DOUGSTER has a virus - av-protect

[Dougster]

Hi Malware Removal team,
I am writing from a desktop that is not infected (as far as I know). I used HiJack This on my desktop a year or so ago and have kept current with your recommendations.

Here is my problem. My laptop has some sort of virus and I can not launch internet explorer or get any type of browser session. My son was on some site and some how get into some virus protection program that seems to have locked things up.

I tried copying my HiJack This over to the laptop and running to give you a logfile and the virus will not let me run the program.

I am getting things like:
Infiltration alert - threat: bankerfox.a
Antivirus Soft (this is in my system tray and not sure where it came from )
The file msfeedssync.exe is infected.
Browser goes to a page http://AV-protect.com/purchase?R=56.1 (asking me to purchase now or defer), etc

I can follow your recommendations but can not yet send you a HiJack This file because it will not let me launch. Your thoughts?
Doug

[NonSuch]

We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.

If that does not work, try the following:

Download/run Rkill:

Please download Rkill from one of the following links and save to your Desktop:

One, Two,Three or Four

• Double click on Rkill.
• A command window will open then disappear upon completion, this is normal.
• Please leave Rkill on the Desktop until otherwise advised.

Note: If your security software warns about Rkill, please ignore and allow the download to continue.

Next, please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<