Home All Groups Group Topic Archive Search About

brastk.exe - new virus? please help

Author
17 Oct 2008 3:30 PM
Klaas Meekel
When I start up, a message from my antispyware software (Spyware Doctor)
reads "Process guard detected hidden process C:\windows\brastk.exe runing on
your computor.  Would you like Spyware Doctor to delete it on next reboot?". 
In spite of pressing "Yes", the messaage keeps coming up.  I also keep
geeting a pop-up message saying "Windows has detected spyware infection! Your
computoris infected!!".  I have tried to delete brastk.exe but that gives a
message "Access denied".  Is this a new virus??  How can I delete brastk.exe??

Author
17 Oct 2008 4:37 PM
Malke
Klaas Meekel wrote:

> When I start up, a message from my antispyware software (Spyware Doctor)
> reads "Process guard detected hidden process C:\windows\brastk.exe runing
> on
> your computor.  Would you like Spyware Doctor to delete it on next
> reboot?".
> In spite of pressing "Yes", the messaage keeps coming up.  I also keep
> geeting a pop-up message saying "Windows has detected spyware infection!
> Your
> computoris infected!!".  I have tried to delete brastk.exe but that gives
> a
> message "Access denied".  Is this a new virus??  How can I delete
> brastk.exe??

The message isn't coming from Windows. Your system is infected with a rogue
antivirus program. It is called "rogue" because it pretends to be A Good
Guy but is really Evil. Do not pay them!

Because you didn't give me the name of the program that is trying to get you
to buy it, I can't point you to specific removal steps. Look for them here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html
Malwarebytes malware removal guides - http://tinyurl.com/5xrpft

If you are infected with XP Antivirus or Antivirus 2009/10, here are removal
steps:

http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009
http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions)

Removal instructions for Antivirus 2010:
http://www.malwarebytes.org/forums/index.php?showtopic=6703

Removal instructions for Antivirus 2009:
http://www.malwarebytes.org/forums/index.php?showtopic=5178

These may work for you and all may be well. However, in many cases the
computer will also be infected with Zlob and/or Vundo trojans and protected
by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the
specialty forums below OR back up your data and do a clean install of
Windows. It is your choice. If you are unsure how to back up your data or
how to do a clean install, you can take your machine to a local computer
professional. I don't recommend using BigComputerStore/GeekSquad types of
places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ
Author
17 Oct 2008 4:54 PM
David B.
http://www.google.com/search?q=brastk.exe&rls=com.microsoft:*&ie=UTF-8&oe=UTF-8&startIndex=&startPage=1

The Windows notice is a malware infection, download and run malwarebytes
from malwarebytes.org

--

----
Crosspost, do not multipost http://www.blakjak.demon.co.uk/mul_crss.htm
How to ask a question http://support.microsoft.com/kb/555375
Help Us Help You http://dts-l.net/goodpost.htm



Show quoteHide quote
"Klaas Meekel" <KlaasMee***@discussions.microsoft.com> wrote in message
news:1033BFB0-D823-4FD5-A87D-E85B8E2786C3@microsoft.com...
> When I start up, a message from my antispyware software (Spyware Doctor)
> reads "Process guard detected hidden process C:\windows\brastk.exe runing
> on
> your computor.  Would you like Spyware Doctor to delete it on next
> reboot?".
> In spite of pressing "Yes", the messaage keeps coming up.  I also keep
> geeting a pop-up message saying "Windows has detected spyware infection!
> Your
> computoris infected!!".  I have tried to delete brastk.exe but that gives
> a
> message "Access denied".  Is this a new virus??  How can I delete
> brastk.exe??