- Sep 13, 2013
- 19
- 0
- 10,510
I'm having trouble with possible malware on my pc. I get TONS of "suspicious.cloud.7.ep" messages from norton. When I view the details it gives me a file location in the folder "Users\Scott\appdata\Local\AHworks
I have googled the problem, and everyone that has the problem has a different folder instead of Ahworks. The folder contains files that cant be deleted as it's always open in another program. I also have a suspect folder which does the same thing also in my local appdata named Ihsoft.
To try and get rid of any malware I stopped all unnecessary processes in task manager. Deleted all the files I could in the folders. Then deleted any registry references in a "Run" folder located in the hkey current users part then "software/microsoft/ windows/current version/run, as per someones instructions on youtube. I still had the suspect folders and files around so i used norton power eraser to delete them. This worked, however I then got a security threat in norton, so I navigated to the folder which had an .exe file and some other files. I have come across these files from other security threats however they are always in different locations. When I try to delete them it wont let me as its "still open in mozilla firefox". Would this be responsible for navigating me to dodgy websites when clicking on ANY link, even when I know its a safe one? Anyway I fear this malware that's always in different locations is spread through my computer and is self replicating the files i deleted with the power eraser.
Does anyone know how I can remmove the malware? Or is this a case of reinstall windows?
Apologies for the novel, and thank you heaps in advance, any help at all would be much appreciated
Cheers Scott
Edit I just went into the folder that came up with another security risk to see if there were any new files in there from what i deleted earlier and there was so I tried deleting them and i got a message saying it couldnt be deleted as it was still open in a program. The program had a name which appeared to be half russian, which I have never seen let alone downloaded in my life.
I have googled the problem, and everyone that has the problem has a different folder instead of Ahworks. The folder contains files that cant be deleted as it's always open in another program. I also have a suspect folder which does the same thing also in my local appdata named Ihsoft.
To try and get rid of any malware I stopped all unnecessary processes in task manager. Deleted all the files I could in the folders. Then deleted any registry references in a "Run" folder located in the hkey current users part then "software/microsoft/ windows/current version/run, as per someones instructions on youtube. I still had the suspect folders and files around so i used norton power eraser to delete them. This worked, however I then got a security threat in norton, so I navigated to the folder which had an .exe file and some other files. I have come across these files from other security threats however they are always in different locations. When I try to delete them it wont let me as its "still open in mozilla firefox". Would this be responsible for navigating me to dodgy websites when clicking on ANY link, even when I know its a safe one? Anyway I fear this malware that's always in different locations is spread through my computer and is self replicating the files i deleted with the power eraser.
Does anyone know how I can remmove the malware? Or is this a case of reinstall windows?
Apologies for the novel, and thank you heaps in advance, any help at all would be much appreciated
Cheers Scott
Edit I just went into the folder that came up with another security risk to see if there were any new files in there from what i deleted earlier and there was so I tried deleting them and i got a message saying it couldnt be deleted as it was still open in a program. The program had a name which appeared to be half russian, which I have never seen let alone downloaded in my life.
Facebook
Twitter
Instagram