[hardus77]

Hello everyone,

 

I was foolish enough to do it and suddenly my avast antivirus started giving me numerous threat alerts and shortcuts on my desktops of ads started popping up out of nowhere so I put my laptop into airplane mode and restarted it and when I did avast wouldn't open and it consumed too many disk/cpu and it wouldn't close either so I went to system32 and found that a virus called perfstringbackup.tmp planted itself in the folder, I googled it and every website said it's a very dangerous virus that might harm my system beyond repair but none of them guided me through specific ways to delete it completely. I'm stuck, no antivirus is installing, I tried spyhunter, avg, reinstalling avast, and I gave unhack me a shot but it didn't get rid of the virus since my system is still buggy and laggy. I have no idea what to do, please help.

 

 

[Advertisements]

• Get FRST from http://www.bleepingc...very-scan-tool/You need to download the appropriate tool for your PC.  If you don't know if you have a 32 or 64 bit system get them both.  Only one will work and that's the right one.
• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Check the Addition.txt box
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.  
• Please copy and paste log back here.
• It will generate another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

 

 

This may be a wmi virus from what I've read so it may help to shutdown Windows Management Instrumentation service:  Search for

services.msc

hit Enter

Scroll down to Windows Management Instrumentation and right click and change the Startup Type: to Disabled.  Apply then STOP the service.  You will get a warning tell it to stop the service anyway.  If it won't stop Reboot. 

 

RogueKiller is supposed to be good at WMI viruses.

 

Rogue Killer

http://www.adlice.co...iller/#download
Choose the one that is right for your system:

Portable 32 bits
Portable 64 bits
If you don't know then try the installer:

Installer 32/64 bits
Download and Save.



Right click on the downloaded file (RogueKillerX64.exe or RogueKiller.exe)  and Run As admin

Start Scan
Start Scan

Will take about 20 minutes to complete.

Open Report
Export TXT (save it to your desktop as rk) Save

Do not let Rogue Killer remove anything until you hear from me.  Leave Rogue Killer up (but minimized) so you won't have to rescan.

Open rk.txt and copy and paste it to your next Reply.
 

[RKinner]

• Get FRST from http://www.bleepingc...very-scan-tool/You need to download the appropriate tool for your PC.  If you don't know if you have a 32 or 64 bit system get them both.  Only one will work and that's the right one.
• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Check the Addition.txt box
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.  
• Please copy and paste log back here.
• It will generate another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

 

 

This may be a wmi virus from what I've read so it may help to shutdown Windows Management Instrumentation service:  Search for

services.msc

hit Enter

Scroll down to Windows Management Instrumentation and right click and change the Startup Type: to Disabled.  Apply then STOP the service.  You will get a warning tell it to stop the service anyway.  If it won't stop Reboot. 

 

RogueKiller is supposed to be good at WMI viruses.

 

Rogue Killer

http://www.adlice.co...iller/#download
Choose the one that is right for your system:

Portable 32 bits
Portable 64 bits
If you don't know then try the installer:

Installer 32/64 bits
Download and Save.



Right click on the downloaded file (RogueKillerX64.exe or RogueKiller.exe)  and Run As admin

Start Scan
Start Scan

Will take about 20 minutes to complete.

Open Report
Export TXT (save it to your desktop as rk) Save

Do not let Rogue Killer remove anything until you hear from me.  Leave Rogue Killer up (but minimized) so you won't have to rescan.

Open rk.txt and copy and paste it to your next Reply.
 

[hardus77]

Hello everyone,

 

I was foolish enough to do it and suddenly my avast antivirus started giving me numerous threat alerts and shortcuts on my desktops of ads started popping up out of nowhere so I put my laptop into airplane mode and restarted it and when I did avast wouldn't open and it consumed too many disk/cpu and it wouldn't close either so I went to system32 and found that a virus called perfstringbackup.tmp planted itself in the folder, I googled it and every website said it's a very dangerous virus that might harm my system beyond repair but none of them guided me through specific ways to delete it completely. I'm stuck, no antivirus is installing, I tried spyhunter, avg, reinstalling avast, and I gave unhack me a shot but it didn't get rid of the virus since my system is still buggy and laggy. I have no idea what to do, please help. UC Browser SHAREit Appvn

 

 

 

Any Updates????

[RKinner]

Were you not able to run  FRST or Rogue Killer?