New virus "brastk.exe"

  • Thread starter Thread starter Klaas Meekel
  • Start date Start date
K

Klaas Meekel

I am getting a message from my antispyware software saying that "brastk.exe"
is on my PC. When I try to delete it, irt comes up with the message "Access
denied ..".
Is this a new virus?
How can I delete it?
 
Klaas Meekel said:
I am getting a message from my antispyware software saying that "brastk.exe"
is on my PC. When I try to delete it, irt comes up with the message "Access
denied ..".
Is this a new virus?
How can I delete it?
Click to expand...


Brastk.exe is Trojan/Backdoor process, you need to locate and remove it by
using killbox:
Download Killbox from here:
http://killbox.net/downloads/KillBox.exe
How to use Killbox:
http://metallica.geekstogo.com/killboxexplanation.html

Then Run a thorough scan by doing the following steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

If you wish to send me your Hijackthis log I will be happy to help you
further or send to one of many forums on the internet!
Download Hijackthis and send me the log.
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
my address is : to_you_ross(at remove this and repalce with the
obvious)yahoo.co.uk ( _ is underscore)

Run disk clean up on your Drive.
You can download this tool o run clean up:
http://www.ccleaner.com/download/builds/downloading-slim
HTH,
nass
 
I came across this site which provides a Brastk remover tool and also a tool
to remove the fake spyware which you may have downloaded from the fake MS
alert on the toolbar.
I cleaned my PC in about 5 mins after downloading it.

http://www.net-studio.org/

Good luck!

nass said:
Klaas Meekel said:
I am getting a message from my antispyware software saying that "brastk.exe"
is on my PC. When I try to delete it, irt comes up with the message "Access
denied ..".
Is this a new virus?
How can I delete it?
Click to expand...


Brastk.exe is Trojan/Backdoor process, you need to locate and remove it by
using killbox:
Download Killbox from here:
http://killbox.net/downloads/KillBox.exe
How to use Killbox:
http://metallica.geekstogo.com/killboxexplanation.html

Then Run a thorough scan by doing the following steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

If you wish to send me your Hijackthis log I will be happy to help you
further or send to one of many forums on the internet!
Download Hijackthis and send me the log.
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
my address is : to_you_ross(at remove this and repalce with the
obvious)yahoo.co.uk ( _ is underscore)

Run disk clean up on your Drive.
You can download this tool o run clean up:
http://www.ccleaner.com/download/builds/downloading-slim
HTH,
nass
Click to expand...
 
I tried a number of different ad and malware removal programs which failed to
pick this up.

The solution in the end was to run a tool called combofix.exe
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

However, brastk is smart enough to try and stop combofix from running when I
first tried (it also stopped my antivirus software and several other adware
removel tools), so after downloading it to the desktop, I had to rename it
before it would run.

Once it did run and finished rebooteding my PC, brastk.exe and the other
associated parts of the virus were gone.

Hope this solves your problem also - good luck!
 
Back
Top