Not sure what to do

[Pixelpro]

Not sure how, but I know theres a fake anti virus infecting my pc and it wont let me open any anti virus i have on, it stops me from opening system restore and everything, its changed my desktop background saying spyware alert, i dont believe its letting me startup in safe mode either. Help!

 

[pip22]

Run the factory recovery process which wipes out everything on C: drive & installs a fresh, clean copy.

 

[Borg 386]

First off, what is the name of this fake AV running? It's important to know as some removal programs have been written that specifically target certain fake AV's.

If you can, d/l and run Norton Power Eraser.

http://security.symantec.com/nbrt/npe.asp?lcid=1033

Because the Norton Power Eraser uses aggressive methods to detect these threats, there is a risk that it can select some legitimate programs for removal. You should use this tool very carefully, and only after you have exhausted other options.

You may want to try running a boot recovery disk which will initialize before the system files do. Here is a list of them with links to d/l:

FREE Bootable AntiVirus Rescue CDs Download List

Also, if you can, you can go here and do an online scan:

http://security.symantec.com/sscv6/WelcomePage.asp

Click on the "continue to security scan" button. The virus scan engine will d/l onto your system. Please note, you must be using IE to utilize this service.

 

[krazymate]

would recomend booting into recovery mode and maybe restore it to a earlier point before this happened ?

or try Combofix

here it is

follow the steps

ComboFix | freeware

 

[Master Green]

Hi PixelPro,
What I have done when similiar problems to yours has come up is, to download from a non-infected computer Malwarebytes, then put it on the infected computer, boot into safe mode and run it.

P.S...FYI: Downloading and running combo fix is usually something you want to do with supervision.

 

[krazymate]

Hi PixelPro,
What I have done when similiar problems to yours has come up is, to download from a non-infected computer Malwarebytes, then put it on the infected computer, boot into safe mode and run it.

P.S...FYI: Downloading and running combo fix is usually something you want to do with supervision.

True sounds like a serious error ...
only why i posted combofix malwarebytes again yes maybe itll pick up a few things but not the whole bunch that maybe infecting his computer that bad....

 

[Jacee]

Hi PixelPro,
<snip>
P.S...FYI: Downloading and running combo fix is usually something you want to do with supervision.

Excellent advice!

 

[Master Green]

Run Malwarebytes in safe mode and then run it in normal mode...It is highly recommended and will remove allot. Another recommended scan to run once the computer is up and running (after the malwarebytes scans) is, SuperAntiSpyware (do not get it mixed up with the infection AntiSpyware that was running around for awhile). Run that one as well...

P.S...When a computer gets an infection it can take allot of work to remove all it's nasty files and some times allot of other things need to be done as well but atleast this will help, and then we can see where you are at afterwards.