Solved Windows Security Virus, Need Help

May 25, 2012 at 08:41:56
Specs: Windows XP SP3
Ok so one of our employees has acquired the WSV (Windows Security Virus), and it is a pain in my butt. So this is what has been done so far! I have done everything from running CCleaner to Maleware bytes <--Which will not open properly, down to going into the reg and importing a new Windows XP reg file. Now it doesn't stop me from running all .EXE extensions but I can not open any anti-virus programs nor the task manager. I also noticed when I tried to delete Maleware bytes, it was still located in the registry for some reason as well. Files will not delete them selves from the registry.

We have ran the Kaspersky bootable version as well, still did not help. I'm starting to run out of ideas and I really do not wish to reformat this in any way possible.

Windows XP Home Edition SP3 32bit
Dell Vostro 1500

So if you have any more suggestions please let me know!

See More: Windows Security Virus, Need Help

May 25, 2012 at 09:39:28
✔ Best Answer
Ok I have resolved the problem, What I ended up doing, I downloaded (RKILL)- RKill Download <--Link.. What this does is a program that was developed at that attempts to terminate known malware processes so that your normal security software can then run and clean your computer of infections. When RKill runs it will kill malware processes and then import a Registry file that removes incorrect file associations and fixes policies that stop us from using certain tools. When finished it will display a log file that shows the processes that were terminated while the program was running.
As RKill only terminates a program's running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again. Instead, after running RKill you should immediately scan your computer using some sort of anti-malware or anti-virus program so that the infections can be properly removed.
Below are a list of RKill download links using different filenames. We offer RKill under different filenames because some malware will not allow processes to run unless they have a certain filename. Therefore when attempting to run RKill, if a malware terminates it please try a different filename offered below.

So after running rkill I was able to run maleware bytes, which ended up being infected with 755 registry issues. CLeaned it up, installed our new AV program and I'm now good to go! If any one ever has a problem like this by all means ask me and I will do what I can for you =)

Report •
Related Solutions

Ask Question