Malware & Trojan removel - HELP Please

aliEnRIK

mercman1969 wrote: »

Managed to find the file in the tools of malwarebytes
it allowed me to delete a file inside the folder of that name but wont allow me to delete the folder

You should be able to manually delete the folder

Usually the hosts get changed so -

Download HostsXpert (US MIRROR)
http://www.softpedia.com/progDownload/Hoster-Download-27041.html
and then follow the below steps.

* Unzip HostsXpert.zip
* It will create a folder named HostsXpert in whatever folder you extract it to.
* Run HostsXpert.exe by double clicking on it.
* click the Make Writeable? button.
* click Restore Microsoft's Hosts File and then click OK.
* Click the X to exit the program


..........................................................

Then id recommend one last scan -

Download and run the FREE version of DR WEB
https://www.freedrweb.com/download+cureit+free/?lng=en
Turn your anti virus OFF
Click CANCEL to its first question (Unless your happy to lock windows until its run)
Click NO to opening the purchase page
Click START
click YES
It will auto QUICK scan
Pess the STOP button on the right (Unless your happy to quick scan first)
After that set to COMPLETE SCAN the computer and press the 'play' icon
This will more than likely take hours (12 is average!), so leave running overnight or whatever

***DO NOT UPGRADE TO FULL VERSION***

reset the HOSTS file if it asks you

mercman1969

Thanks

How do I turn off the Microsoft AntiVirus.....can't find an option to turn it off

aliEnRIK

Ive googled this so hopefully its up to date

Settings, real time protection and uncheck it. It will turn off.

Just remember to turn it back on.

mercman1969

When i select run to the Dr web application nothing happens?

aliEnRIK

mercman1969 wrote: »

When i select run to the Dr web application nothing happens?

Whilst pressing the SHIFT key, RIGHT CLICK and select RUN AS (Admin)

mercman1969

aliEnRIK wrote: »

Whilst pressing the SHIFT key, RIGHT CLICK and select RUN AS (Admin)

NOPE.......still wont run
file it has downloaded is called gpur9s9

its 30MB in size but wont open or run

aliEnRIK

try downloading it again (try this direct download. Cant guarantee it will work though)
http://www.freedrweb.com/download+cureit/?nc=t&lng=en

Mines the same file ending with '.exe' but its 55.6Mb in size so im assuming yours never downloaded correctly

mercman1969

have done a quick scan and nothing found.
will leave it running tonight to do a full scan

many thanks for being so paitent

mercman1969

here are the results of my Dr Web full scan

IE95boot.exe;C:\Program Files\Microsoft Picture It! PhotoPub;Trojan.KillDisk.346;Deleted.;

CouponPrinter.ocx;C:\WINDOWS;Adware.Coupons.34;;

videotype.vbs;D:\I386\Apps\APP26342\dodont;Probably SCRIPT.Virus;;

aliEnRIK

You should be good to go