Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

Unable to remove a virus for system files

  • 28-08-2010 12:17PM
    #1
    freethepenguins
    Registered Users, Registered Users 2 Posts: 88 ✭✭


    Hey,

    I have a virus on my laptop for the last couple of days and I have been unable to get rid of it. I have Avira anti-virus and when I do a system scan it locates ti but can't remove it. File path is as follows;

    C:\WINDOWS\system32\drivers and the file name is wrukl.sys

    Any help with this would be great :-))


Comments

  • #2
    bhickey
    Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    Try Malwarebytes if you haven't already.


  • #3
    tricky D
    Closed Accounts Posts: 9,698 ✭✭✭tricky D


    Read the "I think I have a virus" - Please Read & Try BEFORE Posting (Updated 12/02/2010) sticky and carry out as many of the instructions in that thread, then post the relevant logs here. Someone (probably ASJ112) will be along to help but only once you do those tasks.


  • #4
    Podman
    Registered Users, Registered Users 2 Posts: 887 ✭✭✭Podman


    the AVG free antivirus is very good too

    get them from download.cnet


  • #5
    freethepenguins
    Registered Users, Registered Users 2 Posts: 88 ✭✭freethepenguins


    Podman wrote: »
    the AVG free antivirus is very good too

    get them from download.cnet

    I have the full version of Avira which I think is a better all round package

    I have already tried malwarebytes bhickey


  • #6
    Podman
    Registered Users, Registered Users 2 Posts: 887 ✭✭✭Podman


    freethepenguins wrote: »
    I have the full version of Avira which I think is a better all round package
    ...
    Avira is a good program but it's obviously not working with this particular virus.

    Have you ever tried avg?


  • Advertisement
  • #7
    ASJ112
    Site Banned Posts: 1,167 ✭✭✭ASJ112


    post the mbam log


  • #8
    jpl888
    Closed Accounts Posts: 407 ✭✭jpl888


    freethepenguins wrote: »
    Hey,

    I have a virus on my laptop for the last couple of days and I have been unable to get rid of it. I have Avira anti-virus and when I do a system scan it locates ti but can't remove it. File path is as follows;

    C:\WINDOWS\system32\drivers and the file name is wrukl.sys

    Any help with this would be great :-))

    Bear in mind that you can't be 100% sure you've been disinfected by any of the anti-virus/anti-malware tools even if Windows isn't displaying symptoms any more.

    In your situation a reformat and reinstall is the only sure fire way.

    In future if you install a snapshot tool like Comodo Time Machine you will be able to roll back to an earlier time to get rid of any infection. No need for anti-virus/anti-malware then.


  • #9
    Kristopherus
    Registered Users, Registered Users 2 Posts: 11,902 ✭✭✭✭Kristopherus


    Try Mcrosoft Security Essentials. Free to download from Microsoft and up to date at all times.


  • #10
    lazlo
    Banned (with Prison Access) Posts: 541 ✭✭✭lazlo


    Install Malware Bytes, reboot your system and boot into safe mode and then run a full scan. Kills 99.9999% of all known viruses ;)


  • #11
    jpl888
    Closed Accounts Posts: 407 ✭✭jpl888


    lazlo wrote: »
    Install Malware Bytes, reboot your system and boot into safe mode and then run a full scan. Kills 99.9999% of all known viruses ;)

    Actually as ASJ will probably be at pains to point out, running MBAM when in safe mode reduces it's effectiveness because some of the detection drivers aren't loaded.

    Although in some circumstances it may be desirable to run it in safe mode. Certainly no harm anyway.


  • Advertisement
  • #12
    lazlo
    Banned (with Prison Access) Posts: 541 ✭✭✭lazlo


    jpl888 wrote: »
    Actually as ASJ will probably be at pains to point out, running MBAM when in safe mode reduces it's effectiveness because some of the detection drivers aren't loaded.

    Although in some circumstances it may be desirable to run it in safe mode. Certainly no harm anyway.

    Point taken-I've encountered a few issues that replicate once they are removed in normal mode. They can only be expunged when safe mode is enabled. I guess the procedure should be run MBAM, if it detects and deletes a problem that almost immediately recurs then follow up with a scan in safe mode


  • #13
    jpl888
    Closed Accounts Posts: 407 ✭✭jpl888


    lazlo wrote: »
    Point taken-I've encountered a few issues that replicate once they are removed in normal mode. They can only be expunged when safe mode is enabled. I guess the procedure should be run MBAM, if it detects and deletes a problem that almost immediately recurs then follow up with a scan in safe mode

    Yes I would agree with that although you can never be totally sure you are clean unless you reinstall.


Advertisement
Advertisement