Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Is this a new virus? fikrwndx


  • Please log in to reply
1 reply to this topic

#1 papabryant

papabryant

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:04:04 AM

Posted 21 June 2015 - 09:03 PM

My son has picked up what appears to be a virus. It is an .exe file named "fikrwndx", and it is attached to Google Chrome. I can find no reference to this virus anywhere.
 
The symptoms are a series of audio ads for various products that recycles about every 5 minutes, and the appearance of the file in the Task Manager under the Processes tab. It has the Chrome icon, and appears multiple times (10-15 times) in the TM window. 
 
It also appears to try an protect itself by removing access to the add/remove programs controls while running in standard operating mode (although I did finally get access in Safe Mode). While there I removed Google Chrome, but the icon still appears in the TM window.
 
My son has a Toshiba Satellite using Windows 7 Home Premium.

Edited by Orange Blossom, 21 June 2015 - 09:04 PM.
Moved to AII. ~ OB


BC AdBot (Login to Remove)

 


m

#2 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:04 AM

Posted 21 June 2015 - 09:34 PM

Run a full scan with Reason Core Security

 

pd9wnxI.jpg

Remove infections reboot.

 

 

Run an advanced scan with  Crystal Security.

 

YwB0fU0.jpg

Remove infections reboot.

 

Then do the following.

 

Download Malwrebytes from the link below.
https://www.malwarebytes.org/
Select update.
jBVKBI0.png
Then Select Scan Now.
js1M2HF.png
Once the scan is completed.
Remove anything found.
Then go to the History tab.
Then go to the application logs.
Then go to scan log.
Export.
Copy to clipboard.
Post it here in your next reply.

 

 

9-Lab Scan
 
Download 9-Lab Removal Tool. from one of the links below.

CLICK HERE to determine whether you're running 32-bit or 64-bit for Windows.
 

http://9-lab.com/download/

Install the program onto your computer, then right click the icon RRXH2ZG.jpg run as administrator.

Go to the Update tab and update the program.

ZT1y9rP.png

Now go to the scanner tab and select Full Scan.

k68m97f.png

Upon Scan Completion Click Show Results.

FihDIFx.png

Now click the Clean button.

eCCJKcA.png

Once done cleaning you can go to the logs tab double click it and copy paste in your next reply.

 

 

Download Malwarebytes Anti-Rootkit to your desktop.

  • Double-click the icon to start the tool.
  • It will ask you where to extract make sure it is on the desktop.
  • Malwarebytes Anti-Rootkit needs to be run from an account with admin rights.
  • Click next to continue.
  • Then Click Update
  • Once the update is Finished select Next then Scan.
  • If no malware has been found, at the end of scan select Exit
  • If an infection was found, make sure to select all items and click Cleanup.
  • Reboot your machine.
  • Open the MBAR folder and paste the content of the following into your next reply:
  • mbar-log-{date} (xx-xx-xx).txt
  • system-log.txt





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users