Deadly deadly virus

E

emd023

Member
just got a terrible virus. i dont know where it came from.

a window keeps popping up that says: "Application cannot be executed. The file wuauclt.exe is infected. do you want to activate your antivirus software now?

other windows pop up telling me i just got a virus. they ask me if i would like to block the attack and scan the computer. also websites keep popping up like viagra.com and porn.com and adult.com etc.

i cant open ANYTHING. cant connect to the internet. cant run avg. a bunch of little icons keep popping up in the taskbar but go away when i scroll over them.

i have very important info and files on here. what can i do?
 
Download Rkill.scr to a flashdrive and run it on the infected computer. Rkill should stop any active infections from giving you the error you are getting. But do not restart the computer or you'll have to run rkill again.

If this still don't work, boot to safe mode and try again.

After you can get rkill to run then I need you to download and run malwarebytes and hijackthis.

Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If you continue to experience problems after doing this, please post a HijackThis log by doing the following:

Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.

Click Do a system scan and save a logfile

Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.

Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log

If malwarebytes won't work then do the following in safe mode.

Download and Run ComboFix
If you already have Combofix, please delete this copy and download it again as it's being updated regularly.
Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Combofix should never take more that 20 minutes including the reboot if malware is detected.


In your next reply please post:
  • The ComboFix log
  • A fresh HiJackThis log
  • An update on how your computer is running
 
You must log in or register to reply here.
Back
Top