Computing.Net > Forums > Security and Virus > Personal antivirus cannot remove

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Personal antivirus cannot remove

Reply to Message Icon

Name: ludedude25
Date: August 30, 2009 at 14:01:01 Pacific
OS: vista home premium
CPU/Ram: 1.9 / 1 gb
Product: Gateway DESKTOP
Subcategory: Viruses
Comment:

Got a friends laptop I need some help with. This dang spyware junk are getting worse to remove.

First off if your online and try to boot vista you get to the logon screen enter your password and it reboots.

If you disconnect it from the internet "remove the cat5" it will boot with at first a big screen with Personal antivirus which looks like it's running. I hit ctrl alt del and bring up task manager to close it.

Then vista loads, I go through it's errors " sorry can't remember exactly which ones something about xepndnfs.dll ? but I downloaded this avenger program and tried running a script from it, from this site http://www.myantispyware.com/2009/0...

Machine rebooted over & over. I finally got into safe mode and tried to run malwarebytes which didn't work.

Next I went and rebooted into normal windows and booted up but without pav but still can't install or run mbam setup "malwarebytes". I also downloaded on a usb stick latest spybot. I tried installing it and it run through the install but when it comes to running spybot it won't start either. It seems like anything to do with a removal program won't run.

Laptop has junk McAfee on it which is worthless IMO.

Any ideas on how I can run a program to remove this crap? Is there something in task manager I can close so I can run it? or Is there any kind of bootable version?

Ol Chuck & myslef would be very grateful if anyone has any ideas.


Thanks

Chad

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW



Sponsored Link
Ads by Google

Response Number 1
Name: Jack Frost46
Date: August 30, 2009 at 14:09:48 Pacific
Reply:

Delete mbamsetup and download again this time rename mbamsetup.exe to something else xyzsetup.exe for example
Use task manager to kill personal antivirus ,install MBAM , update and run the quick scan , clean all it finds , shut down wait a bit and start up again ( cold re-boot ) .

good luck

......


0

Response Number 2
Name: ludedude25
Date: August 30, 2009 at 14:57:03 Pacific
Reply:

Duh I don't know why I didn't think of that. Thanks it installed and is running now.

only 2 minutes and already 71 infections LOL my gosh this thing is in bad need of cleaning.

Hopefully if & when I get this fixed spybot will prevent future outbreaks.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


0

Response Number 3
Name: Jack Frost46
Date: August 30, 2009 at 15:47:19 Pacific
Reply:

71 that's quite a haul but not a record , I suspect that many will just be tracking cookies . I agree with you about McAfee .


0

Response Number 4
Name: ludedude25
Date: August 30, 2009 at 18:02:42 Pacific
Reply:

Well I scanned it a couple times but won't do a thorough scan without locking up freezing mouse & everything. Tried the basic scan got the 71 again and removed them. scanned it again got 155 more! Scanned it again got nothing, so I tried connecting it to the internet & plugged in the ol cat5. It connects to the internet now without restarting! Defiantly a plus. So I ran malwarebytes one more time did the update since I could connect to the internet, got about 14 more nasties and went to remove them and it locked up again! I had to do a hard shutdown.

Still takes forever to boot up after you enter password but no more personal av crap! But at least i'm getting somewhere now!

If it locks up again this second run around I may try spybot for kicks.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


0

Response Number 5
Name: ignys
Date: August 31, 2009 at 03:26:55 Pacific
Reply:

You should scan your computer with Spyware Doctor, MalwareBytes anti-malware or any other reputable security software. Personal Antivirus removal guide can be found here:
http://www.2-spyware.com/remove-per...

However, there may be other malware than Personal Antivirus, that's why automatic removal is a better option.


0

Related Posts

See More



Response Number 6
Name: Jack Frost46
Date: August 31, 2009 at 04:10:33 Pacific
Reply:

By spybot I assume you mean Spybot Search and Destroy , that's good , I use it myself . However SuperAntiSpyware is more powerful so why not give that a try .

http://www.superantispyware.com/dow...


..............


0

Response Number 7
Name: ludedude25
Date: August 31, 2009 at 07:44:11 Pacific
Reply:

Yea i'm refering to spybot S&D. After several more unsuccessful attempts at running malwarebytes I gave spybot a try and it finally started working. I ran it for a while till it received some serious problems so I canceled, fixed what it had caught so far, and told it to run next restart to get rid of the nasties he has picked up.

I'll run them all a few more times till I get 0 spyware detected.

1 funny thing I noticed about this laptop, 64 bit x2 processor and it has vista home premium 32 bit. Crazy. I got 64 bit vista and surprised to say it works pretty good for me.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


0

Response Number 8
Name: ludedude25
Date: August 31, 2009 at 10:01:44 Pacific
Reply:

Well still trying to run spybot S&D along with malwarebytes.

spybot destroyed 71 more files on a rebooted run and I ran malwarebytes again witch poped up 6 more problems I cannot remove. Try to clean it up and it just locks up, only way to get back to windows is a hard shutdown with power button.

It has some trojan in program files\ xFX\sfX.sYs
a worm c:\windows\934fdfg34fjif23

and about 4 reg entries two of which are Rouge PersonalAV and two which are Root Kit Agents.

Time to find a way to remove them I guess since spybot & malwarebytes won't .

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


0

Response Number 9
Name: XpUser4Real
Date: August 31, 2009 at 10:42:37 Pacific
Reply:

For the rootkit problem try unhackme
It works great!

Some HELP in posting on Computing.net plus free progs and instructions Cheers


0

Response Number 10
Name: Jack Frost46
Date: August 31, 2009 at 10:53:33 Pacific
Reply:

It seems to me that it would be a kindness to your friend if you uninstalled McAfee and put something like Avast free or AVG free on it .


0

Response Number 11
Name: XpUser4Real
Date: August 31, 2009 at 10:57:51 Pacific
Reply:

I agree with response 11, IMO Avast would be my 1st choice as it has better real-time protection and also NO scans have to be scheduled as in the latter.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


0

Response Number 12
Name: ludedude25
Date: August 31, 2009 at 12:14:04 Pacific
Reply:

I'm having issues finding a rootkit removal tool compatible with vista home premium 32bit.

that and found one I thought would work till I can't figure out how to shut down mcafee ! stupid program.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


0

Response Number 13
Name: XpUser4Real
Date: August 31, 2009 at 12:27:17 Pacific
Reply:

go to the mcafee site and use their uninstaller. Then try removing the rootkit.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


0

Response Number 14
Name: Jack Frost46
Date: August 31, 2009 at 12:49:19 Pacific
Reply:

Scans do not need to be scheduled in AVG , It also protects against some spyware and has an award winning safe browsing feature .
But having said that they are both about the same over all .


0

Response Number 15
Name: james88
Date: August 31, 2009 at 23:15:24 Pacific
Reply:

also try the manul removal guide to remove personal antivirus
http://darfuns.com/spyware-removal/...


0

Response Number 16
Name: ludedude25
Date: September 1, 2009 at 18:36:20 Pacific
Reply:

Yep I manually removed the trojan in program files\ xFX\sfX.sYs
and worm c:\windows\934fdfg34fjif23

rebooted, enabled windows defender since the viri disabled it, re ran malwarebytes this time it removed the rootkit & pav reg entries. Then I did a bit o house cleaning on it and it boots up alot quicker with exceptoin of Mcfee slowing it down.

I read somewhere to prevent these from taking over your computer when the first sign of this fake program turns up hit ctrl-alt-del to open task manager and end the fake av program with end task followed by closing your browser and running spybot to clean any traces of it.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


0

Sponsored Link
Ads by Google
Reply to Message Icon





Use following form to reply to current message:

Login or Register to Reply
LoginRegister


Sponsored links

Ads by Google


Results for: Personal antivirus cannot remove

MySpace and Personal Antivirus www.computing.net/answers/security/myspace-and-personal-antivirus/25796.html

Personal antivirus problem, how to remove? www.computing.net/answers/security/personal-antivirus-problem-how-to-remove/26463.html

Personal Antivirus www.computing.net/answers/security/personal-antivirus/26661.html