6 replies to this topic

[noir07]

hi everyone, i started getting notifications saying that my copy of windows 7 was not genuine. i ran malwarebytes and it picked up a Hacktool.Wpakill infection, log is below:

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.05.07.05

Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16443
User :: USER-PC [administrator]

8/5/2012 12:29:38 AM
mbam-log-2012-05-08 (01-45-08).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 410757
Time elapsed: 1 hour(s), 13 minute(s), 38 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\User\Downloads\Win 7 activation RemoveWAT.exe (HackTool.Wpakill) -> No action taken.

(end)

message seems to have gone however internet has been running slower than useual, any ideas on what this virus is? thanks

[MrCharlie]

Welcome to the forum.

Here's what it is:
http://www.microsoft...win32%2Fwpakill

Do you have the Windows 7 dvd and COA?

What brand computer is this?

MrC

[noir07]

its an Asus K43s, i dont have the windows7 dvd it came installed on the laptop when i purchased it, i have the coa though

[MrCharlie]

You probably have a restore partition on that laptop.

Run MB again and have it deleted.

MrC

[noir07]

ok so just ran MB it didnt pick anything up:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.05.07.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16443
User :: USER-PC [administrator]

8/5/2012 4:12:23 PM
mbam-log-2012-05-08 (16-12-23).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 406876
Time elapsed: 39 minute(s), 46 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)


you think my laptop will be ok now? thanks for the help by the way

[MrCharlie]

Yes, it should be OK....MrC

[Maurice Naggar]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!