Few weeks ago, I just browse my System32 and I find that mouse thing (wisp.exe) something like that by Microsoft NT. I clicked on it just to try, and maybe the program can cofig my mouse. After that my cursor stopped working, just stays there. I did not know until 2 days after, it was a virus. Most of the program says, please check for virus and re-install the program. And sometimes if I try to create exes and it will simply stop working. Please Help.
When you poke around in System32 without knowing what you're doing, it's like peeing on the electric fence.. lol wisp.exe is a Backdoor-Trojan! Try running MalwareBytes AntiMalware and SUPERAntiSpyware to see if that will remove it. Run MalwareBytes’ Anti-malware Download Malwarebytes' Anti-Malware to your desktop. Double-click mbam-setup.exe and follow the prompts to install the program. • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. • If an update is found, it will download and install the latest version. • Once the program has loaded, select Perform full scan, then click Scan. • When the scan is complete, click OK, then Show Results to view the results. • Make sure that everything is checked, and click Remove Selected. <-- Don't forget this. • When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt Run SUPERAntispyware Download SUPERAntispyware Free Edition (SAS) • Double-click the icon on your desktop to run the installer. • When asked to Update the program definitions, click Yes • If you encounter any problems while downloading the updates, manually download and unzip them from HERE. • Next click the Preferences button. • Click the Scanning Control tab. • Under Scanner Options make sure only the following are checked: o Close browsers before scanning o Scan for tracking cookies o Terminate memory threats before quarantining o Please leave the others unchecked. • Click the Close button to leave the control center screen. • On the main screen click Scan your computer • On the left check the box for the drive you are scanning. • On the right choose Perform Complete Scan • Click Next to start the scan. Please be patient while it scans your computer. • After the scan is complete a summary box will appear. Click OK • Make sure everything in the white box has a check next to it, then click Next • It will quarantine what it found and if it asks if you want to reboot, click Yes • To retrieve the removal information please do the following: o After reboot, double-click the SUPERAntiSpyware icon on your desktop. o Click Preferences. Click the Statistics/Logs tab. o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log. o It will open in your default text editor (preferably Notepad). o Save the notepad file to your desktop by clicking (in notepad) File > Save As... • Click close and close again to exit the program. • Please copy and then paste this log and the log from MBAM in your next post. 2oG
