After a total 3 visits to best buy, this virus still hasn't been removed... It looks like they used atleast 4 different programs to remove it, but it still remains on my laptop. Heres what is says on the scan, copied any pasted: c:$mbr.1 Win32.Autolock.1
After it "removes" the virus and restarts the virus is still there after another scan... The malware also shows up on Windows task manager
crss.exe
winlogon.exe
atieclxx.exe
The processes don't have a user name and no description
When I try to end them it says Access Denied even though I'm on the Administrative profile, the only profile on my laptop.
Webroot finds the threat, but doesn't remove it, help
Solved
Webroot won't remove malware
Best answer by Kit
For the elucidation of other folks who may end up reading this...
Anytime that a threat shows up that is not able to be removed, or keeps coming back, please contact our support team for us to help you directly and for free.
That being said, the proceses mentioned in the message are not normally malicious processes. csrss, winlogon, and others are system processes that form the foundation of the computer. If you are a power user and are unsure about the status of a process, you can go into SecureAnywhere, click System Tools on the left, and then click Start under Control Active Processes.
BE VERY CAREFUL on this screen!!
Anything that is marked as allow is something that we, Webroot, have determined is safe. You should generally avoid changing anything at all, as doing so improperly can cause a catastrophic system failure. (It's kind of like saying you should be careful where you swing that hammer, because you can damage walls or dishes or stuff. This is not obviously a hammer, but it has the same capability to cause damage if you do the wrong things with it.)
Anything that is marked as "Monitor" is just something that we may not know about yet, or your computer has not yet found out that we know about it. SecureAnywhere is watching it closely, just in case it does something bad. Anything that is marked as "Block" will be blocked from operating. Blocking the wrong things can crash the system and make it no longer work, so be cautious.
But, once again, anytime you are unsure, simply contact our support for free and we'll take a look at it for you. We can't always take the time to explain why something is OK, but we can see its soul, so to speak, so we can tell if it's really good or not.
View originalAnytime that a threat shows up that is not able to be removed, or keeps coming back, please contact our support team for us to help you directly and for free.
That being said, the proceses mentioned in the message are not normally malicious processes. csrss, winlogon, and others are system processes that form the foundation of the computer. If you are a power user and are unsure about the status of a process, you can go into SecureAnywhere, click System Tools on the left, and then click Start under Control Active Processes.
BE VERY CAREFUL on this screen!!
Anything that is marked as allow is something that we, Webroot, have determined is safe. You should generally avoid changing anything at all, as doing so improperly can cause a catastrophic system failure. (It's kind of like saying you should be careful where you swing that hammer, because you can damage walls or dishes or stuff. This is not obviously a hammer, but it has the same capability to cause damage if you do the wrong things with it.)
Anything that is marked as "Monitor" is just something that we may not know about yet, or your computer has not yet found out that we know about it. SecureAnywhere is watching it closely, just in case it does something bad. Anything that is marked as "Block" will be blocked from operating. Blocking the wrong things can crash the system and make it no longer work, so be cautious.
But, once again, anytime you are unsure, simply contact our support for free and we'll take a look at it for you. We can't always take the time to explain why something is OK, but we can see its soul, so to speak, so we can tell if it's really good or not.
Reply
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.