Jump to content

Help a fake antivirus took my computer


Go to solution Solved by JSntgRvr,

Recommended Posts

There is a pending reboot. Lets see if we can remove the object:

  • Download the enclosed file  Fixlist.txt
  • Save it in the same location FRST64.exe is saved.
  • Start FRST (FRST64) with Administrator privileges
  • This time around Press the Fix button and wait
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please attach this file in your next reply.

How is the computer doing?

Link to post
Share on other sites

XtuService.exe is an executable application that belongs to the Intel Extreme Tuning Utility (XTU) software developed by Intel Corporation 1. It is used to monitor or adjust the clock settings or voltage supply of the Windows system 1. The file size of XtuService.exe is approximately 80 KB 1. It is generally safe, but sometimes the XtuService.exe process may use too much CPU or GPU. If it is malware or a virus, it may be running in the background 1. If you encounter the XtuService high disk issue on Windows 10, you can try to uninstall XtuService on Control Panel.

Press the Windows Key + R. Type Services.msc. See if listed therein.

Link to post
Share on other sites

  • Download the enclosed file  Fixlist.txt
  • Save it in the same location FRST64.exe is saved.
  • Start FRST (FRST64) with Administrator privileges
  • This time around Press the Fix button and wait
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please attach this file in your next reply.

Run  Farbar Service Scanner after a restart and attach its report.

Link to post
Share on other sites

Lets try that again:

  • Download the enclosed file  Fixlist.txt
  • Save it in the same location FRST64.exe is saved.
  • Start FRST (FRST64) with Administrator privileges
  • This time around Press the Fix button and wait
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please attach this file in your next reply.

Run  Farbar Service Scanner after a restart and attach its report.

Edited by JSntgRvr
Link to post
Share on other sites

  • Download the enclosed file  Fixlist.txt
  • Save it in the same location FRST64.exe is saved.
  • Start FRST (FRST64) with Administrator privileges
  • This time around Press the Fix button and wait
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please attach this file in your next reply.

Link to post
Share on other sites

Lets review the entries then search for files.:

  • Download the enclosed file  Fixlist.txt
  • Save it in the same location FRST64.exe is saved.
  • Start FRST (FRST64) with Administrator privileges
  • This time around Press the Fix button and wait
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please attach this file in your next reply.

Link to post
Share on other sites

Run FRST as an Administrator. On the Search window in FRST copy and paste the following:

qmgr.dll;dosvc.dll;usosvc.dll;WaaSMedicSvc.dll;wuaueng.dll;wscsvc.dll

Click on Search files.

A Search.txt will be produced. Please attach it to a reply

Link to post
Share on other sites

  • Download the enclosed file  Fixlist.txt
  • Save it in the same location FRST64.exe is saved.
  • Start FRST (FRST64) with Administrator privileges
  • This time around Press the Fix button and wait
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please attach this file in your next reply.

Link to post
Share on other sites

I believe the viruses that were in your computer affected your permissions as an administrator, or the Registry permissions, as everything seems in place. We can restore some of these services, but the better way to do so will be performing a Repair Install with an in place upgrade.

https://www.elevenforum.com/t/repair-install-windows-11-with-an-in-place-upgrade.418/

You let me know what you want to do.

With a virus such as the Neshta, which will inject code to your software, I rather upgrade than fiddling with the registry, or better, backup personal data and perform a clean Install, which in turn will erase the entire hard drive.

Keep me posted.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.