Winferno Registry Power Cleaner

[Esetisthebest]

Ok, I got infected with this. I somehow "spam-clicked" 'accept' during an installation, which made me accept that this crap got on my computer.

The MBAM Real Time detected it in the firstplace, but I was so stupid.. Gosh. I ignored it due to the thoughts of it might have been a false-positiv to the program I installed. After a while, my antivirus program detected it, but didn't manage to delete the whole thing.

Neither did MBAM. Has to be said that I ran MBAM full scan, and it detected around 32 malicious files. I thought it detected everything, because the process got closed, etc. but now, 10 days after I got infected, it popped up like a fake antivirus.

I tried to look up where it was located, but I only found some .tmp files. I deleted all of them, but there were 1 tmp file I couldn't delete, so I used FileASSASIN. It deleted the file successfully, and I restarted my computer. I tried to uninstall the program, but I couldn't do it. I checked the taskmanager, and there was a file called "_i..." and below and description said "SETUP/UNINSTALL" or something like that. However, the process doesn't allow me to uninstall the program.

I need help!

Regards,

Esetisthebest

(Sorry for the bad explanation/english, wrote it in a hurry)

[Esetisthebest]

I wondered what this was, so I looked it up on the internet. It was adware(It's not a fake antivirus, even though it opens 2 suspicious windows). It's supposed to be a fake registry cleaner, logically it open 2 new windows.

And by the way, I uploaded the file that I couldn't delete on virustotal, only McAfee detected it as "Heuristic.BehavesLike.Win32.Virus.J". I guess it has been installed some other crap on my pc.

Lastly, I have Threatfire on my computer. I accepted the warning it gave me by installing the program. So basically, I'm a fool. I have never ever had any infection on my computer before. "Safety first" is something I priority very high. I'm usually a person who knows lot about malware, but this time I screwed up.

Oh, 1 last thing, lol. I deleted my log after the scan which found 32 malicious files. I also deleted the log... There's not a chance to send you the log file.

[Firefox]

Hello Esetisthebest, and welcome to Malwarebytes.org

We don't work on Malware removal in the general forums.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

If you are a corporate customer please send an email to corporate-support@malwarebytes.org. (NOTE: An order number is required for corporate support.)

[Esetisthebest]

Ok. But I have a question. Can Smartshopper(I think MBAM detected the adware as Smartshopper) download/install other programs? Threatfire has told me that it has copied itself several times. Be aware that I'm not seeking malware removal help (now).

[Blaze]

The possibility does exist, yes . Be sure to also have an Antivirus installed. I certainly advise you to follow Firefox's post .

[AdvancedSetup]

Yes it is very possible and a quite often used tactic of Malware to download other Malware. You really need to have someone assist you with this as posted by Firefox.

We cannot assist you with removal or analysis in the general forums. That is what the trained helpers are for in the HJT Forum.

Thank you.