All of a sudden a couple of weeks ago I was infected with this virus & I didn't know until recently when I would click on a website it would redirect me to some ad or a completely different web page . I was told to download Avg so I did which was pointless because all it did was tell me about all the viruses I had & delete them but once I ran it again they got "erased" again . Avg didn't erase my main virus all it said was object name: c:\Windows\System32\services.exe . & it said threat cannot be removed the infected system file cannot be cleaned because the original file was deleted and replaced by a malware file . Please follow these instructions to manually restore the original system file & remove the threat . I did all it said Whixh was to restore and download a cd , didn't work . I have Malwarebytes Anti-Malware so I ran that Whixh keeper saying it qurantied it but it still didn't go away the virus was still there . Next day I tried to run the Anti-Malware again & it didn't work it wpuld say things like D:\Helpthiscomp\mbam.exe the specified path does not exist . Check the path , & then try again . wouldn't even let me open it or restore my computer or anything at all . The problem is only getting worse . Please help .
(Solved) - Trojan horse Parched_c.MIS Object name: c:\Windows\System32\services.exe(8 posts)
The machine needs to be Clean Installed from the Media Partition OR Clean Installed from a Full Installation DVD.
Best to seek local help if you have never done this before or don't understand what I mean.
I would try to run a System Restore from the "System Recovery Options" screen. Follow this tutorial to get that screen:
There, at the point where you open the Command Prompt, you can try to run a System Restore. Make sure you download an appropriate Windows 7 version (32-bit or 64-bit, the same you already have).
But as others say, probably it is much better to reinstall Windows 7 from your recovery partition or from a DVD with one of those official ISO mentioned in that tutorial.
This topic has been closed to new replies.