Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Removing fatalxxxwindowspcerror186 trojan


  • Please log in to reply
4 replies to this topic

#1 Bob.vs.life

Bob.vs.life

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:06 PM

Posted 29 April 2015 - 07:59 AM

I have the above phishing/advertising/browser hijacker on my lap-top.

There are many websites dedicated to its removal but all involve downlaoding their anti-virus products. Are they to be trusted, or have I been directed to them by the browser-hijacker infecting my computer?!?

Does anyone know a manual removal proceedure that doesn't involve a third-party product?

(I already have Kaspersky Antivirus, and Malwarebites anti-malware programmes installed. Neither of them can find the fatalxxxwindowspcerror186 trojan in their scans)


Edited by computerxpds, 29 April 2015 - 08:06 AM.
Moved to AII from Windows 7


BC AdBot (Login to Remove)

 


m

#2 Laz423

Laz423

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:06 PM

Posted 29 April 2015 - 08:46 AM

I would use rKill.  After that I would run adware cleaner.  All can be found in the download section here

Edited by Queen-Evie, 29 April 2015 - 11:00 AM.
deleted suggestion to run a tool that is not allowed in Am I Infected. See my post below.


#3 Laz423

Laz423

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:06 PM

Posted 29 April 2015 - 08:50 AM

Also boot into safemode with networking, is best to run all AV/ Adware cleaners that way.



#4 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:07:06 PM

Posted 29 April 2015 - 10:43 AM

Hello there :)

Please do NOT try to run ComboFix on your own - it is a very powerful tool, and should only be run when under the supervision of a Malware Response Team member.

Please follow the instructions below. If you do not understand anything, feel free to stop and ask.

Please run all tools in Normal Mode.

AdwCleaner by Xplode

Please download AdwCleaner by Xplode and save to your Desktop.
  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator
  • The tool will start to update the database, please wait a bit.
  • Click on I agree button.
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, ensure that all items are checked and click on the Cleaning button.
  • AdwCleaner will asks to reboot to finish cleaning.
  • A log will open when the system finishes rebooting. Please copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
===

Junkware Removal Tool

thisisujrt.gif Please download Junkware Removal Tool to your desktop.
  • Disable all your antivirus and antimalware software - see how to do that here.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
===

Emsisoft Emergency Kit

Please download Emsisoft Emergency Kit and save it to your desktop. Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop. Leave all settings as they are and click the Extract button at the bottom. A folder named EEK will be created in the root of the drive (usually c:\).
  • After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
  • The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates. Please click Yes so that it downloads the latest database updates.
  • When the update process is complete, a new button will appear in the lower-left corner that says Back. Click on this button to return to the Overview screen.
  • Click on Scan to be taken to the scan options. If you are asked if you want the scanner to scan for Potentially Unwanted Programs, then click Yes.
  • Click on the Full Scan button to start the scan.
  • When the scan is completed click the Quarantine selected objects button. Note, this option is only available if malicious objects were detected during the scan.
  • When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
  • Please save the log in Notepad on your desktop, and attach it to your next reply.
  • When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.
Please report on the status of your computer after finishing the steps.

Regards,
Alex

Edited by Alexstrasza, 29 April 2015 - 10:48 AM.


#5 Queen-Evie

Queen-Evie

    Official Bleepin' G.R.I.T.S. (and proud of it)


  • Staff Emeritus
  • 16,485 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:My own little corner of the universe (somewhere in Alabama). It's OK, they know me here
  • Local time:01:06 PM

Posted 29 April 2015 - 10:59 AM

Suggestion to run Combofix is not allowed in Am I Infected.

Because it is a powerful tool which should only be used under the supervision of someone trained in its use
Combofix is allowed ONLY in Malware Removal Logs forum.

See here for more information on what is and is not allowed in Am I Infected.

http://www.bleepingcomputer.com/forums/t/250928/instructions-for-posting-advice-in-am-i-infected-forum/




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users