xp anti malware help needed.

worried_jim

I care for an elderly neighbour who uses his pc as a lifeline to the outside world. Today he has been sent/ installed/hacked with "xp anti malware" and I just cant get rid of it. I cant get online as every time I try to open a ie window it just give me the advert for the product and I can't get any further.
I've tried running mrt through the run window and that has found nothing. Does he need to get a specialist in ?
Any ideas appreciated. Jim.

Donnie

Start in Safe Mode with Networking and download, install, update and run a Quick Scan with; Malwarebytes' AntiMalware.

'Remove Selected', reboot in Normal Mode and then run a Full scan.

aliEnRIK

Reboot and keep pressing F8 to get into SAFE MODE WITH NETWORKING

If still no good then attempt to get IE running in its own safe mode ~
Go to Start > Run
Type iexplore -extoff
Press Enter

Once up and running ~
Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Post the COMPLETE log here AFTER youve deleted everything it finds

worried_jim

Thanks for the advice. Managed to start in safe mode and get ie working and down load MALWAREBYTES from file hippo. Once icon on desktop clicked install and then nothing happened. Tried it again and instead of saving programme went for the run option and samething happened again- nothing.

Donnie

Choose either of the Avira AntiVir Rescue System options and create a disc.

Boot up with the disc in the drive and run the Virus Scan from there. Once completed, reboot and try the Malwarebytes scan again.

Avira AntiVir Rescue System
The Avira AntiVir Rescue System a linux-based application that allows accessing computers that cannot be booted anymore. Thus it is possible to repair a damaged system, to rescue data or to scan the system for virus infections. Just double-click on the rescue system package to burn it to a CD/DVD. You can then use this CD/DVD to boot your computer. The Avira AntiVir Rescue System is updated several times a day so that the most recent security updates are always available.

Browntoa

worried_jim wrote: »

Thanks for the advice. Managed to start in safe mode and get ie working and down load MALWAREBYTES from file hippo. Once icon on desktop clicked install and then nothing happened. Tried it again and instead of saving programme went for the run option and samething happened again- nothing.

rename the Mbam installer exe file to something else like clearjunk.exe and try installing

if it installs you may also need to rename mbam.exe to something else as well

ddoris

Combofix is my first choice to try , then malwarebytes.

worried_jim

He's getting some professional advice today.

aliEnRIK

I hope he doesnt get ripped off

Linbox

http://forums.moneysavingexpert.com/showpost.html?p=31881347&postcount=215

compucaring

I would backup the data on the PC and reinstall the operating system. It will save you time and is a guaranteed fix.