download unhide.exe and TDssKiller
Run  TDSSKiller and it will locate your infection. It will ask you to remoev the infection ans simply say yes.  IF all goes well and your PC is clean, it will ask to reboot your windows 7. Please do so.

It will most likely find: TrojanDownloader.OpenStream.NBF trojan

If this does not work for you, download the latest malwarebytes and update and scan.

• %APPDATA%\services.exe

• %TEMP%\e3c1c08557a0d0feee33b9c9d18b4e6c129b553f.exe

This Trojan will attempt to fiddle with your network conection, e.g hxxp://www.maxmind.com/app/***

How to remove Generic BackDoor!djf!5D41C80E​A0DA

Removal should be easy given the fact that you are able to follow directions

First thing to do is disconnect your network or internet. Now you will need to reboot your PC and enter safe mode, if you do not know how to enter safe mode, please search above for ” how to enter safe mode”

Now you will need to do a system scan using these apps below:

1. your favorite virus app, i suggest AVG or Microsoft security essentials
2. do a system scan using Malwarebytes
3. do a system scan using spybot
4. do a system scan using hijackthis

if the virus  is not letting you do these scans, you must :

1.Disable System Restore on Windows ME and windows XP only.
2.Update to current engine and DAT files for detection and removal.
3.Run a complete system scan.

This should remove the threat, this threat is a low security threat but never the less it should always be cleaned before using the world wide web.

go to start menu, then run, now type in MSCONFIG, go to startup tab and look for a long string of command that has random letters and sometimes numbers, disable that line and save.

Download Malwarebytes, update malwarebytes then do a full system scan. if any virus is found, it will delete it.

Now download spybot, do an update and a full scan, delete any melware or spyware it finds.

You surly must have a virus protection software, if not, download Microsoft Security Essentials, its free, update the app then a full scan.

These steps above should fix and delete the Trojan.win32.Generic.pak!cobra.Engine virus

Here are other virus trojans that are smiler to the one above and can be cleaned the same way.

Trojan.Win32.Generic!BT: Trojan
Trojan-Spy.Win32.Zbot.gen: Trojan
Exploit.PDF-JS.Gen (v): Exploit
Trojan.Win32.Generic!SB.0: Trojan
INF.Autorun (v): Trojan
Trojan.Win32.Hiloti.gen.d (v): Trojan
Trojan.Win32.Generic.pak!cobra: Trojan
Trojan.Win32.Adware: Adware (General)
MyWebSearch Toolbar: Potentially Unwanted Program
Trojan.Win32.Malware: Trojan

What the Win32/Olmarik trojan does is it infects your PC by installing a nasty malware by falsified displaying security alerts and making the user install even more bugs. Once you click on  the alert, it will start downloading anti-spyware or anti-virus tools that are useless and will infect even more of  your file system structure and files in general. Take care of this trojan as soon as you can to prevent our PC from getting any worse.

HOW DOES IT Stuxnet really WORK?

The virus is a malicious software or malware attacks widely used industrial control systems built by the German firm Siemens. Experts say the virus could be used for espionage or sabotage.

Siemens said that the malware is spread via infected USB memory devices thumb drive, exploiting a vulnerability in Microsoft operating system Windows that has been resolved.

The attacks malware software running Supervisory Control and Data Acquisition, or SCADA, systems. These systems are used to control automated installations – plant chemicals to food and energy generators.

Analysts said the attackers may have chosen to spread malicious software by the way of a memory unit because many SCADA systems are not connected to the Internet, but do not have USB ports.

Once the worm infects a system, it quickly communicates with a remote server computer can be used to steal proprietary corporate data or take control of the SCADA system, said Randy Abrams, ESET investigator, a private security company Stuxnet been studied.

1.Disable System Restore windows XP only, Win 7 will not work.

2.Update to current engine and DAT files for detection and removal.

3.Run a complete system scan using AGG or Microsoft security or Kaspersky

Modifications made to the system Registry  files for the purposes of hooking system startup will be removed if cleaning with the recommended engine and DAT combination.

Update the definition and scan your computer, it will find any traces of Trojan.Zlob.P now delete and you should be good to go.

CoolWebSearch or short for CWS is a pretty harsh hijacker which attacks firefox or chrome and even internet explorer browsers. One thing to take note is that if this threat is not stopped, it will keep growing like a nasty virus as its knowing coolwebsearch keeps coming up with a newer threat every week. This Malware goes adn alters your homepage on your browser and or might redirect your homepage or any other website y ou visit to another website that might contain a virus or malware. The good news is, its pretty easy to remove this virus.

To remove this nasty browser hijacker malware, simply download Malwarebytes Anti Malware by clicking here and save it to your desktop. Run and install the free application. Now run Malwarebytes and make sure you update the program first before you scan your PC. Scan your PC now and it will remove CoolWebSearch.olehelp Malware and your PC will be save once again.

Stop the Fake Microsoft Security Essentials Alert Trojan processes below by pressing CTRL + Alt + Delete:

antispy.exe
defender.exe
tmp.exe
hotfix.exe

Remove these Fake Microsoft Security Essentials Alert Trojan Registry Entries:
Click start menu and type “regedit”

HKEY_CURRENT_USER\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = “0?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnPostRedirect” = “0?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “tmp”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “SelfdelNT”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\antispy.exe”
Remove these Fake Microsoft Security Essentials Alert Trojan files:
%UserProfile%\Application Data\PAV\
%UserProfile%\Application Data\antispy.exe
%UserProfile%\Application Data\defender.exe
%UserProfile%\Application Data\tmp.exe
%UserProfile%\Application Data\hotfix.exe
%UserProfile%\Local Settings\Temp\[random characters].bat

For Vista/7:
%UserProfile%\AppData\Local\antispy.exe
%UserProfile%\AppData\Local\defender.exe
%UserProfile%\AppData\Local\tmp.exe
%UserProfile%\AppData\Local\hotfix.exe

C:\END
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other Fake Microsoft Security Essentials Alert Trojan infected files and get help in Fake Microsoft Security Essentials Alert Trojan removal by using free Malwarebytes.