pain in the arse malware

[jim532]

I'm trying to help someone with a malware infection, it looks like typical varient of Win-Antivirus XP where it's a fake antivirus, red sheilds keep popping up in the task bar say you may be infected etc. In an attempt to follow the instructions in the sticky I cannot do anything but run ATF, if I try to run Mbam or Hijack this or Windows malicious software removal tool, it tells me the file may be infected, I also tried to rename the executables for those apps but got the same result. I cannot open Add/remove programs I double click anything in control panel and wait and nothing happens. Also when I try to go into MSCONFIG the run with dialogue box pops up.

please help. I'd rather not wipe and reload.

[cauzomb]

Is there a new ICON on the desktop called security tool?

[jim532]

nope no security tool icon.

[cauzomb]

try restarting in safe mode, then open regedit, then navigate to:

HKEY_LOCAL_MACHINE
SOFTWARE
Microsoft
Windows
CurrentVersion
Run

then tell me what executables are listed in RUN.

[jim532]

thanks for the help, i've been sick for the last few days so i had the time to just do a wipe and reload. It seems these fake antivirus variants are gertting nastier and harder to get rid of.

thanks again

[cauzomb]

thanks for the update, better off with the fresh install too