Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: i think i have the av security suite virus....yup, def got it....  (Read 1466 times)

0 Members and 1 Guest are viewing this topic.

grindtashine

    Topic Starter


    Newbie


    hello everyone, i came across this site by this page: http://www.computerhope.com/forum/index.php?topic=106678.0

    when i get to superantispyware.exe....it wont let me run the prog.....a security warning pops up that says "Application cannot be executed.  The file superantispyware.exe is infected.  Do you want to activate your antivirus software now?

    and of course, theres all the IE pop ups of porn sites and my toolbar at the bottom right lights up light a xmas tree every 4mins or so

    someone please walk me through this.....good karma to follow for sure

    backstory:  a month or so ago protection center virus poped up....i unistalled macafee and installed Avast and did a sys rest. (amateur stuff)....and the problem seemed to be fixed, but with minor search engine redirects

    yesterday - avast expires and security suite starts poping up.....just did a full sys scan w/ avast and displayed 15 or so trajans, then i deleted them....

    now - cant run any programs including mbam, i can even enter task manager, Everytime i try opening anything, an alert pops up telling me that the .exe file is infected....should i try entering safe mode? should i unistall avast and reinstall it or some other av?


    thank you

    Crush

    • Malware Removal Specialist
    • Moderator


    • Beginner

      Thanked: 8
      Re: i think i have the av security suite virus....yup, def got it....
      « Reply #1 on: July 03, 2010, 10:45:39 AM »
      Hello, and welcome to Computer Hope Forums!

      I'm Crush but, you can call me Chris too :) and I will be helping you with your Malware issues

      Please note the following information about the malware forum:

      • Only members of the Malware Removal Specialist user group are allowed to give advice on removing malware from your computer. Do not follow the advice of anyone without that user title.
      • From this point on, please do not make any more changes to your computer; such as install/uninstall programs, use special fix tools, delete files, edit the registry, etc. - unless advised by the staff I noted above.
      • Please do not ask for help elsewhere (in this site or other sites). Doing so can result in system changes, which may not show up in the logs you post.
      • If you have already asked for help somewhere, please post the link to the topic you were helped.
      • We try our best to reply quickly, but for any reason we do not reply in two days, do this:


      Reply to this topic with the word BUMP.

      • Lastly, keep in mind that we are volunteers, so you do not have to pay for malware removal. Persist in this topic until its close, and your computer is declared clean.

      Now that we have that out of the way:

      Download OTL  to your Desktop

      • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
      • Under the Custom Scan box paste this in
      Code: [Select]
      netsvcs
      msconfig
      safebootminimal
      safebootnetwork
      activex
      drivers32
      %SYSTEMDRIVE%\*.exe
      %systemroot%\*. /mp /s
      c:\$recycle.bin\*.* /s
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
      /md5start
      eventlog.dll
      scecli.dll
      netlogon.dll
      cngaudit.dll
      sceclt.dll
      ntelogon.dll
      logevent.dll
      iaStor.sys
      nvstor.sys
      nvstor32.sys
      atapi.sys
      IdeChnDr.sys
      viasraid.sys
      AGP440.sys
      vaxscsi.sys
      nvatabus.sys
      viamraid.sys
      nvata.sys
      nvgts.sys
      iastorv.sys
      ViPrt.sys
      eNetHook.dll
      explorer.exe
      svchost.exe
      userinit.exe
      qmgr.dll
      ws2_32.dll
      proquota.exe
      imm32.dll
      kernel32.dll
      ndis.sys
      autochk.exe
      spoolsv.exe
      xmlprov.dll
      ntmssvc.dll
      mswsock.dll
      Beep.SYS
      ntfs.sys
      termsrv.dll
      sfcfiles.dll
      st3shark.sys
      ahcix86.sys
      srsvc.dll
      nvrd32.sys
      /md5stop
      %systemroot%\system32\*.dll /lockedfiles
      %systemroot%\Tasks\*.job /lockedfiles

        • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
          • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
          • Please copy (Edit>Select All, Edit>Copy) the contents of these files, one at a time
        "I am in fact, quite cool. My graphing calculator confirms this"