Posted 29 August 2011 - 10:26 PM
I am running Windows XP. Today I went away from my home computer for about half an hour. I left Firefox on. I had four Firefox windows open, three of them open to very innocuous pages related to work. Two were the home pages of private foundations, and one was the Hotmail login page, without any login information entered in the fields. The fourth page was something called ilemi.eu, which broadcasts live bootleg transmissions of sporting events. I've never had a problem with ilemi before, and I've used it many times.
When I came back into the room, suddenly I had a popup in the bottom right-hand corner that said "dlactrlw.exe can not start." And a message that said dlactrlw.exe is infected by the W32/Blaster.worm.
Firefox had closed.
Whatever this virus is then stopped me from running any applications on the computer at all.
On another computer, I looked at several online discussions about this virus. Using the other computer and a thumb drive, I downloaded several different versions of RKill, and transferred them to my computer. Eventually, after several tries, the one named eXplorer.exe was able to run. None of the others would run.
When that worked, I was able to run Firefox. I went online and downloaded SUPERAntiSpyware. When I try to run that, I get an error message that says "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item." I also downloaded MalwareBytes Anti-Malware. When I try to run that, I get the same error message. I also have Windows Defender. When I try to run that, I get the same message.
So I downloaded the SUPERAntiSpyware Portable Version, which creates a random name to trick the virus. That will run. It runs anywhere from 30 seconds to a couple of minutes, then turns itself off right in the middle of the scan. It doesn't generate any log that the scan ever took place.
As of now, RKill seems to run almost constantly. Other applications will work, and I no longer get the original popup. But everything seems to be running slower than it ought, and it's distracting to have the RKill keep popping up every few moments. When RKill starts, everything on the desktop disappears for several seconds. Also, if I try to run the Windows Search function, RKIll will kill that within a minute or two.
RKill generates a Notepad entry when it runs. It says
"Processes terminated by Rkill or while it was running:
Rkill completed on 08/29/2011 at (such and such a time, updated every few minutes)"
It doesn't mention the actual name of any process it has terminated.
I will appreciate any help you can give me.
Thanks very much.