Im Infected with Classified.exe virus-Help!

Viruses and worms
1

[b]I am infected with Classified.exe, a virus that will appear on desktop and folders. This look like a folder but it is a application. It deactivates all antivirus installed in the system and the taskmanager. My computer started to slowdown and attacks my system32 files.

Anyone please help me of how to remove this virus… Thanks…[/b]

2

You deactivated or the virus did and kill avast?

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use MBAM (or SUPERantispyware or even Spyware Terminator) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Clean your Hosts file (replacing it) with HostsMan tool.
  7. Disable System Restore and then reenable it again.
  8. Immunize your system with SpywareBlaster.
  9. Check if you have insecure applications with Secunia Software Inspector.
3

I will try your suggestion, I will let you know and keep you updated about this process. Thank you very much for your time.

4

I just finished trying your suggestion but none of them resolve my problem aside from my rootkit is now cleaned.

5

It’s not a minor thing… are you clean now?

6

I am still encountering the same virus problem… :cry:

7

It was odd that MBAM did not detect the suspicious file, did you update MBAM before running it? Moreover, please post a hijack this log:

  • Click here to download HJTsetup.exe
    [*]Save HJTsetup.exe to your desktop.
    [*]Doubleclick on the HJTsetup.exe icon on your desktop.
    [*]By default it will install to C:\Program Files\Hijack This.
    [*]Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
    [*]Put a check by Create a desktop icon then click Next again.
    [*]Continue to follow the rest of the prompts from there.
    [*]At the final dialogue box click Finish and it will launch Hijack This.
    [*]Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
    [*]Click on “Edit > Select All” then click on “Edit > Copy” to copy the entire contents of the log.
    [*]Come back here to this thread and Paste the log in your next reply.
    [*]DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.