Antivirus System Pro plus others

tcal · 11-02-2009, 04:21 AM

Good Day !

I've followed the instructions but I am unable to get the requested GMER or DDS scrpts. The PC will not let them run.

The virus is not allowing most .exe files to run. The error I get is: Windows cannot access the device, path, or file. You may not have the appropriate permissions to access the item.

Here is what I have going on.

Antivirus Pro Software is installed. (not full version)
Getting popups for ****** and Porn.
I see iehelper.dll is installed.
Virus software and any scanning software will not work. Including Malwarebytes, Ad-aware. I have tried running the Microsoft Malicious Software tool. It won't run. Any .exe will run for a few seconds and then just disappears.

If I connect to the internet and use a search engine, I am redirected to other sites and told that my PC is infected and it runs a fake scan.

I have tried running malwarebytes etc in safe mode but the same thing happens, the process is killed as soon as it start.

The PC is running Windows XP Home Edition with SP3.

Any help would be appreciated !

Tom

tetonbob · 11-03-2009, 07:43 PM

Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)
There are 4 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.

Rkill.exe
Rkill.com
Rkill.scr
Rkill.pif

Once the tool has run, do NOT reboot the machine, and then try once again to run DDS and GMER.

tcal · 11-04-2009, 08:06 AM

Thanks !

However I was able to fix the computer on my own this morning. I installed combofix, ran it. It cleaned the machine of Antivirus System Pro. I was then able to run Malwarebytes which picked up vundo and installed a clean version of Norton.

The PC is clean and free and operates with no issues. Combofix was uninstalled easily.

Thanks again.

tetonbob · 11-04-2009, 08:48 AM

We do not advise the use of ComboFix in an unsupervised environment, in fact, it's author, whose home forum is here, has such wording in the disclaimer which you passed.

It usually takes more than a couple scans to ensure a machine is clean. If you want to ensure that, post the log from ComboFix, C:\ComboFix.txt, the log from MBAM, and logs from DDS, seen in our pre-posting sticky.

11-02-2009, 04:21 AM	#1 (permalink)
tcal Registered User Join Date: Nov 2009 Posts: 2 OS: xp svcpack3	Antivirus System Pro plus others Good Day ! I've followed the instructions but I am unable to get the requested GMER or DDS scrpts. The PC will not let them run. The virus is not allowing most .exe files to run. The error I get is: Windows cannot access the device, path, or file. You may not have the appropriate permissions to access the item. Here is what I have going on. Antivirus Pro Software is installed. (not full version) Getting popups for ****** and Porn. I see iehelper.dll is installed. Virus software and any scanning software will not work. Including Malwarebytes, Ad-aware. I have tried running the Microsoft Malicious Software tool. It won't run. Any .exe will run for a few seconds and then just disappears. If I connect to the internet and use a search engine, I am redirected to other sites and told that my PC is infected and it runs a fake scan. I have tried running malwarebytes etc in safe mode but the same thing happens, the process is killed as soon as it start. The PC is running Windows XP Home Edition with SP3. Any help would be appreciated ! Tom

11-03-2009, 07:43 PM	#2 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,788 OS: 2000 Pro; XP Pro; XP Home	Re: Antivirus System Pro plus others Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com) There are 4 different versions. If one of them won't run then download and try to run the other one. Vista and Win7 users need to right click and choose Run as Admin You only need to get one of them to run, not all of them. Rkill.exe Rkill.com Rkill.scr Rkill.pif Once the tool has run, do NOT reboot the machine, and then try once again to run DDS and GMER. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

11-04-2009, 08:06 AM	#3 (permalink)
tcal Registered User Join Date: Nov 2009 Posts: 2 OS: xp svcpack3	Re: Antivirus System Pro plus others Thanks ! However I was able to fix the computer on my own this morning. I installed combofix, ran it. It cleaned the machine of Antivirus System Pro. I was then able to run Malwarebytes which picked up vundo and installed a clean version of Norton. The PC is clean and free and operates with no issues. Combofix was uninstalled easily. Thanks again.

11-04-2009, 08:48 AM	#4 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,788 OS: 2000 Pro; XP Pro; XP Home	Re: Antivirus System Pro plus others We do not advise the use of ComboFix in an unsupervised environment, in fact, it's author, whose home forum is here, has such wording in the disclaimer which you passed. It usually takes more than a couple scans to ensure a machine is clean. If you want to ensure that, post the log from ComboFix, C:\ComboFix.txt, the log from MBAM, and logs from DDS, seen in our pre-posting sticky. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009