Programs won't run, rstrui.exe is infected

May 12, 2010 at 08:39:14
Specs: Windows XP
Security warnings keep popping up saying "application cannot be executed. the file rstrui.exe infected," "verclsid.exe is infected" (and several other file names)

The Windows Security Alert is constantly popping up, and my Windows Antivirus software keeps telling me I'm being attacked by an internet virus (but it won't do anything because I don't have the paid version)

I can use the internet fine, but when I try to download antivirus software, I can't run it. The program will flash open for a second and then disappear. The same things happens when trying to use System Restore or even Task Manager.

Any advice? I'd appreciate it very much.


See More: Programs wont run, rstrui.exe is infected

Report •

#1
May 12, 2010 at 08:41:35
Also- the Windows Antivirus software is saying "attack from: 134.99.148.166, port 13737, attack port: 17851, threat: BankerFox.A"

Report •

#2
May 12, 2010 at 09:26:35
lindsey,
Follow the instructions under "Automated Removal Instructions for XP Security Tool 2010, XP Defender Pro, Vista Security Tool 2010, and Vista Defender Pro using Malwarebytes' Anti-Malware" at the link below. Numbers 1 and 2 (using another computer) are very important.

http://www.bleepingcomputer.com/vir...

Tufenuf


Report •

#3
May 12, 2010 at 10:14:05
I do not believe that was what I had, although I could be wrong.
I think it was the real Windows Security Center. I had nothing looking like those screenshots. I also didn't have the same alerts as that site lists.

However, I downloaded MalwareBytes' Anti-Malware and eventually got it to run by renaming mbam.exe to firefox.exe. It scanned my computer and removed the infected files it found. Everything is working fine now.


Report •

Related Solutions

#4
May 12, 2010 at 10:22:20
lindsey,
Glad to see that the problem is fixed and Thanks for posting back.

Tufenuf


Report •

Ask Question