Windows users Malware Anti Virus 2011 newest version is nasty.

Just got hit with the "Anti Virus 2011" virus.

Went right through AVG, MalwareBytes and blocked me from using them to kill the virus.(looked like this virus turned them off)
forums.malwarebytes.org...
www.bleepingcomputer.com...

This virus also can run as a fake "AVG AntiVirus 2011" so watch where you download from.

And it blocks you from downloading ANY anti malware programs that are .EXE programs.

Download Rkill.com can by pass this .EXE block
www.bleepingcomputer.com...

Put it on a post-it note along with this quick fix to kill "Anti Virus 2011"

Make sure your System Restore is turned on.

If you get hit reboot and go into safe mode.
Roll back your computer a couple days.
and reboot.
Then repair the damage done by Anti Virus 2011. (this is where i found it had blocked all EXE programs from being installed.

If you don't have one burn a boot-able linux mint 10 disk.
This will allow you to freely go to the internet for instruction on killing this virus if what i outlined does not work.
I had a bootable linux mint on a flash drive that allowed me to find the information i needed.

best way I've found to get rid of a PCvirus

whack the hard drive [figuratively not Physically]

Reformat & Reinstall

reply to post by ANNED




Good advice, i have seen so many computers infected with variations of this.

That R-Kill is the best thing i have ever seen, it appears to kill any process that is virus so far.

In less than half an hour following these instructions will solve all problems.

use avira and spybot s&d and this never will happen...

problem on that "windows malware" stuff is.. its not windows...it just look like it ..its a popup..

and if you klick it...your fu...d

Have this virus on my pc, rkill wont even stop it. I gave up. I got it off the laptop with rkill once.

What I generally find effective if all else fails, is to put the infected drive into an external enclosure, and scan it from another computer which has Wondershare Timefreeze, or some sandbox program runnig on it.
This way, I can access files which would normally be running in the background if I was scanning from the infected drive, and the sandbox would protect my computer from infection.

This has worked for me so far with no problems.

If anyone knows of any hazards to this approach, i would be grateful for any info.

Cheers.

reply to post by ANNED


Loose the AVG and get Avira problem solved!
-2nd

reply to post by ANNED


from the same site, combofix will also get rid of this. You have to run it in safe mode then regular mode, and a sweep of malwarebytes after seems to do the trick. It's a bad scan that is a pain to get rid of. I cannot understand how it's not illegal. There is even a money trail with the credit card payments going somewhere.

and a note to anyone who get's this:

DO NOT PAY ANY MONEY FOR ANY FIXES! IT'S A SCAM!

reply to post by Evil3unnie


I use Avira, and it has been the best so far. Also tried most of the alternatives too, but IMO this is the best.

Also have Malwarebytes Antimalware and Adaware running.

reply to post by Illegal Alien


I find this love for Avira a bit amusing, especially considering it would never even notice this type of virus.

I do not run any antivirus software at all... and i am fine.

MalwareBytes scan every 2 weeks or longer for the heck of it.

reply to post by GrinchNoMore


How on Earth do you manage that?

I can't go on the net for 5 minutes without an antivirus before getting some kind of scally program installing itself, and I rarely use torrent sites and the like.

reply to post by showintail




try combofix
www.bleepingcomputer.com...

You may want to try Hijaak This (by Trend Micro now), a free program...
It can possibly isolate the file for you.

Make sure you get it from a legit source...

free.antivirus.com...
This seems legit, but always scan before dl.

Originally posted by Illegal Alien
reply to post by GrinchNoMore

 

How on Earth do you manage that?

I can't go on the net for 5 minutes without an antivirus before getting some kind of scally program installing itself, and I rarely use torrent sites and the like.

edit on 23-5-2011 by Illegal Alien because: (no reason given)

Stay Off The Virus Bay & quit surfing Porn sites

Here is a Free Virus Protector and Firewall Enhancer from Microsoft:

Microsoft Security Essentials

Microsoft Security Essentials 64 Bit

Also available through Windows or Microsoft Update. be sure to un-install other virus protection from your computer before instillation. I have been installing this program on my customer's computers for two years now, and have not had one come back with a virus. Best of all, it's free. Install, let it update, and run a scan. It's that easy.

reply to post by spoonbender


LOL!

I don't do the porn, but Virus Bay does reel me in from time to time, along with the odd obscure conspiracy site.

At least, if I did do the porn, I'd know where all the junk was coming from.

reply to post by ANNED


Combofix
is the only virus/rootkit remover that works good enough, if your windows computer
have been hit hard.

Run it in safe mode, or safe mode with network.
As a local login administrator user.

Yes this virus blocks Malwarebytes and other helpful programs from running. But, you can use the task manager to launch malwarebytes. Create a new task and point it to your good program and then tell it to Run Now.