found vwxrauhf.exe running - causing huge issues

[mattedgie]

Hi,

I have/had a virus whereby logging in,upon startup i would have an internet page that apparently cannot display the page, it is full screen and i cant load or get rid of it and it even closes down task mgr.

i started avast and mwab in safemode and the problem wasnt solved, even got worse, programs dont display properly, start menu doesnt display, i right click and all i see is small icons and no text.

Anyway i somehow managed to get ccleaner open and checked the processes that run on startup, and this was one

Program: xwxrauhfkdfyodt
Publisher:
File Path:C:\ProgramData\vwxrauf.exe

i disabled this and tried to login and the blank internet page didnt load but the dodgy display is still and cant get the start menu to work and worse, nothing is picked up in scans...?

Any help would be great

Thanks

 

[JDobbsy1987]

I have seen some similar issues at work.

You could try the following

1. Delete the .exe
2. Click Start >> type MSCONFIG >> Click the Startup tab >> Un-Check that .exe if it is listed there
3. Click Start >> type regedit >> Click Edit >> Find >> search for that .exe and remove any entries
4. Reboot and see if the problem exists
4a -- If not i would still run precautionary scans using:

1. Full system scan with your Anti-Virus
2. SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
3. Malwarebytes : Free anti-malware download

Hope this helps.

Regards,
Jamie

 

[Layback Bear]

I would use this. It take quite a while but has worked great for many.
http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

 

[mattedgie]

Thank you both for the responses.

Unfortunately i cant run anything from the start menu as its not working, no desktop icons have names and a lot of gui for programmes are empty or partially missing

 

[JDobbsy1987]

Is it the same if you boot windows into safe mode?

 

[mattedgie]

yeah same in safe mode too

 

[Layback Bear]

Please read. You don't have to start your computer in normal or safe mode.
Windows Defender Offline

 

[alikhan]

You can either run avast boot time scan which is a scan that runs prior to the Operating System fully loading drivers, startup programs, or other places where viruses or trojans can hide from scanners.

OR

Removing virus without using antivirus program but it can be risky task.

Type the following commands in the Command Prompt
Type “<Drive_name>:” in the command prompt and hit “Enter“. (“Drive_name” is where the problem occurs, it may be any USB drive)
Type “attrib” and hit “Enter“. (This shows the files that are present in the currently working directory. You can also use the command “dir/w/o/a/p“)
If there are any file named autorun.inf then go for next steps else the drive is not affected with any autorun.inf file.
Type “attrib -h -r -s -a *.* ” then hit “Enter“. (This command removes the Hidden, Read Only, System and Archive attributes over any file)
After unhiding and removing attributes you can see the files. So you can delete the file now.
Type “del <filename>” in the Command Prompt and hit “Enter“. (As for example del autorun.inf)

That's all . Hope this helps.

 

[mattedgie]

hi,

thanks for your response.

I couldn't find the autorun file but there were dodgy exe files and folders. I tried the manual delete and I also did the Winows offline boot disk which didn't find anything.

The problem still persists, do I have any other options?

Thanks