Virus problem. Please help.

[G.O.B]

An antivirus Scan has installed itself on my computer and i cant get rid of it.

It wont allow me to run any scans or to use system restore.

It has placed and wuauclt.exe in my WINDOWS/Prefetch folder.

I've tried everything to get rid of it as reformatting is only a last option.

Here's a picture of the focker. Can anyone help or experienced this problem.

[/URL] Uploaded with ImageShack.us[/IMG]

 

[prankmonkey]

i'd just backup what you need and reformat
then get yourself an antivirus program

 

[Biggy_Boy]

Have you tried booting up in safe mode and running MBAM?

 

[woopedazz]

Step by step removal instructions with pictures for dummies: http://www.bleepingcomputer.com/virus-removal/remove-antivirus-scan

 

[Roo-Boy]

Boot up your computer in Safe Mode and download Malwarebytes the free version and update it to the latest version then give it a scan (choosing the Perform quick scan option) and it should flush out your virus.
http://www.malwarebytes.org/

 

[dumb]

if i've had a virus that wouldn't let me run scans, the advice occasionally has been to rename your anti-virus program, ie mbam.exe to cbam.exe, so your AV software will get past what it's put in the registry. worth a try before a reformat.

 

[spitlizard]

An antivirus Scan has installed itself on my computer and i cant get rid of it.

It wont allow me to run any scans or to use system restore.

It has placed and wuauclt.exe in my WINDOWS/Prefetch folder.

I've tried everything to get rid of it as reformatting is only a last option.

Here's a picture of the focker. Can anyone help or experienced this problem.

[/URL] Uploaded with ImageShack.us[/IMG]

Does it give away its location?....
system32 is usually the culprit!!

 

[Jesse Custer]

Boot up your computer in Safe Mode and download Malwarebytes the free version and update it to the latest version then give it a scan (choosing the Perform quick scan option) and it should flush out your virus.
http://www.malwarebytes.org/

Thats the trick.

 

[woopedazz]

... Does nobody read other people's posts?

 

[hawkeyehogan]

An antivirus Scan has installed itself on my computer and i cant get rid of it.

It wont allow me to run any scans or to use system restore.

It has placed and wuauclt.exe in my WINDOWS/Prefetch folder.

I've tried everything to get rid of it as reformatting is only a last option.

Here's a picture of the focker. Can anyone help or experienced this problem.

[/URL] Uploaded with ImageShack.us[/IMG]

HA HA someone been looking at pr0n i see on your computer.Their no denying it.I've fixed a few people computer with same problem.I checked their history and noticed they were on these sites like i post naked and ****book and others .I was rather annoyed because i fixed their computer and downloaded every update and it took several hours.The funny thing the guy wife said she only goes on facebook and games for her kids her kids go on.The husband does loves the pr0n but she does also as their were swingers web site visits and also things women like.

 

[Biggy_Boy]

HA HA someone been looking at pr0n i see on your computer.Their no denying it.I've fixed a few people computer with same problem.I checked their history and noticed they were on these sites like i post naked and ****book and others .I was rather annoyed because i fixed their computer and downloaded every update and it took several hours.The funny thing the guy wife said she only goes on facebook and games for her kids her kids go on.The husband does loves the pr0n but she does also as their were swingers web site visits and also things women like.

It's a rogue AV, most likely installed via drive by download due to a java exploit. Of course, there's a high chance these could be on pr0n sites but that's not necessarily where it came from. I've seen plenty of other dodgy sites hosting a lot of ads that do the same.

 

[Simon_Nesbit]

mbam is unable to work for some of these. I've never had one that rkill doesn't ....er kill.

It's a root-kill program, from kaspersky (sp?) IIRC - been months since I've had an issue, but worth looking up.