Virus not removed

[delgadob]

Hello,

Every time I start my Windows XP computer a virus kicks in opening different pages such as Help_DECRYPT.

Is there anything I could do to get rid of this virus?

I just purchased and installed Sypbot Pro and ran it, but does not seem to be able to catch it.

Thanks for info.

[tashi]

Hello delgadob, :welcome:




Every time I start my Windows XP computer a virus kicks in opening different pages such as Help_DECRYPT.


The computer may be infected by CryptoWall which is a file-encrypting ransomware program.

Windows XP hasn't been supported by Microsoft since April 8th, 2014 so the operating system is very vulnerable.
XP: Microsoft Countdown (http://forums.spybot.info/showthread.php?70051-XP-Microsoft-Countdown)

Did you have any security software installed before the computer was infected? :)

Best regards.

[delgadob]

Hello,
I just purchase Spybot Professional Edition.

Ran it on two different days.

The virus for which I purchased it is not being removed. Its name is CryptoWall 3.0

Is there a way to remove it from my Windows XP computer?

Thanks for info.

Bert

[tashi]

Hello delgadob,

Please respond to my post please, then I will direct you to the malware forum FAQ so a volunteer analyst can take a look at the system. :)


Hello delgadob, :welcome:


The computer may be infected by CryptoWall which is a file-encrypting ransomware program.

Windows XP hasn't been supported by Microsoft since April 8th, 2014 so the operating system is very vulnerable.
XP: Microsoft Countdown (http://forums.spybot.info/showthread.php?70051-XP-Microsoft-Countdown)

Did you have any security software installed before the computer was infected? :)

Best regards.

[delgadob]

I do not believe that the computer had any malware prevention.


Hello delgadob,

Please respond to my post please, then I will direct you to the malware forum FAQ so a volunteer analyst can take a look at the system. :)

[tashi]

Hello delgadob,


I do not believe that the computer had any malware prevention.

Unfortunately, add that in addition to an unsupported legacy operating system no longer patched against vulnerabilities and by the time any security program was installed the horse had already left the barn. :sad:



The virus for which I purchased it is not being removed. Its name is CryptoWall 3.0


CryptoWall 3.0 is ransomeware: http://www.pcworld.com/article/2868972/cryptowall-ransomware-is-back-with-new-version-after-two-months-of-silence.html

Please start a topic in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) and a volunteer analyst will advise. :)

First see that forum's FAQ which also includes instructions in post #2 on how to provide the logs from Farbar Recovery Scan Tool and aswMBR, which are the logs used in the preliminary analysis.

http://forums.spybot.info/showthread.php?t=288

Best regards.

[tashi]

Hello delgadob,

Your log has been split off to a new topic in the malware forum.

http://forums.spybot.info/showthread.php?72314-CryptoWall-3-0&p=463826&viewfull=1#post463826

Best regards.