Unable to remove virus from my computer

greenpixey

My hubbys PC got attacked last night by a virus. He looked at something and it told him he had to allow a pop up before he could view it so he did. Straight away he got attacked by a virus that stopped everything working. He pulled the internet connection and have since then tried to get rid of the problem.

It seems to be a program called AV Security it wont allow him to run taskmanager, Avast or any programs really. Anything he tries to open pops up a window saying he has to pay money to remove the virus.

We've gone in safe mode and run Avast and Malwarebytes but it wont find anything then. It doesn't seem to be active in safe mode.

lucylucky

Have you the most up to date version of Malwarebytes?

I had a real nasty recently and had to use SuperAntiSpyware and Malwarebytes

aliEnRIK

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)
If you get a message that you cant write to the hosts file then Press the SHIFT key, and whilst holding it RIGHT CLICK and select RUN AS (admin)

greenpixey

Sorry aliEnRIK I cant do what you asked. Not even in safe mode.
I just tried without safe mode and got "Application cannot be executed the file msfeedssync.exe is infected." and 15 !!!!!! pages popped up on screen.

fiddiwebb

If you have access to another computer/laptop download Superantispyware Portable onto a USB memory stick and then plug the USB memory stick into the infected computer and run the programme from the USB stick.

SAS might shift enough to allow Malwarebytes to run.

http://www.superantispyware.com/portablescanner.html

PS.

While you are downloading SAS also download Malwarebytes and Rkill onto the usb memory stick as advised in the instructions that Dogmaryxx gave in post #3

aliEnRIK

greenpixey wrote: »

Sorry aliEnRIK I cant do what you asked. Not even in safe mode.
I just tried without safe mode and got "Application cannot be executed the file msfeedssync.exe is infected." and 15 !!!!!! pages popped up on screen.

How far do you get? Have you managed to download malwarebytes?
Will it not install?
Will it not run once installed?

Try running fix.exe first ~
http://download.bleepingcomputer.com/reg/antivirus-vista-2010/FixExe.reg

aliEnRIK

greenpixey wrote: »

Sorry aliEnRIK I cant do what you asked. Not even in safe mode.
I just tried without safe mode and got "Application cannot be executed the file msfeedssync.exe is infected." and 15 !!!!!! pages popped up on screen.

How far do you get? Have you managed to download malwarebytes?
Will it not install?
Will it not run once installed?

Try running fix.exe first ~
http://download.bleepingcomputer.com/reg/antivirus-vista-2010/FixExe.reg

greenpixey

aliEnRIK wrote: »

How far do you get? Have you managed to download malwarebytes?
Will it not install?
Will it not run once installed?

Try running fix.exe first ~
http://download.bleepingcomputer.com/reg/antivirus-vista-2010/FixExe.reg

I cant access anything on internet, I get a windows message saying check internet connections, see if address you trying to go to is correct etc....

paulofessex

I had the very same virus last week, Malwares got rid of it. Reconnect the internet and start up in safe mode choosing 'safemode with networking' or similar and then run malware. It should find 2 different virus/program

Good luck

greenpixey

paulofessex wrote: »

I had the very same virus last week, Malwares got rid of it. Reconnect the internet and start up in safe mode choosing 'safemode with networking' or similar and then run malware. It should find 2 different virus/program

Good luck

I have done what you suggested and Malware found nothing whilst in safe mode (I cant get malware or any program to work on normal setting). It's not an updated version and I cant get the latest one because I cant access internet. I got a connection but It wont accept any address I type in.
Although I cant access any pages it is happy enough to open it's own and throw !!!!!! at me

Hubby has gone to get a memory stick and try what fiddiwebb suggested

paulofessex

Sorry to ask, but are you sure its opening in safe mode....pressing F8 when starting up