{"id":3972,"date":"2021-11-06T12:47:43","date_gmt":"2021-11-06T12:47:43","guid":{"rendered":"https:\/\/lgildv5i97.onrocket.site\/answers\/?post_type=question&#038;p=3972"},"modified":"2021-11-06T12:48:01","modified_gmt":"2021-11-06T12:48:01","slug":"virus-stopping-software-from-installing-or-running-solution","status":"publish","type":"question","link":"https:\/\/computing.net\/answers\/security\/virus-stopping-software-from-installing-or-running-solution\/40553.html","title":{"rendered":"Virus Stopping Software From Installing Or Running Solution"},"content":{"rendered":"<p>&lt;td&gt;You need to run the beta Marlwarebytes mbar.exe root kit file&#8230; link listed below.&lt;p&gt;Some of the virus \/ trojan horse files are cte, netutils2016 c:\\windows\\system32\\tprdpw64.exe, new folder called ntuserlitelist with two unwanted executables datatupexe and svcmx.exe, X38DP934Y.exe, winvmx client and vmxclient.exe&lt;\/p&gt;&lt;p&gt;There is only 1 fix to this problem. Everywhere you search online, you will read instructions about booting to safe mode then&#8230; or uninstall reinstall&#8230;&lt;\/p&gt;&lt;p&gt;No. Most computer savvy ppl locate the executable files that are not suppose to be in their pc but can&#8217;t figure out why they can&#8217;t remove them, why anti-virus software won&#8217;t delete them or even run and why they their pc is blocked from even downloading any form of anti-virus software.&lt;\/p&gt;&lt;p&gt;Here is the problem and the fix:&lt;\/p&gt;&lt;p&gt;Problem is not the executables. Problem is two .zip files in the system32\/temp\/ folder and if you notice, you are blocked from deleting these files even if you manage somehow to delete the executables.&lt;\/p&gt;&lt;p&gt;If you still have any anti-virus software on you pc it sometimes catches the executables but because most ppl don&#8217;t know to make sure their software is set to check archive files and zip files are in that category, the system32\/temp\/ zip files are still there.&lt;\/p&gt;&lt;p&gt;So here is lies the problem: everytime you restart your pc, these zips files are going to activate and the problem starts all over again.&lt;\/p&gt;&lt;p&gt;The fix, to my surprise, after talking to Microsoft, AVG, Macffee, Norton, Avast and other smaller companies actually comes from Malwarebytes.&lt;\/p&gt;&lt;p&gt;Its a rootkit update mbar.exe that gets rid of these zip files:&lt;\/p&gt;&lt;p&gt;&lt;a href=&#8221;https:\/\/web.archive.org\/web\/20171204202831\/https:\/\/forums.malwarebytes.com\/topic\/198907-requested-resource-is-in-use-error-unable-to-start-malwarebytes\/&#8221; target=&#8221;_blank&#8221; rel=&#8221;nofollow&#8221;&gt;https:\/\/forums.malwarebytes.com\/top&#8230;&lt;\/a&gt;&lt;\/p&gt;&lt;p&gt;Took me a week to get this resovled after almost deciding to whack my hard-drive. Go ahead and run CCleaner and install some anti-virus software when you are done.&lt;\/p&gt;&lt;p&gt;I made sure it was all gone and it was.. Thank you Malwarebytes!&lt;br&gt;&lt;\/p&gt;&lt;\/td&gt;<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"iawp_total_views":5},"question-category":[56],"question_tags":[],"class_list":["post-3972","question","type-question","status-publish","hentry","question-category-security"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/question\/3972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/question"}],"about":[{"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/types\/question"}],"author":[{"embeddable":true,"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/comments?post=3972"}],"wp:attachment":[{"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/media?parent=3972"}],"wp:term":[{"taxonomy":"question-category","embeddable":true,"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/question-category?post=3972"},{"taxonomy":"question_tags","embeddable":true,"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/question_tags?post=3972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}