My computer has a nasty virus (wuauclt.exe is infected)

View previous topic View next topic Go down

My computer has a nasty virus (wuauclt.exe is infected)

Post by khan2595 on 4th March 2010, 1:26 am

Ever since two days ago, my computer has been AWFUL with pop-ups and i cant do anything. its hard enough to even be on the internet. i tried to download MANY anti-virus programs..but every time i try it says "application cannot be executed. Wuauclt.exe is infected." Please help...what can i do?

khan2595
Novice
Novice

Posts Posts : 9
Joined Joined : 2010-03-03
OS OS : Windows Vista
Points Points : 24843
# Likes # Likes : 0

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by Belahzur on 4th March 2010, 1:27 am

Download [You must be registered and logged in to see this link.] by OldTimer to your Desktop.

  • Close all windows and double click OTL.exe
  • Click Run Scan and let the program run uninterrupted
  • It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  • You may need to use two posts to get it all.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by khan2595 on 4th March 2010, 1:29 am

it wont work ;\
now it says that winword. exe is infected....so the application cannot be executed.

khan2595
Novice
Novice

Posts Posts : 9
Joined Joined : 2010-03-03
OS OS : Windows Vista
Points Points : 24843
# Likes # Likes : 0

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by Belahzur on 4th March 2010, 1:31 am

Darn, oh well, I bet this will work, or should anyway, this malware doesn't know of IceSword just yet because of how IceSword is able to disguise itself.

Please download Ice Sword from [You must be registered and logged in to see this link.]

  1. Download the zip to your desktop and extract it.
  2. Open the Ice Sword folder and then launch IceSword.exe.
  3. Will IceSword open?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by khan2595 on 4th March 2010, 1:33 am

when i downloaded it, the zip file wouldn't open Sad tearing

khan2595
Novice
Novice

Posts Posts : 9
Joined Joined : 2010-03-03
OS OS : Windows Vista
Points Points : 24843
# Likes # Likes : 0

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by Belahzur on 4th March 2010, 1:44 am

Please download exeHelper from one of the two links.
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

  • Double-click on exeHelper.com or exeHelper.scr to run the fix.
  • A black window should pop up, press any key to close once the fix is completed.
  • Post the contents of log.txt (Will be created in the directory where you ran exeHelper.com)
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by khan2595 on 4th March 2010, 1:46 am

the black window popped up for a second, then disappeared. I tried several times. The security warning keeps popping up!

khan2595
Novice
Novice

Posts Posts : 9
Joined Joined : 2010-03-03
OS OS : Windows Vista
Points Points : 24843
# Likes # Likes : 0

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by Belahzur on 4th March 2010, 1:51 am

Hello.

Please then reboot your computer in Safe Mode by doing the following :

  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading as normal, the Advanced Options Menu should appear;
  • Select the first option, to run Windows in Safe Mode, then press Enter.
  • Choose your usual account.

Please try running IceSword in Safe Mode, let me know if it works.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by khan2595 on 4th March 2010, 2:09 am

im on my phone. ice sword is opened! what do i do now?

khan2595
Novice
Novice

Posts Posts : 9
Joined Joined : 2010-03-03
OS OS : Windows Vista
Points Points : 24843
# Likes # Likes : 0

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by khan2595 on 4th March 2010, 2:22 am

since the internet doesnt work in safe mode, my phone is the only way to get internet access haha.

khan2595
Novice
Novice

Posts Posts : 9
Joined Joined : 2010-03-03
OS OS : Windows Vista
Points Points : 24843
# Likes # Likes : 0

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by Belahzur on 4th March 2010, 11:31 pm

Hello.

  • Now, on the left hand side tool, hit the Process button at the top of the list.
  • Just above the list, there is a log button, press that and save the log to your Desktop.
  • Next, hit the Startup on the left side list.
  • Press the log button again.
  • Post the two logs in your next reply.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by khan2595 on 5th March 2010, 12:57 am

okay i have both of the logs in my documents. however, i can't paste it into this thread because it wont open any documents! but i can attach them to an email and email them to you. also, i couldnt use ice sword because it wouldnt let my copy the log, so i ended up using OTL.

khan2595
Novice
Novice

Posts Posts : 9
Joined Joined : 2010-03-03
OS OS : Windows Vista
Points Points : 24843
# Likes # Likes : 0

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by Belahzur on 5th March 2010, 1:49 am

Okay, can you post the OTL logs?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by khan2595 on 5th March 2010, 2:13 am

i cant, im going to have to email them to you if thats ok.

khan2595
Novice
Novice

Posts Posts : 9
Joined Joined : 2010-03-03
OS OS : Windows Vista
Points Points : 24843
# Likes # Likes : 0

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by Belahzur on 5th March 2010, 8:26 pm

I have PM'd you an email adress of mine you can send them to.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by khan2595 on 6th March 2010, 2:47 am

alrighty, i just sent it.

khan2595
Novice
Novice

Posts Posts : 9
Joined Joined : 2010-03-03
OS OS : Windows Vista
Points Points : 24843
# Likes # Likes : 0

View user profile

Back to top Go down

Re: My computer has a nasty virus (wuauclt.exe is infected)

Post by Belahzur on 6th March 2010, 3:47 pm

Got them.

Please run OTL.exe.

  • Copy the commands with file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose CopyCrying


    :OTL
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
    O4 - HKCU..\Run: [calc] C:\Windows\System32\config\SYSTEM~1\ntuser.DLL File not found
    O4 - HKCU..\Run: [ihrsbjoy] C:\Users\Mohna\AppData\Local\algkgq\faohsftav.exe ()
    O4 - HKCU..\Run: [userinit] C:\Users\Mohna\AppData\Roaming\twex.exe ()
    O4 - Startup: C:\Users\Mohna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.dll (Microsoft)
    [2009/10/11 09:37:12 | 000,217,200 | ---- | C] (;qkdfjfsdsgjsdg) -- C:\Users\Mohna\AppData\Roaming\lizkavd.exe
    [2006/11/02 02:31:23 | 000,463,872 | R--- | C] () -- C:\Users\Mohna\AppData\Roaming\twex.exe

    :files
    C:\Users\Mohna\AppData\Local\algkgq\faohsftav.exe
    C:\Users\Mohna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.dll


  • Return to OTL, right click in the "Custom Scans/Fixes" window (under the light green bar) and choose Paste.

  • Click the red Run Fix button.
  • A fix log in Notepad will appear. Copy the contents of the fix log to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTL.exe
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum