Malware infection Alert details: c:\windows\wml.exe

Discussion in 'Malware Help (A Specialist Will Reply)' started by bbtf, Apr 1, 2008.

  1. bbtf

    bbtf Private E-2

    Hi,
    My computer has some type of virus that gives me a pop-up saying "Security System Warning" affected file c:\windows\wml.exe and the threat is abebot.

    I also get a yellow triangle symbol in the bottom right of my computer saying that my computer is infected with spyware and then takes me to a webpage to buy software.

    Another pop-up says "System Integrity Scan Wizard" Warning: your computer may have critical errors in windows registry and file system.

    I run on Microsoft XP.

    I have downloaded several anti-spyware programs but nothing is working for me (spybot, ad-aware, SUPERantispyware, windows defender).

    Any help would be greatly appreciated.
    Thanks,
    Bethany
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Welcome to Majorgeeks Bethany


    Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

    READ & RUN ME FIRST. Malware Removal Guide

    After these are attached our malware experts will review these to see if your OK, if not they will issue you some further removal instructions, So logs that you will get to attach are:

    MGlogs.zip (which has 5 logs inside it, including Hijackthis, just attach the whole Zip )
    MalwareBytes log
    Superantispyware log






    plus a guide on how to attach the logs HOW TO: Attach Items To Your Post
     
  3. bbtf

    bbtf Private E-2

    Hi,
    I have been working thru the Malware removal guide and had run the Spybot S&D which found problems, when I clicked the button to fix the problems I got a blue screen. The error that was reported when I rebooted my machine was the following:

    Error Signature
    BCCode: 1000008e BCP1: C0000005 BCP2: 804E37EE BCP3: F6A92C0C
    BCP4: 00000000 OSVer: 5_1_2600 SP: 2_0 Product: 768_1

    and the technical information about the error was:

    C:\DOCUME~1\SCOTT&~1\LOCALS~1\TEMP\WER6e4e.dir00\Mini041008-01.dmp
    C:\DOCUME~1\SCOTT&~1\LOCALS~1\TEMP\WER6e4e.dir00\sysdata.xml

    Should I rerun Spybot?
    When I ran SUPERAntiSpyware it also found problems, and I think it actually got rid of the popups, should I continue with the rest of the instructions? I have attached the log file from SAS.

    Thanks for your help and sorry it took so long to reply back, I have three young children so spare time is pretty hard to find.

    Bethany
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Just skip Spybot for now.

    Yes it is highly recommended that you continue and attach the other requested logs from Malwarebytes, ComboFix and MGtools.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds