Malwarebytes not starting up Win32/Nuqel.E

[nagrap2]

Hi,

Looks like I have a trojan which is preventing me from starting up Malwarebytes. I get a fake warning popping saying Threat: Win32/Nuqel.E

I have tried the following so far but no luck:

1) Tried renaming the exe to have an extension of .com bbut still didn't startup

2) Tried running in Safeboot mode and Malwarebutes started and ran scan, also removed all infections, but then when running in non-safeboot mode infections re-appeared.

What should I try next?

Thanks in advance,

Nagra

[LDTate]

Print out these instructions as we may need to close every window that is open later in the fix.

It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files requested in this guide on another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive.

Do not reboot your computer after running rkill as the malware programs will start again.

Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)

There are 5 different versions. If one of them won't run then download and try to run the other one.

Vista and Win7 users need to right click and choose Run as Admin

You only need to get one of them to run, not all of them.

1. rkill.exe
   
2. rkill.com
   
3. rkill.scr
   
4. WiNlOgOn.exe
   
5. uSeRiNiT.exe
   

Do not reboot your computer after running rkill as the malware programs will start again.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
  
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select Perform quick scan, then click Scan.
  
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• 
  
• Then click Remove Selected .
  
• When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  
• Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
  

Also please describe how your computer behaves at the moment.

Please don't attach the scans / logs, use "copy/paste". .

[nagrap2]

Print out these instructions as we may need to close every window that is open later in the fix.

It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files requested in this guide on another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive.

Do not reboot your computer after running rkill as the malware programs will start again.

Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)

There are 5 different versions. If one of them won't run then download and try to run the other one.

Vista and Win7 users need to right click and choose Run as Admin

You only need to get one of them to run, not all of them.

1. rkill.exe
   
2. rkill.com
   
3. rkill.scr
   
4. WiNlOgOn.exe
   
5. uSeRiNiT.exe
   

Do not reboot your computer after running rkill as the malware programs will start again.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
  
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select Perform quick scan, then click Scan.
  
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• 
  
• Then click Remove Selected .
  
• When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  
• Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
  

Also please describe how your computer behaves at the moment.

Please don't attach the scans / logs, use "copy/paste". .

Hi,

Since I could startup Firefox web browser I tried renaming the Malwarebytes exe to firefox.exe and managed to get it to startup.

I ran a scan and cleared the 5 items that were flagged as being trojans.

So now the pc seems to be clean of the trojan however I am now facing the following issue:

When I open up either internet explorer or firefox I am unable to load up any http web pages, however, I am able to view https webpages. This issue seems to have come about after removing the files malwarebytes flagged as being trojan files.

Please advise.

[LDTate]

Can you post the scan results using Copy /Paste so I can see what was removed?

[nagrap2]

I did some further reading and managed to fix the issue. Under internet options --> connections --> LAN settings the "use a proxy server for your LAN" option was checked so I unchecked and checked "automatically detect settings". All seems to be working fine now !!

Thanks for your help, please can you close this topic now.

[LDTate]

Thanks for posting back and letting us know

Peace be with you