This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

DELETE POST - Virus removal malware

2 min read

This thread's last reply is from January 16, 2011, 4:55 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

I ended up getting some malware that mimics a virus removal program. I had several programs installed to prevent stuff like this (Spybot, Spyware Blastware, a Malware program and Avira Antivirus and firewall) but it still got through. The added problem I am having - every time I try to run one of my removal programs, the malware program gives me a warning and says "that program is infected!" and attempts to direct me to "purchase" their removal program. In addition, when I try to open an internet browser, the same thing happens. My computer is basically on lock down because of this program and I am at a different computer just to get here.

Because of the problem, I cannot download or run HijackThis to get a log of my computer. Can anyone help me or tell me how to get more information from my computer to get help? It is an older computer with Windows XP. Thanks.

More info - after messing around with my computer, it seems this virus attempts to direct me to Programmci.com to "purchase" the antivirus software. It also brings up fake intrusion alerts saying someone is trying to attack me. I cannot even execute basic programs, like Word, as it says they are infected as well.
We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.

If that does not work, try the following:

Download/run Rkill:

Please download Rkill from one of the following links and save to your Desktop:

One, Two or Three

  • Double click on Rkill.
  • A command window will open then disappear upon completion, this is normal.
  • Please leave Rkill on the Desktop until otherwise advised.


Note: If your security software warns about Rkill, please ignore and allow the download to continue.

Next, please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<