Greetings...

after a serving of a fake windows security trojan and malicious remover tool, which indeed seems to have gotten rid of the trojan (after twice using the tool and finally restoring to factory specs and then having to use the tool again), ive found that i cannot open any programs. tho i can use games or whatnot. i can search the web but not use any system tools like add/remove programs to follow your guide to cleaning this.
all i get is a pop up asking me to choose what to open the download with. as if i have no system32 rundll files anymore?

ive tried looking this up on windows security forums but when i try to download a tool to repair this i cannot open it.

thank you for your time.

 

im srry i dont type well so i retyped ot so it makes sense and gives all the info i have.

after a serving of a fake windows security trojan and malicious remover tool, which indeed seems to have gotten rid of the trojan (after twice using the tool and finally restoring to factory specs and then having to use the tool again), ive found that i cannot open any programs from control panel (says application not found). and i cant use games or whatnot. i can search the web but not use any system tools like add/remove programs to follow your guide to cleaning this.
all i get is a pop up asking me to choose what to open the download with. as if i have no system32 rundll files anymore?

only other thing i can think of is that while this was resoring a pause and popup said reg.exe not found. i clicked x on it and the restore went on tho.

ive tried looking this up on windows security forums but when i try to download a tool to repair this i cannot open it.

thank you for your time.

 

Welcome to MajorGeeks!

Try not to restart the computer until one of the tools we use does it for you or tells you to.

If one of the tools will not run just go on to the next one. Save the logs to post in your next reply.

1) Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

There are 4 different versions. If one of them won't run then download and try to run the next one.

Vista and Windows 7 users need to right click Rkill and choose Run as Administrator

You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

* Rkill.com
* Rkill.scr
* Rkill.pif
* Rkill.exe

* Double-click on the Rkill desktop icon to run the tool.
* If using Vista or Windows 7 right-click on it and choose Run As Administrator.
* A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
* When finished it will create a log.
* Please post the rkill.log in the next reply.

* If Rkill does not run from the first link, delete the file, then download and use the one provided in Link 2. If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
* Do not reboot until instructed.
* If the tool does not run from any of the links provided, please let me know.


Once you've gotten one of them to run then try to immediately run the following.


2) Download and run exeHelper

* Please download exeHelper from Raktor to your desktop.
* Double-click on exeHelper.com to run the fix.
* A black window should pop up, press any key to close once the fix is completed.
* A log file named log.txt will be created in the directory where you ran exeHelper.com
* Add the log.txt file to your next message.

Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).


If you already have them installed, be sure to update Malwarebytes and SUPERAntiSpyware before the scan!

Now run this: Using Malwarebytes Anti-Malware

Now run this: SUPERAntiSpyware - running & getting a log

Now run this: Using MGtools

Logs needed:

• Rkill
• exeHelper
• Malwarebytes
• SUPERAntiSpyware
• MGlogs