Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

View previous topic View next topic Go down

Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

Post by kdizzle on Mon May 17, 2010 6:01 am

I can't remove this virus and it's horrible. It has taken over Internet Explorer and keeps popping up saying certain files are infected "Infiltration Alert" with BankerFox.A and Win32/Nuqel.E. It appears to be trying to sell an antivirus program, but you can tell it's bogus. Usually I don't have a problem removing viruses (I have Malwarebytes, Ad-aware, Microsoft Malicious removal, ect.), but this one won't let me open any program including all of the scanners and anti-virus/malware programs that usually work well. It also won't let me access Task Manager. I've tried everything. Please help!

When I try to run Malwarebytes:
"Application can not be executed. The file mbam.exe is infected. Do you want to activate your antivirus software now?"

When I try to go to task manager:
"Application cannot be executed. The file taskmgr.exe is infected. Do you want to activate your antivirus software now?"

I can't do anything. How do I get rid of this? Thanks so much.

kdizzle
Beginner
Beginner

Status :
Online
Offline

Posts : 4
Joined : 2010-05-17
OS : 7

View user profile

Back to top Go down

Re: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

Post by Belahzur on Mon May 17, 2010 9:32 pm

Download [You must be registered and logged in to see this link.] by OldTimer to your Desktop.

  • Close all windows and double click OTL.exe
  • Click Run Scan and let the program run uninterrupted
  • It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  • You may need to use two posts to get it all.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Re: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

Post by kdizzle on Mon May 17, 2010 9:49 pm

Yeah, like I said, if I try to open OTL.exe a box will pop up that will say:

"Application cannot be executed. The file OTL.exe is infected. Do you want to activate your antivirus software now?"

So I can't do that. Do you have any other ideas? Thanks!

kdizzle
Beginner
Beginner

Status :
Online
Offline

Posts : 4
Joined : 2010-05-17
OS : 7

View user profile

Back to top Go down

Re: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

Post by Belahzur on Tue May 18, 2010 10:21 pm

Hello.

We need to use the RKill Tool by Grinler

[You must be registered and logged in to see this link.]

  • Please Download Rkill.com. Save it to your Desktop.
  • Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this [You must be registered and logged in to see this link.] if you are not sure how.

  • NOTE: If you are unable to connect to the site to download rkill, then you should download it to a clean computer and copy it to the infected one via a USB flash drive or CDROM.

  • Once it is downloaded, double-click on the rkill.com in order to automatically attempt to stop any processes associated with Rogue programs.
  • Please be patient while the program looks for various malware programs and ends them.
  • When it has finished, the black window will automatically close and you can continue with the next step.
NOTE: If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by the rogue program, when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate the rogue program. So, please try running Rkill until the malware is no longer running. You will then be able to proceed with the rest of the steps.

If you continue having problems running rkill.com, you can download:
[You must be registered and logged in to see this link.] or [You must be registered and logged in to see this link.]
which are renamed copies of rkill.com, and try them instead.

Try OTL now.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Re: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

Post by kdizzle on Wed May 19, 2010 7:00 am

I really, really appreciate your help! But I had already tried RKill and it did the same thing. Even if I left the warning window open (which stops everything from opening) and tried to double-click RKill several times it still wouldn't let it open up. This virus is a Bee-otch! But I think I got lucky. Somewhere I read to open internet explorer and go to internet options and LAN settings and uncheck some boxes. I did that a bunch of times, and then restarted my computer and just started clicking on Malwarebytes and somehow got it to open up, and then went to "update" and there was an error message (as I was told there would be) which I left open and then went back over to the LAN settings and unchecked the boxes again. Then updated Malwarebytes and got it to run and get rid of the viruses. They tried to come back as they had before, but I just kept repeating the process, updating and running, and running every other anti-virus/malware system I have and eventually I got rid of it for good!

Thanks again for your help. These viruses are freaking rediculous and such a waste of my time. Your help is invaluable. Thanks!

kdizzle
Beginner
Beginner

Status :
Online
Offline

Posts : 4
Joined : 2010-05-17
OS : 7

View user profile

Back to top Go down

Re: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

Post by Belahzur on Wed May 19, 2010 10:23 pm

Still need help?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Re: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

Post by kdizzle on Thu May 20, 2010 8:42 am

Nope, thanks

kdizzle
Beginner
Beginner

Status :
Online
Offline

Posts : 4
Joined : 2010-05-17
OS : 7

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum