This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Rogue Anti Virus

2 min read

This thread's last reply is from July 10, 2009, 6:00 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Hello

I have a rogue anti virus called Antivirus System Pro, which I read up upon and is based off a rogue antivirus called Antivir (not avira). The computer has Avira installed, but Avira is not detecting it after a full scan, but it did happen to remove exactly 408 infections. I tried installing malware bytes, but it claims that "mbam is infected with virus, cannot open" and blocks it from opening. I tried to put a portable version on my flash drive from the computer I am on now and tried to run it, but it still seems to block it. I tried some manual methods of removing it, but the problem is that regedit is also blocked and rundll32.exe is also blocked. The worst part about it is that popups advertising pornographic material continuously come up.

I cannot post a hijackthis log because it also blocks hijackthis.
We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.

Please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here, just be certain to rename HijackThis: >Guideline for posting your HijackThis log<