Questions tagged [virus-removal]

For questions on how to remove viruses and other malware from a computer—be sure to read http://superuser.com/questions/100360 before asking

Filter by
Sorted by
Tagged with
2 votes
2 answers
1k views

Trojan:Win32/Wacatac.B!ml found in C:\$Extend\$Deleted

I am really worried right now. I got the following message from Defender (Windows 11): What I tried so far: Actions to remove or even quarantine don't work. Defender offline scan, Malwarebytes, and ...
vonjd's user avatar
  • 115
1 vote
1 answer
192 views

How to identify which process is launching Outlook?

I am using windows 11 and Outlook keeps opening randomly. I have closed it multiple times but its keeps opening again. I am suspecting my computer is infected and I want to identify which process is ...
Charlie's user avatar
  • 111
0 votes
0 answers
89 views

What is "curPopup" and why have I received a notification about it?

This notification just appeared, what does it mean and is it a virus? Windows 10 professional PC.
Piecevcake's user avatar
0 votes
0 answers
35 views

Need help diagnosing PC with malware/virus [duplicate]

A friend tells me he clicked on a sketchy pop-up, now he thinks his computer got a "trojan virus" and all his data has been wiped out. None of that makes any sense to me, so I told him I'd ...
Mike Piantanida's user avatar
0 votes
1 answer
1k views

Defender repeats quarantine operation endlessly in OneDrive temp folder

I get these notifications endlessly, every few minutes, basically forever and I don't know what to do about them. The name changes a little, but the notifications just keep coming forever. Is this ...
YorSubs's user avatar
  • 823
0 votes
1 answer
108 views

Windows virus removed .exe while allowed

Windows 10 virus & threat removed a .exe file it thought was malware even though it was previously allowed. When windows security found the .exe file it said it was a threat. I hit "allow&...
Jeffro's user avatar
  • 11
0 votes
0 answers
17 views

Stopping specific file types from being created [duplicate]

I got infected with the shortcut virus for the second time. In short, my question is: can I stop *.inf files from being created on a specific external drive(USB)? Maybe some drive settings or a ...
Sebo's user avatar
  • 9
0 votes
1 answer
68 views

Find/Remove suspected virus/malware on macbook air (mapi.sport80.com)

I've found a program running on a friend's Mac that is under the name "mapi.sport80.com" in screen time & it has been running consistently for 5 days straight, it looks to be accessing ...
Fergus Johnson's user avatar
-1 votes
2 answers
19k views

How to delete RAV Antivirus on my Windows 10

How can I delete RAVAntivirus from my computer. There is no way I can delete this outrageous app from my computer. There will be an error in the control panel, as well as uninstall.exe, the folder ...
NearEternal's user avatar
0 votes
0 answers
84 views

What is this weird file shortcut in my Windows 10 startup settings for?

I just noticed it today when I was disabling other stuff, I've disabled it at startup now. It's located here: Any ideas what it is ? it looks suspicious to me.
mal's user avatar
  • 239
0 votes
0 answers
12 views

Virus/Spyware: C2/Generic-B detected in C:\Windows\System32\svchost.exe [duplicate]

Sophos has detected the following: C2/Generic-B detected in C:\Windows\System32\svchost.exe How do I get rid of this? Many thanks in advance!
Chris Fridrich's user avatar
0 votes
0 answers
38 views

Why won't this virus be removed by Microsoft Security? [duplicate]

I don't know how but Windows Security still detects such virus unlike other anti-virus softwares.
Mohammed Mehdi TBER's user avatar
1 vote
0 answers
16 views

Some Virus is creating "Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\SqlManagement" folder again and again [duplicate]

c:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\SqlManagement folder is creating again and again in our Windows server 2008 R2. SqlManagement folder contains some files with ...
David Koutek's user avatar
0 votes
2 answers
585 views

resetting an ssd (connected via USB) with kali

Ok so long story short I got a virus in my PC running win10, and ended up deciding that resetting the ssd (m. 2) would be the best option... The problem is that it won't let me do so from windows. I ...
4ure's user avatar
  • 1
1 vote
1 answer
225 views

My website is hacked, if i bring it offline on my local xampp server, will the malware spread on to my computer?

what I am trying to do here, is bring it down to my computer and then clean it, locally, then I will delete all the online one and do a piece by piece fresh installation of my site.. but I am not sure ...
ZozoMojo's user avatar
0 votes
2 answers
947 views

How do i disable Windows 7 from taking screenshots?

My laptop keeps on taking screenshots. Several keys, when pressed, would take a screenshot, essentially functioning as the "prt sc" key as well as their main function (for example the key &...
JJrussel's user avatar
  • 119
1 vote
4 answers
2k views

PDFs opening in Chromium despite Acrobat being set as default

This is some really weird behaviour. I have set Adobe Acrobat as my default app for opening PDFs. But as you can see in the screenshot the acrobat icon is not there. . And when I actually double click ...
llewmills's user avatar
  • 165
0 votes
1 answer
1k views

Windows reset vs formatting?

I stupidly downloaded some ROMs and exacuted a .exe, so it looks like I'm going to have to format/reset my pc. Is windows reset not as good as formatting the drive? It looks like windows reset will ...
Bluesandbox's user avatar
2 votes
1 answer
2k views

Image File Execution Options

My regedit keys in Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options* have a lot of keys with the name of applications that I am sure that I have ...
Jazib Dawre's user avatar
0 votes
1 answer
35 views

Enquiry about Ransomwares

Let's suppose I am on Win 7 (no security updates since 2019) and I am connected to the internet but I only visit trust worthy websites such as facebook, youtube ect... I never download anything or ...
user1160086's user avatar
0 votes
0 answers
83 views

Can't discover the source of virus. Faulty dll is causing many windows pop up

Attached here some samples of faulty bug report windows which pop up occasionally. Nvidia Container: Problem signature: Problem Event Name: BEX64 Application Name: nvcontainer.exe Application ...
Alex Zubkov's user avatar
1 vote
1 answer
2k views

Best Way to Get Rid of Ceprolad.A [duplicate]

Well this is embarrassing... I was attempting to download a freeware tool and clicked on the wrong thing so I was blasted with tons of malware. Windows Defender seems to have gotten rid of some of ...
Shawn Eary's user avatar
2 votes
0 answers
4k views

Windows Defender does not run an Offline scan. Event Viewer reports Event Id 5007

When I start the Offline scan from the Windows Defender App in Windows 10, as expected, it restarts my system and then only briefly attempts to run Windows Defender Offline but quickly restarts my ...
Sathyaish's user avatar
  • 199
2 votes
2 answers
608 views

Virus added .mbed File Extension

The files on my PC's 2 drives have been altered by a virus; all files on both drives now have an extra extension of ".mbed" Here you have a screenshot to get my point: So what is the shortcut way ...
Siddharth's user avatar
  • 139
1 vote
0 answers
1k views

I accidentally downloaded a Trojan:Win32/Occamy.C virus. I did not run the EXE. Am I safe? [closed]

So I have just downloaded a Trojan virus on accident. I did not run the EXE, and now the file is gone (I don't know if I deleted it or not, but it isn't in my recycling bin.) I ran a McAfee security ...
Yekult's user avatar
  • 11
0 votes
0 answers
77 views

How can I verify if virus threats are false positives or actually threats?

I was trying to install some time tracking applications: Procrastitracker and Fruitful Time based on suggestions from this question. Unfortunately, Avast keeps showing me messages about IDP.Alexa.51 ...
Real Noob's user avatar
  • 277
-2 votes
1 answer
411 views

How to remove Virus Ransomware and recover file .verasto ? Please HELP this is my life

My pc just got into a big problem all the file are changed their type to .verasto. I don't know how to get it back please help me, guy. I'm begging you. Please
user avatar
2 votes
1 answer
8k views

How to uninstall sfproc.exe silent app (Possibly from timedoctor)

I was asked by my employer to download and install an exe. They didn't gave me much detail. But from the onset it looked like time doctor. I work from a home pc and I thought the version I was given ...
Markov's user avatar
  • 23
1 vote
1 answer
6k views

how to remove virus protected by TrustedInstaller?

recently fixed a computer infected with a virus, among the infected files was C:\windows\system32\drivers\zdengine.dll and C:\windows\system32\drivers\zdengine64.dll (which was used to hijack DNS), ...
hanshenrik's user avatar
  • 1,665
0 votes
1 answer
237 views

My files are showing .blower file extension

My files are showing .blower file extension. I have tried to remove malware and viruses but this problem is still there. Installed Microsoft Security Essentials and also ran Microsoft Malicious ...
Muhammad Faiz Qureshi's user avatar
0 votes
0 answers
77 views

How do I recover my data from a ransomware .rumba?

My laptop got infected with a ransomware. It add extension .rumba to my files. How do recover my data? I've tried all the method in the google first page of "How to remove .rumba" to no avail. I ...
Vahn's user avatar
  • 650
0 votes
1 answer
394 views

I can't delete this folder which contain virus, it keeps being recreated when deleted [duplicate]

So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I ...
LucasLucas's user avatar
2 votes
1 answer
343 views

Check actual occupied disk space in case of malware

I have a win 10 HP laptop. Recently, I got infected with some malware (don't know what exactly, installed antivirus detected a couple of trojan generics, out of which one was most definitely a false ...
Dobby's user avatar
  • 53
5 votes
2 answers
22k views

When I open Google Chrome on Windows 10, it crashes the system almost instantly, why? [duplicate]

TL;DR When I open Google Chrome on Windows 10, it crashes the system almost instantly. In detail: My laptop stops responding (freezes) and I can hear louder cooling (supposedly higher CPU usage due ...
Vlastimil Burián's user avatar
0 votes
0 answers
27 views

What are the steps to remove reimageplus virus manually? [duplicate]

What are the steps to remove reimageplus virus manually(as in without using any third party software)? I tried using adwcleaner but it seems to keep coming back or something. How to completely remove ...
Nae's user avatar
  • 239
1 vote
0 answers
41 views

Is there a way to access, read and modify System Volume Information? [duplicate]

I have an issue with a virus that is located in System Volume Information. However, I can't even see the folder in order to give myself ownership / permissions, even though I do have the "Show hidden ...
John's user avatar
  • 143
0 votes
1 answer
7k views

How to permanently kill steam client bootstrapper

I have the following situation in my task manager: I don't know what kind of app it is, but definitely not Steam client bootstrapper because I didn't install it and also can't uninstall it. If I try ...
Yuriy Zaletskyy's user avatar
-1 votes
1 answer
111 views

Finding How a Virus Keeps Reinstalling? [duplicate]

I recently got infected with a ton of viruses, and I was able to clean out most of them, but there's still one that I can't get rid of. Here are the details (the computer is running Windows 10 x64): -...
Kurausukun's user avatar
0 votes
1 answer
285 views

How do I get rid of showad.js in windows 10?

I keep getting this pop-up at the bottom of my screen that asks me what I want to do with Showad.js? It gives me the choice of Save - Save as or cancel. I always hit cancel. Is the sites I see with ...
GJ.Baker's user avatar
  • 101
0 votes
0 answers
20 views

Can't remove dataup adware [duplicate]

Last night I got the dataup adware on my PC, I've done virus and malware removal before, but this one won't go away and is proving to be quite stubborn. I've used Malwarebytes, HitmanPro, and Norton ...
Mr. Mendelli's user avatar
  • 1,259
0 votes
1 answer
54 views

How to get logs of crashes when system wont response

I got very strange thing happening all of sudden. My windows wont let me do right click Cltr alt del Click on taskbar Let me choose a icon Let me run antivurus It all started one day out of no ...
localhost's user avatar
  • 131
0 votes
0 answers
1k views

Windows 2008 Server: Found a trojan in c:\Windows\Fonts\winlogon.exe. How do I delete that?

Miscrosoft Security Essentials does not detect it, but from its CPU consumption and location in the Fonts folder it clearly is a virus. From Task Manager I right click on "winlogon.exe" to Open File ...
JamesJ's user avatar
  • 1
0 votes
0 answers
35 views

My files keep getting encrypted with the Rakhni Ransomware [duplicate]

I used the RakhniDecryptor to decrypt my files, but they keep getting encrypted. I used multiple scanners to search for the RakhniEncryptor on my PC: Malwarebytes/SuperantiSpyware/NOD32/Kaspersky ...
blade19899's user avatar
1 vote
0 answers
613 views

Removable drive .lnk access is denied

I'm trying to remove flashdrive shortcut virus in windows 7. When I enter del *.lnk in cmd, I get this- Removable Drive <4 GB>.lnk Access is denied. How should I remove this error?
uitwaa's user avatar
  • 11
1 vote
2 answers
2k views

Found "HowToRemove.html" on Windows task bar

While scrolling through the apps on my Windows 10 laptop, I found the above an app called "HowToRemove.html". I have never seen it before and I am pretty sure it wasn't there when I bought the laptop. ...
user avatar
-2 votes
1 answer
212 views

What the heck is this, when my cursor is on that, it disappears?

do not know how it is uploaded or is it a program of ASUS, but it appears everytime until my mouse on it and it disappears, can not figure out what is this?
chatay's user avatar
  • 13
2 votes
1 answer
305 views

Bootkit.0010 issues?

Did read this: How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC? But, computer I have is out of the box (OEM) and I've never connected it to the internet. ...
user3082's user avatar
  • 143
0 votes
1 answer
406 views

how do I create an AVG bootable USB device from Linux?

Per AVG instructions on creating a bootable USB device: Using the RAR/ZIP archive to create a USB bootable device To create a USB flash drive variant of AVG Rescue CD, you will need to do the ...
Thufir's user avatar
  • 1,610
0 votes
2 answers
104 views

Best Way to Remove Malware and Recover Files

So a family member's laptop got hit with a nasty virus which has made the device unusable including being unable to run a virus scan. The computeri simply freezes right after completing the boot up ...
JCM's user avatar
  • 93
1 vote
2 answers
1k views

Removed a virus, W10 Cloud Protection & Automatic Sample submission disabled by group policy

The cause So, I did a stupid and executed an infected exe. Immediately my PC started acting up, all sorts of applications were installing, ads were popping up, you name it. I quickly started a Windows ...
s1h4d0w's user avatar
  • 288