TheTechGuide Forum

General Category => Tech Clinic => Topic started by: Kned01 on March 15, 2011, 11:47:32 PM

Title: Help! Malware loads unk.exe for everything
Post by: Kned01 on March 15, 2011, 11:47:32 PM

I am running Windows XP SP3.  My AVG 2011 is disabled.  I can ONLY execute IE, Search and Task Manager.

Search found File UNK.EXE-271AAF89.pf  in C:\WINDOWS\Prefetch with very recent timestamp.

I looked at other posts,  downloaded OTL, but it only results in another unk.exe running in task mgr.

I use a PC every day, but my expertize is with larger systems.   I don't know what to do next.

Title: Help! Malware loads unk.exe for everything
Post by: guestolo on March 18, 2011, 10:20:31 PM

Please download Rkill by Grinler from one of these links:

Rkill.exe (http://download.bleepingcomputer.com/grinler/rkill.exe)
Rkill.com (http://download.bleepingcomputer.com/grinler/rkill.com)
Rkill.scr (http://download.bleepingcomputer.com/grinler/rkill.scr)


Save Rkill to your Desktop.
Double-click on Rkill to run it.

Note: If the first one does not run successfully, download and try the other copies (with a different file extensions) and see if one of them will run.

If you can have one run, don't reboot the computer, as the setting from rkill is temporary
download Malwarebytes' Anti-Malware from Here (http://"http://www.besttechie.net/tools/mbam-setup.exe") or Here (http://"http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html")
Save the installer to desktop

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.    
• If an update is found, it will download and install the latest version.    
• Once the program has loaded, select "Perform Quick Scan", then click Scan.    
  
• The scan may take some time to finish,so please be patient.    
• When the scan is complete, click OK, then Show Results to view the results.    
  
• Make sure that everything is checked, and click Remove Selected.
      * When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)    
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.    
• Copy&Paste the entire report in your next reply

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

Title: Help! Malware loads unk.exe for everything
Post by: guestolo on May 24, 2011, 03:26:59 PM

As the original poster has not returned, this topic is now locked