a Virus deleting my anti-virus's :(

March 10, 2012 at 17:26:40
Specs: Windows XP
First sorry for my bad English but I am an Egyptian
so my computer was running well until my cousin used his USB on my computer then the pc freezes all the time and the task manager disabled

but the problem is when i download an anti-virus the virus delete it :(
i download Avast,Avira and the AVG is coming with a severity error

dunno what to do . any help please ?

See More: a Virus deleting my anti-viruss :(

Report •

March 10, 2012 at 20:18:32
Boot into Safe Mode bye rebooting and as the computer begines to come back up tap the F8 key in 1 second intervals.

When you get the boot menu choose Safe Mode with networking.

See if you can download the following programs and run them in the order I list them. (Do Not Reboot Inbetween RKILL And MBAM) If you cant download them in safe mode you will need to download on another computer and transfer using a flash drive or CD/DVD before hand.

RKILL ( a small script that should stop any malicious virus hooks preventing an antivirus from installing, do not reboot after running)


MBAM (Malwarebytes Antimalware- probably the best overall troajn rootkit removal program). Install/update & run a full scan. (Reboot if MBAM requires for removal)


CCleaner (this is a temporary file cleaner. Viruses of hide in the temp files and your AV's will miss them in there. Install ccleaner and open >. go to Options >> Advanced >> uncheck : Only delete files in temp folder older than 24 hours ... then click Cleaner button.


I would disable your antivirus while your running these programs. I would go and run an online scan ... ESET online scanner is good:


Lets us know how its going .... You may need to run a removal tool ..or 2 specific to the virus you have but this list above is a good start.

Report •

March 11, 2012 at 12:33:03
The method I found that removes the rootkit is by running all 3 of these in EXACTLY the same order listed...THEN reboot your pc
1- rkill.exe
2- tdss killer
3- Malwarebytes

Step number 2 is really crucial as it DOES quarantine the rootkit so malwarebytes can remove it.

Some HELP in posting on Computing.net plus free progs and instructions 7 Golds

Report •

Related Solutions

Ask Question