Malware / Virus Help!

[Captain Of Light]

HELP!!! I have this virus /  malware called "Windows Installer" And its creeping me out. It look 100% Suspicious with typos everywhere. I tried to uninstall it from my computer, delete the shortcut, I even deleted my temp folder (Where it was located under a super weird name.)

 

The File: http://prntscr.com/5bkzd1

The Installer Scam: http://prntscr.com/5bkwy4 

[mr.skyrim_pc]

I really dont want to click on those links......

[Captain Of Light]

I really dont want to click on those links......

I can make them png's if you want.

[Captain Of Light]

I really dont want to click on those links......

Link1

[Captain Of Light]

I really dont want to click on those links......

Link2

[mr.skyrim_pc]

Link1

Try malewarebytes.

[Captain Of Light]

Try malewarebytes.

Ok

[TDP_Equinox]

I am working on making a batch file that auto runs all my tools, so everyone sit tight for that.
For now, download this : https://www.dropbox.com/sh/6eftoutzp7abmbo/AACItIX-uRxZB1u2L9zl0Xh3a?dl=0

If you have anything that gets in the way of windows, use rkill (the red one), run as admin.

First run Adware Removal tool (as admin).
After that, use ADWCleaner (as admin)
Combofix (as admin; only if you are using windows 7 and below)
HitmanProX64 (As admin; you can enter any email address. Example: iuasdrfkljufasd@nowhere.com)
Run RogueKillerX64 (As admin) and remove anything that isn't green.
Install malwarebytes, update it, and run a full threat scan.
At the same time as malwarebytes, run an MSE/Defender scan.
And while those two are running, install spybot 1.6.2, update the library (not the version, say no to 2.1), make a registry backup with spybot, and then close it.
Right click and run it as admin, and let that scan finish. 
Once they all finish, remove what MSE finds, then what spybot finds, and then remove what Malwarebytes find (in that order).
Restart, and open Malwarebytes, go to history, and then delete all.

After all that, reset all browsers to default, even the ones you dont use, delete extensions from chrome, and use Revouninstaller to remove any programs that are bad fully (launch, double click on the program, run advanced uninstaller, and delete all extra registry keys/files).

run CCleaner for a final good measure (temp files, and then scan for registry, backup, delete, scan, delete, scan, delete, scan, is there more? no? Restart. If it boots, delete the backup) and do your updates, and you're good to go. 

[Godlygamer23]

I am working on making a batch file that auto runs all my tools, so everyone sit tight for that.

For now, download this : https://www.dropbox.com/sh/6eftoutzp7abmbo/AACItIX-uRxZB1u2L9zl0Xh3a?dl=0

If you have anything that gets in the way of windows, use rkill (the red one), run as admin.

First run Adware Removal tool (as admin).

After that, use ADWCleaner (as admin)

Combofix (as admin; only if you are using windows 7 and below)

HitmanProX64 (As admin; you can enter any email address. Example: iuasdrfkljufasd@nowhere.com)

Run RogueKillerX64 (As admin) and remove anything that isn't green.

Install malwarebytes, update it, and run a full threat scan.

At the same time as malwarebytes, run an MSE/Defender scan.

And while those two are running, install spybot 1.6.2, update the library (not the version, say no to 2.1), make a registry backup with spybot, and then close it.

Right click and run it as admin, and let that scan finish. 

Once they all finish, remove what MSE finds, then what spybot finds, and then remove what Malwarebytes find (in that order).

Restart, and open Malwarebytes, go to history, and then delete all.

After all that, reset all browsers to default, even the ones you dont use, delete extensions from chrome, and use Revouninstaller to remove any programs that are bad fully (launch, double click on the program, run advanced uninstaller, and delete all extra registry keys/files).

run CCleaner for a final good measure (temp files, and then scan for registry, backup, delete, scan, delete, scan, delete, scan, is there more? no? Restart. If it boots, delete the backup) and do your updates, and you're good to go. 

I don't generally recommend any kind of registry cleaner, even if it's CCleaner.

[TDP_Equinox]

I don't generally recommend any kind of registry cleaner, even if it's CCleaner.

Anything other than CCleaner is junk and probably fake, but CCleaner is good. 

[Akolyte]

I work for AVG.  Just run Malwarebytes.  I mean, I normally just restore from a System Image and so do the others.  But, I'd recommend running Malwarebytes. 

 

BUT!!!   Firstly download Process Explorer (you should do even if you aren't infected) and hit the check box to submit to virustotal. That will just scan every process with VirusTotal and you can see if any running processes are infected, then submit the exe to virustotal www.virustotal.com  and that will show you the hash as well as scan it with multiple antivirus vendors.  

 

Just don't forget to check the PE details (packaged executable?) and see the details, it might reveal something.  I'm not a malware researcher but my friend is.  (incase your wondering why I'm saying the whole virustotal biz)

[TDP_Equinox]

I work for AVG.  Just run Malwarebytes.  I mean, I normally just restore from a System Image and so do the others.  But, I'd recommend running Malwarebytes. 

 

BUT!!!   Firstly download Process Explorer (you should do even if you aren't infected) and hit the check box to submit to virustotal. That will just scan every process with VirusTotal and you can see if any running processes are infected, then submit the exe to virustotal www.virustotal.com  and that will show you the hash as well as scan it with multiple antivirus vendors.  

 

Just don't forget to check the PE details (packaged executable?) and see the details, it might reveal something.  I'm not a malware researcher but my friend is.  (incase your wondering why I'm saying the whole virustotal biz)

My method will nuke pretty much anything you can throw at it. 

It's very rare that there is a virus left over.

[Godlygamer23]

Anything other than CCleaner is junk and probably fake, but CCleaner is good.

I didn't say it wasn't good. I use it, and the latest revision is great. However, it can(just like any other program) delete things from the registry that shouldn't be deleted, thereby causing problems.

[TDP_Equinox]

I didn't say it wasn't good. I use it, and the latest revision is great. However, it can(just like any other program) delete things from the registry that shouldn't be deleted, thereby causing problems.

Thats true.

That is why it has that handy backup feature.