Do I have the w32 Blaster?

Prescottbob,

Also, try the following:

Press the Windows key and the R key.
In the Run box, type in the following text inside the quote box, exactly as it is, and press: OK

taskkill.exe /F /IM amsecure.exe

(Type as follows: taskkill.exe(space)/F(space)/IM(space)amsecure.exe There is a space in three locations!)

Now, see if you can go to the Farbar Recovery Scan Tool Download
Select the 64-bit version.
Save to your Desktop.

Double-click the downloaded file to run it.
When the tool opens click Yes to disclaimer.

Press the Scan button.

FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply. <<---

The first time the tool is run, it also makes another log: Addition.txt
Also post the Addition.txt in your reply. <<---

That's the blankity-blank fake alert.

I'm also working on something else.

Will be back shortly.

prescottbob

Can you download AdwCleaner from another PC and use a USB flash drive to move it from the PC to the problematic PC ?

When you said FRST won't load do you get any error messages ?

Prescottbob,

Let's hold off on AdwCleaner. That program, IMO, does not have a prayer in this situation...


Try the following...(see Note at the end)
(You may want to print these instructions for easier access to them)

--->> Please press the Windows key and the R key simultaneously to open Run dialog box.

In the Run box, type (or copy/paste with your mouse, if you can):

Code:

iexplore.exe http://www.bleepingcomputer.com/download/rkill/dl/132/

Press: OK

Save Rkill.com on your Desktop.
Right-click on the downloaded RKill file and select: Run as Administrator

When the tool runs, a black DOS box briefly flashes and then disappears. This is normal and indicates the tool ran successfully.

When the scan is done, Notepad opens with the RKill report.
Please save the RKill report to your Desktop, to post in your reply.

>>Do not reboot the computer after running RKill, as the malware program will start again!!!

Back to the Windows key and the R key to open Run dialog box.
In the Run box, type (or copy/paste with your mouse, if you can):

Code:

iexplore.exe http://www.malwarebytes.org/products/malwarebytes_free/

Press: OK
Save to the Desktop.
Double-click the downloaded file to run MBAM.

When the installation begins, follow the series of setup wizard prompts pressing Next, and on the last prompt, press: Install
When done with this phase, press: Finish
However, uncheck: Enable free trial of Malwarebytes Anti-Malware Pro

MBAM automatically starts and takes you to the main console and to the Scanner tab.

On the Scanner tab:
Make sure the Perform Full Scan option is selected.
Then click on the Scan button.

The scan may take some time to complete, so please be patient.

When the scan is finished, a message box shows: The scan completed successfully. ..etc.
If anything is found, click Show Results to display all objects found.
Click OK to close the message box and continue with the removal process.
Make sure that everything is checked, and click: Remove Selected

When removal is completed, a report opens in Notepad.
(The log is automatically saved and can also be viewed by clicking the Logs tab).

Please post the MBAM log in your reply.


Note: If the above does not work, try the same instructions in Safe Mode with Networking

If you need to go to Safe Mode with Networking...

Press the Windows key and the R key simultaneously to open Run dialog box.
Type:

Code:

 iexplore.exe

In the Run dialog and click OK.

When Internet Explorer opens, click on Tools (at the top) and select: Internet Options
Click on the Connections tab, then click the LAN Settings button
Under the Proxy Server section, if there is a check in the box named: Use a proxy server for your LAN, uncheck the box.

If there is not a check, close the Local Area Network dialog box, and the Internet Options dialog box.

Press on with the steps in the previous post #78

Starting here --->> Press the Windows key and the R key simultaneously to open Run dialog box.
In the Run box, type (or copy/paste with your mouse, if you can):

Code:

iexplore.exe http://www.bleepingcomputer.com/download/rkill/dl/132/

@VistaKing,

He probably keeps getting the notice on the image posted previously, no matter what is done.

Farbar Recovery Scan Tool contained a virus and was deleted.

amsecure.exe was the malicious process at some point when RogueKiller was used, but, there may be others, or, the process may have changed.

RKill would nuke them all!!

Might need to try this in normal Windows, or, if no-go, use Safe Mode with Networking.