, I could've told you exactly what I'm telling you now.  I'm extremely qualified to give advice for free (hell, I make a good living charging for the same advice I posted).  I'll crawl back in my hole and won't offer to help anymore.  Again, sorry to step on your toes.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #22 on: April 18, 2013, 08:55:06 PM »
Hi Rathmon I have no problem as I had forgotten about that tool.  There is no way that any one can know everything, I am always open to well considered options, and this was one  ;D

cla11826

  • Guest
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #23 on: April 18, 2013, 09:36:56 PM »
Here is the log from combofix.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #24 on: April 18, 2013, 09:38:22 PM »
How is the computer behaving now ?

cla11826

  • Guest
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #25 on: April 18, 2013, 09:38:45 PM »
I'm not sure if its related, but my internet explorer is being super funky at the moment. Only my chrome and firefox are working correctly. Ideas?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #26 on: April 18, 2013, 09:39:50 PM »
What sort of problem is IE experiencing ?

cla11826

  • Guest
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #27 on: April 18, 2013, 09:46:52 PM »
It won't go to yahoo or msn. It actually won't go to anything typed into the search bar. It will go to google, when I right click the IE icon on my start bar, and it is there as history. Then in google, I search for yahoo, and when I click on it, a pop up box says: "You are about to leave a secure internet connection. It will be possible for others to view information you send. Do you want to continue?" And the options are yes, no, or more info.

cla11826

  • Guest
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #28 on: April 18, 2013, 09:55:23 PM »
Should I try to delete internet explorer?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Cannot delete "C:\windows\assembly\gac_32\desktop.ini" HELP!!!
« Reply #29 on: April 18, 2013, 10:07:33 PM »
Update it to IE 10 and let me know if that resolves the problem http://windows.microsoft.com/en-GB/internet-explorer/downloads/ie-10/worldwide-languages