Personalize will not open..

[Jubilee]

I got to the part where I was to rename the msvcm80.dll file, but I was told that I "Need permission to perform this action."

 

[niemiro]

I got to the part where I was to rename the msvcm80.dll file, but I was told that I "Need permission to perform this action."

Hello!

I am so, so sorry! After all my posting about stuff that does not affect you, I botched up, and forgot to post a crucial step! Please forgive me! You need to takeownership and permissions of the files before you can re-name it. To do this, please follow Option TWO here: http://www.vistax64.com/tutorials/67717-take-ownership-file.html

When it comes to adding 'Moderator' in the tutorial, add 'Everyone'. Do not worry about this, it will be very obvious when you come to this step.

If, after doing all of this, there is still a problem with this error message, it does not mean that you have done it wrong, on the contrary, but that the file is in use. This error also means that the file is in use, and cannot be re-named. If this happens, don't worry. There are plenty of malware removal tools that are positive experts at moving in use malware files. We can use one of these to re-name the file.

Richard

P.S. Sorry about the previous post. I have got it deleted, as you have probably noticed.

 

[Jubilee]

Thanks so much for sticking with me this long..lol
After doing all of that, I'm still unable to rename the file.

 

[niemiro]

Thanks so much for sticking with me this long..lol
After doing all of that, I'm still unable to rename the file.

Actually, before we do all this changing, could you please upload for me a copy of that file (the one that you could not re-name) please? This forum does not accept extension .dll, so you will have to Right Click > Send To > Compressed (Zipped) Archive and upload that new .zip file.

I will then stick that file onto a virtual machine. If I can re-produce your problems, then we know that this is the problem. If I can't which is far more likely, I will see if I can do some more tests on it. It won't take me long. Can I please confirm that your computer language is in Canadian English?

Can I also confirm that you are still using SP1?

Thanks!

Richard

 

[Jubilee]

Actually, before we do all this changing, could you please upload for me a copy of that file (the one that you could not re-name) please? This forum does not accept extension .dll, so you will have to Right Click > Send To > Compressed (Zipped) Archive and upload that new .zip file.

Okay, I did that.

I will then stick that file onto a virtual machine. If I can re-produce your problems, then we know that this is the problem. If I can't which is far more likely, I will see if I can do some more tests on it. It won't take me long. Can I please confirm that your computer language is in Canadian English?

My computer should be in Canadian(British) English.

Can I also confirm that you are still using SP1?

Thanks!

Richard

Yep.

 

[Jubilee]

Are you still able to help me Richard, or was the problem too much?

 

[niemiro]

I am so sorry that you got missed. Give me a few minutes to compose my reply.

 

[niemiro]

Again, I am really sorry that I missed you. Things are so chaotic at my end at the moment! Anyway:

I am going to use Malware Removal Tools to move immovable files. If you particularly want to use another method, please say now, but I see no reason to.

Please put my file into that WinSxS folder called msvcm80.dll.new. Please make a copy of your current one, and call it msvcm80.dll.bak, all in that same folder.

Please make any backups, and a System Restore point now. http://www.vistax64.com/tutorials/76332-system-restore-point-create.html

Re-open OTL. Paste in:

:Files
C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\msvcm80.dll|\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\msvcm80.dll.new /replace

and click Run Fix. Run Fix, not Run Scan. A reboot will be required.

Thanks!

 

[Jubilee]

Oh! Don't worry about it..lol
I didn't know you were so busy.

I'll try this, but I'm just wondering if creating a Restore Point is totally necessary since my System Properties window doesn't have a System Protection tab; possibly due to my being in Safe Mode.
If it's not a crucial step I'll just skip over it.

Also, do I put the files just randomly in the Winsxs folder, or in the specific folder that contains the msvcm80.dll file?

 

[niemiro]

System Restore can be skipped, and in that long and complex folder name with the msvcm80.dll file please. Also please remind me after 24 hours of no reply, although I will try my best!

 

[Jubilee]

When I try to copy&paste the msvcm80.dll.bak and msvcm80.dll.new into the folder, I get the "Destination Folder Access Denied - You need permission to perform this action." message again.

 

[niemiro]

When I try to copy&paste the msvcm80.dll.bak and msvcm80.dll.new into the folder, I get the "Destination Folder Access Denied - You need permission to perform this action." message again.

Do you remember how we took ownership of that file? Please place them directly onto your C:\ drive. So, please make sure that you have a copy of your original file on C:\msvcm80.dll.bak, and my new file as C:\msvcm80.dll.new

Then run this custom fix from OTL.

:Files
C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\msvcm80.dll|C:\msvcm80.dll.new /replace

I was hoping that this was not going to be a problem. We have to work around the problem, rather than fixing it, as changing the permissions on one of those folders can do more harm than good. I need it on the C:\ drive, so that I know exactly where they are stored for later.

Richard

P.S. Today is the weekend! Much faster replies over the weekend!

 

[Jubilee]

Okay, I placed those 2 files into the C:\ Drive and ran the fix.

 

[niemiro]

Okay, I placed those 2 files into the C:\ Drive and ran the fix.

And did it fix the problem? Fingers crossed.

 

[Jubilee]

Nope..

 

[niemiro]

Nope..

'tis a shame. Anyway, run MBAM:

Malwarebytes' Anti-Malware a.k.a. MBAM - Download Free Version (freeware) - Homepage
Why? Malwarebytes' Anti-Malware is very good at removing the zlob trojan, virtumonde, and most other current infections. This single tool has replaced multiple tools that have been required in the past.

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, confirm a check mark is placed next to the following:
  • Update Malwarebytes' Anti-Malware
  • Launch Malwarebytes' Anti-Malware
  
  
• Then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, and click Remove Selected.
• When completed, a log will open in Notepad. The rogue application should now be gone.

When completed, a log will open in Notepad. Please paste this log here.

Note: Some infections will prevent MBAM from running. If MBAM won't run, try renaming the file mbam-setup.exe to a random name, and then try again.

Extra Note: Do not run a full scan with MBAM. It is not required or needed, and in fact makes our job tougher.

I will think about this while you run the scan.

Richard

 

[Jubilee]

Thanks again, here's the log.

 

[niemiro]

Thanks again, here's the log.

You do have a bit of an infection, but not nothing particularly bad in that log. We will have a deeper look soon, but in the meantime please create for me a new MBAM Full Scan (about 90 minutes, you CAN use the computer during this time) and a list of all running services. Please open an elevated Command Prompt:

http://www.vistax64.com/tutorials/181765-elevated-command-prompt.html

type tasklist /svc > %UserProfile%\Desktop\tasklist.txt

and upload the new tasklist.txt from your Desktop please. Please run this Elevated Command Prompt from Safe Mode.

Thanks!

 

[niemiro]

Right, as an addition to my previous post. Please do follow my previous post, and then do this one.

Please download the batch file attached to your Desktop, but DO NOT RUN IT YET! Please place it in C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup.

Now, please boot into Normal Mode, and your account. A Command Prompt Window should pop up on screen, and tell you that it has finished. Please now boot back into Safe Mode, and upload the tasklist1.txt from your Desktop.

Thanks!

 

[Jubilee]

So do I run the Command Prompt after the scan or during?
After that you want me to upload the tasklist.txt to you and then download and run the batch file you provided for me after I place it in the appropriate folder. Then boot in Normal Mode (if it works) and then upload the new tasklist1.txt to you?
I just want to be clear in case I do something wrong since I don't want to be wasting your time, I'm totally thankful for sticking with me for so long. lol