[kkel]

Nothing I am doing is working, I cannot end the process of windows police pro to even start downloading malware or stopzilla. I can get to the cammand screen but nothing past that.

[Advertisements]

Hi, kkel

Welcome.

Would you be able to create a file in another computer and copy that file to the sick computer? How about booting to the Recovery Console?

[JSntgRvr]

Hi, kkel

Welcome.

Would you be able to create a file in another computer and copy that file to the sick computer? How about booting to the Recovery Console?

[kkel]

how do I do that? I don't believe I have a recovery console on my computer? What would I download onto the stick, I have one. I don't want to risk infecting my home computer, we just got it fixed.

I've been trying to get to task manager to disable the virus so I can install maleware, but every which way I turn I have no luck.

[JSntgRvr]

Hi, kkel

Since you believe the issue is due to Police Pro, we can prepare a file you can transfer to the sick computer, then run it throughout the Recovery console. That file will contain a list of the files and folders detected as part of Police Pro. If these files and folders are removed, you may have a chance to run Anti malware programs to remove the rest. Unless you have an XP installation CD, you will need also to burn a CD with the Recovery Console.

• Copy the entire contents of the Quote Box below to Notepad.
• Name the file as fix.txt
• Change the Save as Type to All Files
• and Save it on the desktop
• Once saved, transfer that file to the sick computer. Save that file in the C:\ folder of that computer. When saved should read as C:\fix.txt.

Disable AntiPol
Del "c:\Program Files\Windows Police Pro\ANTI_files.exe"
Del "c:\Program Files\Windows Police Pro\msvcm80.dll"
Del "c:\Program Files\Windows Police Pro\svcm80.dll"
Del "c:\Program Files\Windows Police Pro\msvcp80.dll"
Del "c:\Program Files\Windows Police Pro\msvcr80.dll"
Del "c:\Program Files\Windows Police Pro\windows Police Pro.exe"
Del "c:\Program Files\Windows Police Pro\tmp\dbsinit.exe"
Del "c:\Program Files\Windows Police Pro\tmp\wispex.html"
Del "c:\Program Files\Windows Police Pro\tmp\images\i1.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\i2.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\i3.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\j1.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\j2.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\j3.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\jj1.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\jj2.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\jj3.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\l1.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\l2.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\l3.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\pix.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\t1.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\t2.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\up1.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\up2.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\w11.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\w2.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\w3.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\w3.jpg"
Del "c:\Program Files\Windows Police Pro\tmp\images\wt1.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\wt2.gif"
Del "c:\Program Files\Windows Police Pro\tmp\images\wt3.gif"
RD "c:\Program Files\Windows Police Pro\tmp\images"
RD "c:\Program Files\Windows Police Pro\tmp"
RD "c:\Program Files\Windows Police Pro"
Del "c:\Windows\svchast.exe"
Del "c:\Windows\svchasts.exe"
Del "c:\WINDOWS\wf3.dat"
Del "c:\WINDOWS\wf4.dat"
Del "c:\WINDOWS\system32\minix32.exe"
Del "c:\WINDOWS\system32\dddesot.dll"
Del "c:\WINDOWS\system32\nuar.old"
Del "c:\WINDOWS\system32\plugie.dll"
Del "c:\WINDOWS\system32\pump.exe"
Del "c:\WINDOWS\system32\skynet.dat "
Exit

Unless you have a Windows XP Installation CD, you will need to burn a CD with the Recovery Console as follows:

• Please download BurnAtOnce and save it to your desktop. Click on Downloads, then on burnatonce 0.99.5
  
  • Install it by double-clicking on the file bao0995.exe that you downloaded.
  • Click Next, accept the license agreement, and click Next until the button says "Install". Click "Install" to finish.
• Download the rc.iso file.
• Save it to your desktop.
• Put a blank CD in your computer’s burner.
• Right-click on the file rc.iso, and select "burnatonce" from the menu.
• Confirm that the box under the menu at the top says "rc.iso".
• Click the "Write" button.
• When the disk finishes, eject the CD.
• Configure the sick computer to start from the CD-ROM or DVD-ROM drive. For information about how to do this, see your computer documentation, or contact your computer manufacturer.
• Insert the Image of rc.iso that you copied to the CD into the CD-ROM or DVD-ROM drive of the sick computer, and then restart it.
• When you receive the "Press any key to boot from CD" message, press a key to start your computer from the CD.
• You will be prompted with the following options:
  

  A. To setup Windows XP, press Enter.
  B. To repair Windows XP installation using recovery console, press R.
  
  Choose the option, "To repair the Windows XP installation using recovery console", press R. If an Administrator Password have been established, you will be prompted to type it in. If no Administrator Password exists, just press ENTER.

• You will be presented with the following:
  
  
  

  Microsoft Windows® Recovery Console
  
  The Recovery Console provides system repair and recovery functionality.
  Type EXIT to quit the Recovery Console and restart the computer.
  
  1: C:\WINDOWS
  
  Which Windows Installation would you like to log onto
  (To cancel, press ENTER)?

• Press the number 1 on your keyboard and hit Enter.
  
• At the command prompt, type the following command and press Enter:
  
  Batch C:\fix.txt

That should run the file you created and saved in the C:\ folder and the computer will restart. This time around, let it restart to Windows.

If successful, Please download Malwarebytes' Anti-Malware from Here.

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.

[kkel]

stupid question but the first part should be saved on my good computer right?

[JSntgRvr]

stupid question but the first part should be saved on my good computer right?

Either there or a Flash (Pen) drive. In any event, it should be transferred to the sick computer's root folder, such as C:\. It is a text file and will not harm your computer.

[kkel]

Sorry, i had to find my XP disk. I saved the fix file to a memory stick, but when I get to the recovery console and type

Batch C:\fix.txt

it cannot find the file.

[kkel]

The memory stick is in the e drive if that helps.

thank you

[JSntgRvr]

Hey.

I thought you got lost.

There is a new program that can help you. Download and run Rouge Kill from any of the following links:

Rkill.exe

Rkill.com

Rkill.scr

Rkill.pif

If the .exe wont help, try the .com, if not the .scr and so forth.

In the event the program runs,

Please save this file to your desktop. Double-click on it to run a scan. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please open it with notepad and post the contents here. Please allow enough time for this application to complete the scan.

[kkel]

my laptop isn't letting me online for any period of time. I can't connect my laptop and pc, so how will I run this?

[JSntgRvr]

Lets say you download the rkill.exe and save it to your stick, which is the E:\ drive. Insert the stick into the sick computer and get to a command prompt (Start->Run, type CMD and click OK). At the prompt type the following commands and press Enter after each line:

Copy E:\rkill.exe
rkill.exe

If the application runs, type exit to return to Windows. Restart, download the Win32kdiag.exe as reqested and run the application in Normal Windows.

[kkel]

Ok, i downloaded and ran rkill.exe from the stick, restarted. When I tried to run Win32kdiag.exe, my laptop was blocked.

[JSntgRvr]

Ok, i downloaded and ran rkill.exe from the stick, restarted. When I tried to run Win32kdiag.exe, my laptop was blocked.

Did you copy the file into the computer, then ran it from within the computer? You cannot run the application from the stick.

Download the enclosed folder. [attachment=35344:Junction.zip]Save and extract its contents to the desktop. It is a folder containing a Batch file, RunMe.bat . Once extracted, open the folder and double click on the RunMe.bat file and post the resulting report.

[JSntgRvr]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member with address of this thread. This applies only to the original topic starter. Everyone else please begin a New Topic.