Windows Process Manager (32 bit) malware.

[Osie]

Cannot end the tasks nor can I delete the new files. Pretty frustrating as well.

 

[TwinHeadedEagle]

Hello,


Please download Farbar Recovery Scan Tool x64 and save it to a flash drive.

• Plug the flashdrive into the infected PC.
• Boot to windows recovery by using one of the methods on this link: Boot to Advanced Startup Options in Windows 10
• If you're unable to boot to recovery you will need to create a recovery drive. You can do it by following this guide: https://support.microsoft.com/en-us/help/4026852/windows-create-a-recovery-drive
  Make sure to uncheck Back up system files to the recovery drive box, so that process goes faster.

• Now you should get a window like this where you need to click Troubleshoot.

• In the next window, click Advanced options and select Command Prompt.
• Now you should log in into your account and after that Command Promptwindow.

Access the notepad and identify your USB drive

In the Command Prompt please type in:

notepad

and press Enter.

• When the notepad opens, go to File menu.
• Select Open.
• Go to Computer and search there for your USB drive letter.
• Note down the letter and close the notepad.

Scan with Farbar Recovery Scan Tool

Once back in the command prompt window, please do the following:

• Type in e:\frst64.exe and press Enter.
  You need to replace e with the letter of your USB drive taken from notepad!
• FRST will start to run. Give him a minute or so to load itself.
• Click Yes to Disclaimer.
• In the main console, please click Scan and wait.
• When finished it will produce a logfile named FRST.txt in the root of your pendrive and display it. Close that logfile.

Transfer it to your clean machine and include it in your next reply.

 

[Osie]

When I try it through the command window it tells me “Access denied” but it will let me run the program normally if I navigate to the flash drive.

 

[TwinHeadedEagle]

What tells you access denied?

 

[Osie]

The command window itself says access denied.

 

[TwinHeadedEagle]

Hmm, did you download the FRST tool to the USB on a clean computer. If that is not the case, please delete the tool and download again.