trojan downloader:win32/cutwail.ba HELP!

Page 1 of 4 123 ... LastLast

  1. Posts : 120
    windows 7 Home Premium 64 Bit
       #1

    trojan downloader:win32/cutwail.ba HELP!


    Microsoft Security Essentials discovered this trojan virus today and three times it said I needed to restart to clean computer yet, it never leaves and is caught again on returning to Desktop.
    I've looked this up on Microsoft KB and that document says to keep MSSE up to date however, the problem is, I cannot update from MSSE nor the site itself.
    In fact, any links to sites which show promise of removing it- I click on and I'm told I have no internet connection, though I do have a connection and Google Chrome just says there's an error going to the site, I've tried downloading a couple of antivruses and they fail to download or update to start their scans.

    I really don't know what the hell I can do apart from reinstall windows though I'm worried about doing that now as my Windows Activation reset to the "30 days to activate" (my copy of Windows 7 Ultimate is genuine and activated at Christmas) so I'm concerned I might reinstall Windows 7 and my key becoming invalid.
    I hope there is some way of removing this trojan downloader:win32/cutwail.ba so I can get my computer back, I removed the files it left in system32 folder and my user folder but as for the registry files the KB says it left, there's nothing there. The advice then says don't try to remove anything but, use Microsoft Security Essentials or any antivirus to do it.

    If anyone knows how to deal with this problem, I would really appreciate the help!
    Thank you!
      My Computer


  2. NoN
    Posts : 4,166
    Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
       #2

    Did you used the full scan option in MSE?

    I can try to put the MS Kb890830 removal tool in a zip files...But you might have the same probs downloading? Which OS have you, x32 or x64?
      My Computer


  3. Posts : 120
    windows 7 Home Premium 64 Bit
    Thread Starter
       #3

    NoN said:
    Did you used the full scan option in MSE?

    I can try to put the MS Kb890830 removal tool in a zip files...But you might have the same probs downloading?
    Hi, yes i ran a full scan with MSE though nothing has been discovered this time.

    I'll give it a try, I think the virus is simply blocking me from visiting well known sites that can help me. Cheers man!
      My Computer


  4. Posts : 11,408
    ME/XP/Vista/Win7
       #4

    Delete the pirated software that you downloaded, as the virus is in side the download.

    Than run MSE full scan.
      My Computer


  5. NoN
    Posts : 4,166
    Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
       #5

    CorneliusM said:
    NoN said:
    Did you used the full scan option in MSE?

    I can try to put the MS Kb890830 removal tool in a zip files...But you might have the same probs downloading?
    Hi, yes i ran a full scan with MSE though nothing has been discovered this time.

    I'll give it a try, I think the virus is simply blocking me from visiting well known sites that can help me. Cheers man!
    I'm not allowed to upload more than 8,0Mb...

    so try those links:
    x64:Download details: Windows Malicious Software Removal Tool x64
    x32:Download details: Windows Malicious Software Removal Tool

    Run the tool for a full scan, the trojan is listed in the tool (see screenshot):
    Attached Thumbnails Attached Thumbnails trojan downloader:win32/cutwail.ba HELP!-capture.png  
      My Computer


  6. Posts : 120
    windows 7 Home Premium 64 Bit
    Thread Starter
       #6

    theog said:
    Delete the pirated software that you downloaded, as the virus is in side the download.

    Than run MSE full scan.
    I don't have pirated software but, I did remove the .exe's for one for activating Office 2010 called Keygen.Microsoft.Office.2010.45057.exe which has been removed as MSE discovered the problem.
      My Computer


  7. Posts : 120
    windows 7 Home Premium 64 Bit
    Thread Starter
       #7

    NoN said:
    CorneliusM said:
    NoN said:
    Did you used the full scan option in MSE?

    I can try to put the MS Kb890830 removal tool in a zip files...But you might have the same probs downloading?
    Hi, yes i ran a full scan with MSE though nothing has been discovered this time.

    I'll give it a try, I think the virus is simply blocking me from visiting well known sites that can help me. Cheers man!
    I'm not allowed to upload more than 8,0Mb...

    so try those links:
    x64:Download details: Windows Malicious Software Removal Tool x64
    x32:Download details: Windows Malicious Software Removal Tool

    Run the tool for a full scan, the trojan is listed in the tool (see screenshot):
    Couldn't download but, my friend's got it on a memory stick so I'm running a full scan from that now
      My Computer


  8. Posts : 3,300
    Win7 Home Premium 64x
       #8

    The keygen is an activation tool to use Office without paying for it thus pirating. If you used the keygen, then that could be where the virus came from. You should probably uninstall Office as well as the keygen could have infected files in Office.

    If you want a free Office program, get OpenOffice it is a very good alternative to Microsoft Office: OpenOffice.org - The Free and Open Productivity Suite
      My Computer


  9. NoN
    Posts : 4,166
    Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
       #9

    CorneliusM said:
    theog said:
    Delete the pirated software that you downloaded, as the virus is in side the download.

    Than run MSE full scan.
    I don't have pirated software but, I did remove the .exe's for one for activating Office 2010 called Keygen.Microsoft.Office.2010.45057.exe which has been removed as MSE discovered the problem.
    Did you used that keygen to activate the Trial version? No big matter, but not really in the rules....that's why MSE listed to remove that KeyGen.
      My Computer


  10. Posts : 120
    windows 7 Home Premium 64 Bit
    Thread Starter
       #10

    Thorsen said:
    The keygen is an activation tool to use Office without paying for it thus pirating. If you used the keygen, then that could be where the virus came from. You should probably uninstall Office as well as the keygen could have infected files in Office.

    If you want a free Office program, get OpenOffice it is a very good alternative to Microsoft Office: OpenOffice.org - The Free and Open Productivity Suite
    Okay I'll uninstall Office 2010 now and MRT is still scanning so I'll restart after the scan, thank you. Funny enough I came across OpenOffice after the problem!
      My Computer


 
Page 1 of 4 123 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:30.
Find Us