Virus on Windows- HELP

[KCSunshine]

Hi there, first post and it is not a good one!

I am running a new mac mini with Parallels and windows 7 home premium

I mistakenly clicked on a rogue email this morning while I was on safari in the mac part of the computer. It said it was a fax to email which I get quite a few of, but of course not from this source and as I was trying to multitask at the time and not paying full attention it all went wrong!

When I open the windows partition this happens (this link is safe)

http://trojan-killer.com/avasoft-professional-antivirus-guide-remove/


Another moment of not paying attention and this is what happens, at least I realised I had not loaded the anti virus in the first place so knew it was a scam


I tried to follow the video on how to remove the virus but it did not work for me, instead of "success" you have stopped the programme running, now download the anti malware prog, it says it cannot find the path? have triple checked my spelling and it is as it should be
The virus will not let me open internet explorer so stuffed at the moment

Have shut the computer fully down for now while I try to find some answers

Wonder if removing windows would work or would the virus resurrect itself when I reload windows??

How easy is it to remove windows, luckily i only use the windows part for a couple of small programmes for remotely accessing phone systems and viewing my Sage accounts software (main Sage programme is luckily on another windows machine so does not matter if it is all wiped), so there is not much on the windows part of the Mac

Please help stressing badly at the moment

KC

 

[Parallels User]

You are stressing badly, but you are not making much sense. Opening a Windows virus on OS X doesn't infect the Windows VM. I'm not clicking on the link, you'll have to explain what happened to the Windows VM, what symptoms does it have.

The virus is not able to jump from OS X to Windows and vice-versa, unless you place teh virus file inside the VM yourself.

 

[KCSunshine]

You are stressing badly, but you are not making much sense. Opening a Windows virus on OS X doesn't infect the Windows VM. I'm not clicking on the link, you'll have to explain what happened to the Windows VM, what symptoms does it have.

The virus is not able to jump from OS X to Windows and vice-versa, unless you place teh virus file inside the VM yourself.

Hi Specimen
thanks for replying promptly, but I think you are mistaken

What I actually did was
open my mac
open safari
open my webmail
in my emails was one titled "fax to email" as I havea cloud based fax to email service and because i was glancing through things I opened the email
as usual there was an attachment to the email which I downloaded to the "downloads" section of my mac, when it had completed the download I double clicked it as usual expecting a fax to open
WRONG
nothing happened for about a minute and then a pop up appeared in the parallels part saying that a new antivirus programme had found problems with my computer and i needed to do a scan
I THEN PANICED
I opened windows and this pop up kept coming up

AVA anti virus has found a problem scanning your drive , click to resolve this issue etc

I DID NOT DO THIS as I do not have an anti virus software on the windows section so knew it was a scam

I googled the problem and that is where I found all the details of this trojan virus

Trojan Killer.com is a "known" good website and I then followed the directions given to remove the virus

This did not work
I therefore am considering removing and reinstalling the Windows programme,
however
I do not know how to remove windows from my mac (I am a mac newbie)
will the virus return if I reload windows

Is the virus also on the mac bit?

I also have a time machine connected (do not know how it works though - sorry)

Could I go back in time with that or would the virus still be there


You cannot use the windows part of the computer now as the antivirus "pop up" keeps reappearing on the windows desktop and preventing you from opening anything until you click on the pop up - which I do not want to do
The mac part does appear to be working OK though

Thanks in advance for any input

KC

 

[Parallels User]

You must still have malware file on the downloads folder, what is the extension? .exe? I guess you have application sharing turned on in Parallels which made the Parallels Windows machine fire up to open the said fiel, and thus installing it on the Windows side. Just guessing.

You say the procedure the site gave doesn't work, maybe you should google for avasoft and find another site that has a better removal procedure?

You should delete the file from the downloads folder in your mac. If you delete the Windows VM (from the virtual machine list, right-click, remove, delete all files, empty trash), teh virus will also be gone with it. But you should try to remove it first.

 

[Parallels User]

I saw teh video, and you say it can't find the path, you really have to double check the name you gave to taskkill, in the video it names it iexplore which might be easily confused with iexploreR.. double check that.

Also, you can download the trojan killer installer from the mac side and open it on the Windows side just like you did with the virus. Or you can drag and drop the file on the windows side.

 

[KCSunshine]

Hi Speciman
Thanks for your help so far

I checked and double checked all the spellings and they seem to be OK
here is a screenshot of what the cmd came up with


Any other suggestions gratefully received

kc

 

[KCSunshine]

I have also now downloaded the cleanup programme and managed to copy it across to the windows desktop as soon as I try to open it Ava software blocks it



Don't know what else to do now

KC

 

[Parallels User]

Can't help you, this is a Windows virus problems, I can't help you correctly apply instructions that aren't related to Parallels, I never tried these instructions myself, you should contact who made them. Or you should try a anti-virus specific forum. All I can say is what I said before, that you can delete the VM and create a new one. You can also copy your files from this VM before deleting it (they don't carry the virus).