Tech Support Forum banner

Wininit Nightmare!!!

2502 Views 1 Reply 2 Participants Last post by  amateur
There seems to be a new type of virus or bug going around. It is infecting Wininit! I need help bad! When this maleware or virus gets in the wininit, it blocks you from accessing search engines and countless websites. I use 'NoAdware Virus Protector' (amongst: Ad-Aware 2007, SpyBot, SpyDoctor, SpyHunter, MalwareScan, RegCure, SUPERAntiSpyware Professional, Spyware Terminator, TrojanHunter, TrojanRemover, VundoFix, Registry Mechanic and ATF-Cleaner --- Seriously, I really use ALL these) and the only one that fixes it is 'NoAdware Virus Protector', but it's not permanent, 'NoAdware' reboots my PC after it says the problem is "fixed", everything seems fine, BUT the problem starts again the very next time the computer restarts (or worse, anytime explorer restarts). Can somebody PLEASE help me?!!

Here is the log after 'NoAdware' does it's thing:




---------------------

Noadware 5.0

---------------------



Removing Spyware Tracking Cookie...

Removing Registry Tracking Cookie...

Removing RegValues Tracking Cookie...

Fixing RegValue dataTracking Cookie...

Removing Cookies Tracking Cookie...



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][2].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][2].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][2].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][2].txt



[Deleted Cookie]

C:\Users\David S. Miller\AppData\Roaming\Microsoft\Windows\Cookies\[email protected][1].txt

Removing Files Tracking Cookie...

Removing Folders Tracking Cookie...

Removing Spyware W32/Rbot-FKM...

Removing Registry W32/Rbot-FKM...

Removing RegValues W32/Rbot-FKM...

Fixing RegValue dataW32/Rbot-FKM...

Removing Cookies W32/Rbot-FKM...

Removing Files W32/Rbot-FKM...



[File Deleting...]

C:\Windows\system32\wininit.exe



Access Denied can't delete -> C:\Windows\system32\wininit.exeMoveFileEx Error (5)Removing Folders W32/Rbot-FKM...
See less See more
Status
Not open for further replies.
1 - 2 of 2 Posts
Hello and welcome to TSF :smile:
Please read this sticky: http://www.techsupportforum.com/f112/if-you-think-your-computer-is-infected-203704.html

If you cannot complete any of the 5 steps for whatever reason, just continue on with the next one until they are all completed, and post your logs in The HJT Help Forum; where an Analyst will assist you. However, it is very important to make mention of any of the steps that you were not able to complete.

After you’ve posted your logs, please be patient, as the Security Team Analysts are very busy.
1 - 2 of 2 Posts
Status
Not open for further replies.
Top