[Atlantic33]

I have an HP Probook4540s that has been infected with W64.viknok.B!nf. I am using windows 7 and I have Norton antivirus, however it cannot get rid of the virus. The virus shows up in the custom scan I do under the drive scan local disk C and it says it needs attention and cannot fix it. My computer has been running slower than usual, but that's all that I have noticed so far. I have tried a few things such as downloading Norton power eraser, Sophos, Malwarebytes  and a few other instructions, but to no success.

 

Please help me remove W64.viknok.B!nf

 

-Atlantic33

 

 

Also want to add:

 

Also to add after doing some research I right clicked my bottom task/tool bar and clicked task manager and opened it up, I clicked on the processes tab and found two suspicious things,

 

1) csrss.exe -1,816K memory and says nothing for the description. Nothing happens when I right click it either. The user name is blank as well.

 

2) winlogon.exe 392K memory, again says nothing for a description and nothing for a user name and nothing when I right click it.

 

I read these could be viruses or actual real important components to my computer. My hunch is that these are viruses due to the fact they are different than everything else and how suspicious they are.

Edited by Atlantic33, 05 April 2017 - 09:06 PM.

[Advertisements]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

1 csrss.exe
2 winlogon.exe

Those are windows system files, but they can become infected and in that case the system files would need to be replaced. In the task manager make sure you click on show processes for all users. The user name should show as well as the description.

Have you noticed any audio ads in the background ?

Everything gets download to the desktop and tools are "Run as administrator."

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[zep516]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

1 csrss.exe
2 winlogon.exe

Those are windows system files, but they can become infected and in that case the system files would need to be replaced. In the task manager make sure you click on show processes for all users. The user name should show as well as the description.

Have you noticed any audio ads in the background ?

Everything gets download to the desktop and tools are "Run as administrator."

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[zep516]

You usually get infected because your security settings are too low.

Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:

Safe Computing Practices please read Here


Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

Thanks
Joe