Can't remove items

[Guest]

After completing a scan, my WD tells me that there are two severe/high alert
items found (Win32/Zlob and Win32/Wmfpfv).

However, when I click "Remove All" on the home page I get the error message
"Windows Defender encountered an error: 0x8007139f. The group or resource is
not in the correct state to perform the requested operation."

If I click "Review items detected...", I can manually remove the items and
WD reports that the operation succeeded. However, when I rescan they come
back again and I get the same error message.

Any ideas why this might be the case? Should I be worried? Or is WD
erroneously reporting that something it previously removed is still there?

Regards
Steve

 

[Anonymous Bob]

After completing a scan, my WD tells me that there are two severe/high alert
items found (Win32/Zlob and Win32/Wmfpfv).

However, when I click "Remove All" on the home page I get the error message
"Windows Defender encountered an error: 0x8007139f. The group or resource is
not in the correct state to perform the requested operation."

If I click "Review items detected...", I can manually remove the items and
WD reports that the operation succeeded. However, when I rescan they come
back again and I get the same error message.

Any ideas why this might be the case? Should I be worried? Or is WD
erroneously reporting that something it previously removed is still there?

Regards
Steve

Try this one:
http://www.superantispyware.com/

and if that doesn't get it done, try this one:
http://www.bleepingcomputer.com/files/smitfraudfix.php

Good luck and please let us know how it goes.

Bob Vanderveen

 

[Bill Sanderson MVP]

These seem likely to real (and bad) to me.

In addition to Bob's suggestions, trying both Windows Defender and your
updated antivirus, in safe mode, is what I would try.

 

[Guest]

Steve,

Any ideas why this might be the case? Should I be worried? Or is WD
erroneously reporting that something it previously removed is still there?

So--the way to dig into this:

Windows Defender records, in the System event log, at the time of the scan,
the precise path and filename of each detection.

So--right click My Computer, choose Manage.
Click on the plus sign in front of Event Viewer.
Click on the System events log, in the left column.
Click on View (top menu), filter.
Click the down-arrow at the right of Event Source, and choose "WinDefend."
Click apply, click OK.

Now--in the right window, scroll back to the time of the original detection,
and look for yellow-triangle marked records for those original detections.
Double-click a record in the right window to open it and see the full
detail. You can cut and paste, via a button--back to this thread.

Some possibilities are that the items detected are in the System Restore
storage area, an antivirus Quarantine, or, perhaps, is an archive file of
some sort, which might contain valid data in addition to the spyware
involved.
-- --

I hope this post is helpful, but we would highly appreciate it if you could
rate the pºst, so we can keep the community informed and saves somebody else
the hours of trawling through the web trying to find a solution.

ÆŽÆǦΞḺ