NEWBIE with Nasty Virus/Malware problem

[DeputyDawg]

Hello all,

After reading through everything, I hope I'm in the right spot. Forgive me if I'm not.

I am trying to help a friend with their Vista box which appears to be infected.  No matter what you do, there is constantly popups that say

"Application cannot be executed. The file is infected" 

There are other related pop ups.  If I let the computer run, Internet explorer will come up with tons of tabs all with porn type sites, yet I can't get to any of my own sites.  I have an OLD version of Kaspersky on here, but can't remove it to put on any other suggested tools. 

I have another laptop that I can download and xfer files via thumb drive.  I'm having a hard time running then due to all the popups. 

I was able to run Microsofts Malware tool and it found nothing.

Any thoughts on what I need to do to identify and thus remove this?

Thanks and again forgive me for the newness of posting here

[Dr Jay]

Hello, and welcome to Computer Hope.

Please note the following information about the malware forum:

• Only the Malware Specialist Team is allowed to give advice on removing malware from your computer.
  
• From this point on, please do not make any more changes to your computer; such as install/uninstall programs, use special fix tools, delete files, edit the registry, etc. - unless advised by the staff I noted above.
  
• Please do not attach logs or post them in Quote/Code boxes unless requested.
  
• Please do not ask for help elsewhere (in this site or other sites). Doing so can result in system changes, which may not show up in the logs you post.
• If you have already asked for help somewhere, please post the link to the topic you were helped.
• We try our best to reply quickly, but for any reason we do not reply in two days, reply to this topic with the word BUMP
  
• Lastly, keep in mind that we are volunteers, so you do not have to pay for malware removal. Persist in this topic until its close, and your computer is declared clean.

Please download and run RKill.

Download mirror 1 - Download mirror 2 - Download mirror 3

• Save it to your Desktop.
• Double click the RKill desktop icon.
• It will quickly run and launch a log. If it does not launch a log, try another download link until it does.
• Please post its log in your next reply.
• After it has run successfully, delete RKill.

Note: This tool only kills the active infection, the actual infection will not be gone. Once you reboot the infection will be active again! Please do not reboot until instructed further to do so.


Please visit this webpage for a tutorial on downloading and running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

See the area: Using ComboFix, and when done, post the log back here.

[DeputyDawg]

Since writing this, I think I may have found the offending malware and removed it

So far I think its back up.. Running some more scans to be sure.  But so far so good

Thanks anyways..