Author Topic: virus problem  (Read 1308 times)

0 Members and 1 Guest are viewing this topic.

Offline Oladimeji

  • Newbie
  • *
  • Posts: 1
virus problem
« on: December 27, 2018, 08:53:27 PM »
help me! kaspersky virus has taken over my system and flashes. it is hiding all my files
how can i remove them completely?

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: virus problem
« Reply #1 on: December 28, 2018, 02:20:44 AM »
  • Open Notepad (click Start button -> type notepad.exe -> press Enter)
  • Copy text from code block below and paste it into Notepad
Code: [Select]
Startup: C:\Users\Executive MBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\explorers.lnk [2018-12-11]
ShortcutTarget: explorers.lnk -> C:\Users\Executive MBA\AppData\Roaming\Kaspersky Internet Security 2017\explorers.exe ()
Startup: C:\Users\Executive MBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\spoolsvc.lnk [2018-12-11]
ShortcutTarget: spoolsvc.lnk -> C:\Users\Executive MBA\AppData\Roaming\Kaspersky Internet Security 2017\spoolsvc.exe ()
Startup: C:\Users\Executive MBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\svhost.lnk [2018-12-11]
ShortcutTarget: svhost.lnk -> C:\Users\Executive MBA\AppData\Roaming\Kaspersky Internet Security 2017\svhost.exe (No File)
R2 Update diamondata; C:\Program Files (x86)\diamondata\updatediamondata.exe [206624 2013-08-31] (diamondata)
Task: {BD26A144-AD12-4748-8EC0-51B0DFE7BE36} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATTENTION
C:\Users\Executive MBA\AppData\Roaming\Kaspersky Internet Security 2017
C:\Program Files (x86)\diamondata
C:\Program Files (x86)\GoforFiles
  • Go to File -> Save As
  • Make sure that  UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.