HELP! PLEASE! Win 7 anti spyware con has infected & taken over my laptop!

dalek

Browntoa wrote: »

you have not mentioned running Rkill ,you need to run that first , a black box should open up and kill some processes , then run malwarebytes staright afterwards

from bleeping computer

Before we can do anything we must first end the processes that belong to XP Internet Security, Vista Antimalware 2011, and Win 7 Antispyware 2011 so that it does not interfere with the cleaning procedure. To do this, please download RKill to your from the following link.

RKill Download Link - (Download page will open in a new tab or browser window.)

When at the download page, click on the Download Now button labeled iExplore.exe download link. When you are prompted where to save it, please save it on your desktop. (or in your case usb drive)

I will try that now, thankyou.

dalek

Thats brill.

Rkill has made it possible for malawarebytes to scan.

2 infections n counting.........

Thankyou, i'll keep you posted.

tesuhoha

I am on my daughter's computer because my computer has been infected with a similar virus named Vista Internet Security 2011. I have managed to open system restore by going in as an administrator but the computer is now stuck on shutting down. I am going to see if it has gone in a minute. If it has is there anything else I can do to make sure it is safe? I Apparently system restore gets rid of this virus. I have been trying to get rid of it since this morning. About to open up now.

Ok, it is gone. Should I run malwarebytes to be sure?

tesuhoha

The virus infected me when I opened up a photo on this site.

karatepet

Tesuhoha you would be better opening another thread with your problem so the original op can follow the instructions specific to their problem.

dalek

karatepet wrote: »

Tesuhoha you would be better opening another thread with your problem so the original op can follow the instructions specific to their problem.

2 infections - i will scan again.

do i remove or just leave in quarantine, please?

karatepet

Post the log it has created.

dalek

Arghh i've got rid of the log.

Am scanning again.

tesuhoha

karatepet wrote: »

Tesuhoha you would be better opening another thread with your problem so the original op can follow the instructions specific to their problem.

Thanks. Sorry. I have done thatnow.

dalek

dalek wrote: »

Arghh i've got rid of the log.

It had saved the log............

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6273

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

05/04/2011 20:02:08
mbam-log-2011-04-05 (20-02-07).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|)
Objects scanned: 263197
Time elapsed: 17 minute(s), 18 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\******\AppData\Local\fnv.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\******\AppData\Local\ypu.exe (Trojan.Agent) -> Quarantined and deleted successfully.