Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

A virus is preventing me from opening downloaded antivirus related .exes


  • This topic is locked This topic is locked
5 replies to this topic

#1 Vevi

Vevi

  • Members
  • 4 posts
  • OFFLINE
  •  

Posted 18 November 2017 - 11:38 PM

Good afternoon!

I just read a lot of topics here in the forum relating to the problem that I have but so far none has been resolved. I opened a topic so that I can also help others who are experiencing this problem.

 

THE PROBLEM

 

The problem is every time I open a downloaded antivirus related app such as RKill or ADWcleaner setup, an error message pops up and goes like this:

 

 

Windows cannot find 'C:\Users\Harvey\Downloads\adwcleaner_7.0.4.0.exe'. Make sure you've typed the name correctly, then try again.

 

For free Malwarebytes installer I get an error message that goes like this:

 

 

ShellExecuteEx failed; code 2.

The system cannot find the file specified.

 

I also cannot run Command Prompt in admin mode:

 

 

This file does not have a program associated with it for performing this action. Please install a program or, if one is already installed, create an association in the Default Programs control panel.

 

It also pains me that I cannot open Task Manager at all. After clicking the Task Manager button, nothing opens.

 

 

HOW I NOTICED THE PROBLEM

 

I noticed this problem after trying to update my Malwarebytes, the error message like the earlier one pops-up everytime:

 

 

ShellExecuteEx failed; code 2.

The system cannot find the file specified.

So I tried uninstalling my Malwarebytes and downloaded a new one from the official website. But then every time I run the setup the error message above pops up

 

 

WHAT I DID SO FAR

 

 

So to work around it, followed a guide that includes using RKill but alas, the error message "Windows cannot find..." appeared. Then I knew from then that this is serious matter already. I have gone to safe mode and good thing all apps work there, so I tried using RKill then installed the Malwarebytes.

The malware bytes detects these 3 things:

1. Adware.Elex.ShrtCln

2. PUP.Optional.Conduit

3. Pup.Optional.Spigot

 

Even after repeated quarantine and removal, these things are endlessly popping up in the scans and I can't still open the other applications, cmd in admin, and task manager.

 

Then I researched into solving Adware.Elex.ShrtCln, I tried unsyncing my google account etc. but to no avail.

 

I also tried to create a new admin account while in Safe mode, logged in to the normal mode, but still failed to run RKill and the like.

I also tried to do System Recovery and Reset PC options but to no avail, I always get an error.

 

 

 

My PC specs

 

Windows 10 Home Single Language

 

Processor: Intel® Core™ i5-4670K CPU @ 3.40GHz 3.40GHz

Installed memory (RAM): 8.00 GB (7.85 GB usable)

System type: 64-bit Operating System, x64-based processor

 

 

 

This virus is pretty nasty one, hope you guys can help me :(


Edited by Vevi, 18 November 2017 - 11:38 PM.


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,264 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:07:53 AM

Posted 19 November 2017 - 07:21 AM

Welcome to BC....

 

You may try cleaning the comp by using the two programs below. If still having serious problem then follow the

directions for starting a new topic in the malware removal forum.

 

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download

 

Download 51a5f31352b88-icon_MBAR.pngMalwarebytes Anti-Rootkit (MBAR) to your desktop.

  • Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
  • Double click on downloaded file. OK self extracting prompt.
  • MBAR will start. Click "Next" to continue.
  • Click in the following screen "Update" to obtain the latest malware definitions.
  • Once the update is complete select "Next" and click "Scan".
  • When the scan is finished and no malware has been found select "Exit".
  • If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
  • Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"

 

Download AdwCleaner by Xplode onto your desktop. (compatible with Windows 7, 8 and 10)

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

Download and run the FREE online scanner from Free Virus Scan | Online Virus Scan from ESET | ESET

  • Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.
  • Select Enable detection of potentially unwanted applications.
  • Click Advanced Settings, then place a checkmark in the following:
    • Remove found threats
    • Scan archives
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • Click Start to begin scanning.
  • ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.
  • When the scan is done, click List threats (only available if ESET Online Scanner found something).
  • Click Export, then save the file to your desktop.
  • Click Back, then Finish to exit ESET Online Scanner.

If unable to do the above or still having a serious problem...

 

Please follow the instructions in the Malware Removal and Log Section Preparation Guide starting at Step 6.

  • If you cannot complete a step, then skip it and continue with the next.
  • In Step 6 there are instructions for downloading and running FRST which will create two logs.

When you have done that, post your logs in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team.

Start a new topic, give it a relevant title and post your log(s) along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. If you cannot produce any of the required logs...start the new topic anyway. Explain that you followed the Prep. Guide, were unable to create the logs, and describe what happened when you tried to create them. A member of the Malware Removal Team will walk you through, step by step, on how to clean your computer.

After doing this, please reply back in this thread with a link to the new topic so we can close this one.

 

DO NOT bump your new topic. Wait for a response from one of the Team Members.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 Vevi

Vevi
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  

Posted 20 November 2017 - 06:47 AM

Hi there,

1. Used CCleaner, no problems so far.

2. Downloaded MBAR, didn't work. "Windows can't find..." popped out.

3. Downloaded AdwCleaner, didn't work. "Windows can't find..." popped out.

4. Downloaded ESET, worked but not in admin mode, checked all mentioned on advanced settings then scanned, then got an .txt file afterwards.

 

Since the problem is still not solved, I proceeded in following the Step 6 in the guide which tells me to download Farbar, but didn't work. "Windows can't find..." popped out.

 

Now I'm gonna proceed to Step 7 which is to create a new topic.

New topic link can be found here: https://www.bleepingcomputer.com/forums/t/663330/windows-cant-find-error-in-all-antivirus-related-programs-other-problems/



#4 buddy215

buddy215

  • Moderator
  • 13,264 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:07:53 AM

Posted 20 November 2017 - 08:13 AM

Try renaming FRST to another name...such as applesauce

If successful...edit your opening post by adding the FRST logs.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 Vevi

Vevi
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  

Posted 21 November 2017 - 04:56 AM

Try renaming FRST to another name...such as applesauce

If successful...edit your opening post by adding the FRST logs.

 

1. Tried renaming it to applesauce, didn't work. "Windows can't find..." popped out.

2. Tried renaming it to spaghettirecipe, didn't work. "Windows can't find..." popped out.



#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,440 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:53 AM

Posted 22 November 2017 - 11:38 AM

They will handle it from the new post.

Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a Malware Removal Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.
From this point on the Malware Removal Team should be the only members that you take advice from, until they have verified your log as clean.
Please be patient. It may take a while to get a response because the Malware Removal Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the Malware Removal Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRL Team member is already assisting you and not open the thread to respond.
The current wait time is 1 - 5 days and ALL logs are answered.
If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.
To avoid confusion, I am closing this topic.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users