Jump to content

Messenger.exe virus. Can't remove, please help


Recommended Posts

Hi

This is my first time posting, so sorry if I've not done it right.

Anyway, I have somehow acquired some sort of malware, which I just cannot get rid of.

It keeps redirecting me to other web pages all the time, but is probably doing other stuff too.

Sometimes I get to the point where I think it is gone, but then an hour or so later I do a check and it's back again.

Details below:

When getting redirected I see : 'yourprofitclub' somewhere in the redirection address

I have noticed the following dodgy processes in task manager:

IEXPLORE - (I don't use internet explorer, and have seen this pop up in front of my eyes in task manager)

regsvr32.exe

cffmon.exe (not cTfmon.exe)

explorer.exe:userinit.exe

svchost.exe (I know this is normal, but a dozen of them)

and other random ones with a whole bunch of random letters.

Virus scans keep finding these files:

C:\Program Files\drivers_pack_v3.25.63.exe

C:\Documents and Settings\Administrator\Local Settings\Temp\drivers_pack_v3.25.63.exe

C:\Documents and Settings\Administrator\Local Settings\Temp\svchost.exe

C:\messenger.exe

C:\Program Files\Common Files\Microsoft Shared\Web Components\messenger.exe

c:\Documents and Settings\Administrator\Local Settings\Temp\update_kernel.exe

some of these keep readding themselves to my startup in msconfig.

I have run scans with Malwarebytes' Anti-malware, Super Anti-Spyware, Hijack-This, Unhack Me and Smitfraudfix.

In summary: the main culprits seem to be drivers_pack_v3.25.63.exe and messenger.exe

Please help.

Link to post
Share on other sites

We don't work on Malware removal in the general forums.

Please read the other pinned topic for Common Issues, Questions, and their Solutions which may answer some of your questions for you.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.