[Closed] infected by "pc exe."

Can anyone please help me? - I have been using an anti spyware programe called Spydoctor from PC Tools that came up for renewal a month ago - I decided not to renew the licence as it was very heavy on memory and slowed my laptop up whenever I started using it. To avoid the constant stream of popups reminding me to renew the licence, and to avoid the increasing Blue Screens of Death that were attributable to PC Tools according to Microsoft, I uninstalled the program and all its elements. Upon removal I immediately got a warning that my machine was seriously compromised and that I should solve the problem by buying a piece of software that looked like it had come from Microsoft but clearly wasn't - spelling mistakes on the screen, dead buttons and non standard fonts suggested it was bogus. I believe this is a virus - it has loaded a file called "PC EXE." onto my machine and the only way I can stop the program is to ase Alt+ctrl+del then to manually end the process in task manager. The effect of this virus is to completely disable my account - I can log in as administrator or visitor but cannot access my account. When I log into my account I get just the wallpaper but no icons on the screen. I am not pC savvy to any great degree - can anyone please advise if and how I can remove this from my machine? Many thanks, Wileaux

Welcome to the What the tech Forums
My name is mschroe919 and I am going help you
I would like to help you So if you would….
Please be patient and I will be back as soon as possible.

FIRST:


Please while I am gone do these steps:

Show hidden files, Here is how:

Windows XP

* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.

NEXT:

Please download ATF Cleaner by Atribune.

Download it

HERE:

This program is for XP and Windows 2000 only
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

NEXT:

Malwarebytes' Anti-Malware

HERE

* Double-click mbam-setup.exe and follow the prompts to install the program.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform FULL SCAN, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt
save and post the malwarebytes log when you get to the bottom of this page.
NEXT:

We need to download HijackThis, download it here


HERE:

once downloaded click on it to install
By default it will install in c:\program files.Don't change the location
Then navigate to that directory and double-click on the hijackthis.exe file. When the program is started click on the Scan button and then the Save Log button to create a log of your information.
Once the log is saved please post it here .along with the Malwarebytes' Anti-Malware log
good luck

Be sure not to delete anything intill said ok to. also don't run any other cleanup programs till we
get done it may goof ours up.
Also if you have any questions feel fre to ask first.

When you post another HJT log and the Malwarebytes' Anti-Malware log , let me know how your PC is behavuing

I will be waiting to see new logs

mschroe919

NOTICE

Don't post the logs as a attachment. Please copy and paste here.

Hi wileaux, I haven't heard from you since I posted a reply to you. If you still need help please post back. If you don't let us know that too. Thank You mschroe919

Due to inactivity this topic will be closed. If you need help please start a new thread and post a new HJT log