Computer Hope

Software => Computer viruses and spyware => Virus and spyware removal => Topic started by: Woodles on July 11, 2010, 05:46:38 PM

Title: Fake security centre virus has struck again
Post by: Woodles on July 11, 2010, 05:46:38 PM
Wouldlike to note firstly i really don't know very much about the workings of a PC much beyond how to install and run a program.
A few months back i was struck by the fake security centre malware, infected my rundll.exe and wouldn't let me open any programs. Thankfully i didn't close my firefox and managed to find my way to Malware Bytes and remove it. Or so i thought, it popped up again a few weeks later so again i ran Malwarebytes and removed it. But it seems it never really was removed or it has struck me again.
Now i'm in a real dilemma. I realised my computer was running slowly yesterday and sounded likei t was running some programs even though i had nothing open. I couldn't see anything suspicious in task manager but i ran Malware Bytes this morning to make sure and it came up empty, said my PC was clean. I use AVG as my anti-virus and all that came up with was a few cookies from browsing.
I tried opening a word document not  long ago and got the familiar "rundll.exe is infected, would you like to run your anti-virus software?" **facedesk**
The virus has gotten what seems all my .exe, my CD drive wont work for me to install Malware Bytes in safe mode and i cannot log out of my user account.
I can't run anything... i can't open anything... I'm so lost and worried now.
Title: Re: Fake security centre virus has struck again
Post by: SuperDave on July 15, 2010, 06:51:36 PM
Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

Please download and run the below tool named Rkill (courtesy of which may help allow other programs to run.
Save Rkill to your desktop.

There are 4 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click Rkill and choose Run as Administrator

You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

Rkill.exe ( (
Rkill.scr (
Rkill.pif (

Once you've gotten one of them to run then try to immediately run the following.
Now download and Run exeHelper.

Please download exeHelper from Raktor ( to your desktop.