WiredWX Hobby Weather ToolsLog in

 


descriptionBankerfoxa & Win32/Nuqel.E "Spyware Protect 2009" EmptyBankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

more_horiz
I can't remove this virus and it's horrible. It has taken over Internet Explorer and keeps popping up saying certain files are infected "Infiltration Alert" with BankerFox.A and Win32/Nuqel.E. It appears to be trying to sell an antivirus program, but you can tell it's bogus. Usually I don't have a problem removing viruses (I have Malwarebytes, Ad-aware, Microsoft Malicious removal, ect.), but this one won't let me open any program including all of the scanners and anti-virus/malware programs that usually work well. It also won't let me access Task Manager. I've tried everything. Please help!

When I try to run Malwarebytes:
"Application can not be executed. The file mbam.exe is infected. Do you want to activate your antivirus software now?"

When I try to go to task manager:
"Application cannot be executed. The file taskmgr.exe is infected. Do you want to activate your antivirus software now?"

I can't do anything. How do I get rid of this? Thanks so much.

descriptionBankerfoxa & Win32/Nuqel.E "Spyware Protect 2009" EmptyRe: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

more_horiz
Download OTL by OldTimer to your Desktop.

  • Close all windows and double click OTL.exe
  • Click Run Scan and let the program run uninterrupted
  • It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  • You may need to use two posts to get it all.

descriptionBankerfoxa & Win32/Nuqel.E "Spyware Protect 2009" EmptyRe: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

more_horiz
Yeah, like I said, if I try to open OTL.exe a box will pop up that will say:

"Application cannot be executed. The file OTL.exe is infected. Do you want to activate your antivirus software now?"

So I can't do that. Do you have any other ideas? Thanks!

descriptionBankerfoxa & Win32/Nuqel.E "Spyware Protect 2009" EmptyRe: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

more_horiz
Hello.

We need to use the RKill Tool by Grinler

Rkill.com <--- Download site

  • Please Download Rkill.com. Save it to your Desktop.
  • Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.

  • NOTE: If you are unable to connect to the site to download rkill, then you should download it to a clean computer and copy it to the infected one via a USB flash drive or CDROM.

  • Once it is downloaded, double-click on the rkill.com in order to automatically attempt to stop any processes associated with Rogue programs.
  • Please be patient while the program looks for various malware programs and ends them.
  • When it has finished, the black window will automatically close and you can continue with the next step.
NOTE: If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by the rogue program, when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate the rogue program. So, please try running Rkill until the malware is no longer running. You will then be able to proceed with the rest of the steps.

If you continue having problems running rkill.com, you can download:
iExplore.exe or eXplorer.exe
which are renamed copies of rkill.com, and try them instead.

Try OTL now.

descriptionBankerfoxa & Win32/Nuqel.E "Spyware Protect 2009" EmptyRe: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

more_horiz
I really, really appreciate your help! But I had already tried RKill and it did the same thing. Even if I left the warning window open (which stops everything from opening) and tried to double-click RKill several times it still wouldn't let it open up. This virus is a Bee-otch! But I think I got lucky. Somewhere I read to open internet explorer and go to internet options and LAN settings and uncheck some boxes. I did that a bunch of times, and then restarted my computer and just started clicking on Malwarebytes and somehow got it to open up, and then went to "update" and there was an error message (as I was told there would be) which I left open and then went back over to the LAN settings and unchecked the boxes again. Then updated Malwarebytes and got it to run and get rid of the viruses. They tried to come back as they had before, but I just kept repeating the process, updating and running, and running every other anti-virus/malware system I have and eventually I got rid of it for good!

Thanks again for your help. These viruses are freaking rediculous and such a waste of my time. Your help is invaluable. Thanks!

descriptionBankerfoxa & Win32/Nuqel.E "Spyware Protect 2009" EmptyRe: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

more_horiz
Still need help?

descriptionBankerfoxa & Win32/Nuqel.E "Spyware Protect 2009" EmptyRe: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

more_horiz
Nope, thanks

descriptionBankerfoxa & Win32/Nuqel.E "Spyware Protect 2009" EmptyRe: Bankerfoxa & Win32/Nuqel.E "Spyware Protect 2009"

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum