Solved Virtool win32 Obfuscator.xz detected

[VistaKing]

MSE was the one that first located the virus .

 

[james darkness]

Nothing was detected just one new problem I can open note pad and my ram seems to be running higher

 

[VistaKing]

Do you have Malwarebytes ? If so update the definitions and then do a full scan

 

[james darkness]

I'm not sure how can I tell

 

[cottonball]

james darkness,

...new problem I can open note pad

You can, or you can't?

If you can't...
You should have two copies of notepad.exe, one in C:\Windows, and one in C:\Windows\System32
Are they there, one in each place? Are they spelled notepad, or something like notpad?

 

[james darkness]

Can't open and can't tell going to sleep also I should not of typed I can't open note pad I mean to type I can't open a note pad doc that is made new or old and the only way I can is to Hite open with note pad

 

[cottonball]

Please download the Windows Repair:
http://www.tweaking.com/files/setups/tweaking.com_windows_repair_aio_setup.exe
Save to the Desktop


Right-click the downloaded file and select: Run as Administrator
Follow the prompts to install...


At the program's console:

Go to the Start Repairs tab

Press: Start

When asked to create a Restore Point, please do so.


At the prompt presenting Repair Options (on the left side) press: Unselect all


Now, under Repair Options only check/select:
Reset registry permissions
Reset File Permissions
Repair WMI
Repair Windows Firewall.
Remove Policies Set By Infections


Also click: Restart/Shutdown System When Finished
...and click: Restart


Press the Start button.



Post back if it helped.

 

[james darkness]

james darkness,

...new problem I can open note pad

You can, or you can't?

If you can't...
You should have two copies of notepad.exe, one in C:\Windows, and one in C:\Windows\System32
Are they there, one in each place? Are they spelled notepad, or something like notpad?

i do have two files of notepad

 

[cottonball]

Did you run Windows Repair, as in Post #67 above?

 

[james darkness]

no i did not but i hit open and chose default program and it fixed it