Personal antivirus cannot remove

Gateway DESKTOP
August 30, 2009 at 14:01:01
Specs: vista home premium, 1.9 / 1 gb
Got a friends laptop I need some help with. This dang spyware junk are getting worse to remove.

First off if your online and try to boot vista you get to the logon screen enter your password and it reboots.

If you disconnect it from the internet "remove the cat5" it will boot with at first a big screen with Personal antivirus which looks like it's running. I hit ctrl alt del and bring up task manager to close it.

Then vista loads, I go through it's errors " sorry can't remember exactly which ones something about xepndnfs.dll ? but I downloaded this avenger program and tried running a script from it, from this site http://www.myantispyware.com/2009/0...

Machine rebooted over & over. I finally got into safe mode and tried to run malwarebytes which didn't work.

Next I went and rebooted into normal windows and booted up but without pav but still can't install or run mbam setup "malwarebytes". I also downloaded on a usb stick latest spybot. I tried installing it and it run through the install but when it comes to running spybot it won't start either. It seems like anything to do with a removal program won't run.

Laptop has junk McAfee on it which is worthless IMO.

Any ideas on how I can run a program to remove this crap? Is there something in task manager I can close so I can run it? or Is there any kind of bootable version?

Ol Chuck & myslef would be very grateful if anyone has any ideas.


Thanks

Chad

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


See More: Personal antivirus cannot remove

Report •


#1
August 30, 2009 at 14:09:48
Delete mbamsetup and download again this time rename mbamsetup.exe to something else xyzsetup.exe for example
Use task manager to kill personal antivirus ,install MBAM , update and run the quick scan , clean all it finds , shut down wait a bit and start up again ( cold re-boot ) .

good luck

......


Report •

#2
August 30, 2009 at 14:57:03
Duh I don't know why I didn't think of that. Thanks it installed and is running now.

only 2 minutes and already 71 infections LOL my gosh this thing is in bad need of cleaning.

Hopefully if & when I get this fixed spybot will prevent future outbreaks.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


Report •

#3
August 30, 2009 at 15:47:19
71 that's quite a haul but not a record , I suspect that many will just be tracking cookies . I agree with you about McAfee .

Report •

Related Solutions

#4
August 30, 2009 at 18:02:42
Well I scanned it a couple times but won't do a thorough scan without locking up freezing mouse & everything. Tried the basic scan got the 71 again and removed them. scanned it again got 155 more! Scanned it again got nothing, so I tried connecting it to the internet & plugged in the ol cat5. It connects to the internet now without restarting! Defiantly a plus. So I ran malwarebytes one more time did the update since I could connect to the internet, got about 14 more nasties and went to remove them and it locked up again! I had to do a hard shutdown.

Still takes forever to boot up after you enter password but no more personal av crap! But at least i'm getting somewhere now!

If it locks up again this second run around I may try spybot for kicks.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


Report •

#5
August 31, 2009 at 03:26:55
You should scan your computer with Spyware Doctor, MalwareBytes anti-malware or any other reputable security software. Personal Antivirus removal guide can be found here:
http://www.2-spyware.com/remove-per...

However, there may be other malware than Personal Antivirus, that's why automatic removal is a better option.


Report •

#6
August 31, 2009 at 04:10:33
By spybot I assume you mean Spybot Search and Destroy , that's good , I use it myself . However SuperAntiSpyware is more powerful so why not give that a try .

http://www.superantispyware.com/dow...


..............


Report •

#7
August 31, 2009 at 07:44:11
Yea i'm refering to spybot S&D. After several more unsuccessful attempts at running malwarebytes I gave spybot a try and it finally started working. I ran it for a while till it received some serious problems so I canceled, fixed what it had caught so far, and told it to run next restart to get rid of the nasties he has picked up.

I'll run them all a few more times till I get 0 spyware detected.

1 funny thing I noticed about this laptop, 64 bit x2 processor and it has vista home premium 32 bit. Crazy. I got 64 bit vista and surprised to say it works pretty good for me.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


Report •

#8
August 31, 2009 at 10:01:44
Well still trying to run spybot S&D along with malwarebytes.

spybot destroyed 71 more files on a rebooted run and I ran malwarebytes again witch poped up 6 more problems I cannot remove. Try to clean it up and it just locks up, only way to get back to windows is a hard shutdown with power button.

It has some trojan in program files\ xFX\sfX.sYs
a worm c:\windows\934fdfg34fjif23

and about 4 reg entries two of which are Rouge PersonalAV and two which are Root Kit Agents.

Time to find a way to remove them I guess since spybot & malwarebytes won't .

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


Report •

#9
August 31, 2009 at 10:42:37
For the rootkit problem try unhackme
It works great!

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#10
August 31, 2009 at 10:53:33
It seems to me that it would be a kindness to your friend if you uninstalled McAfee and put something like Avast free or AVG free on it .

Report •

#11
August 31, 2009 at 10:57:51
I agree with response 11, IMO Avast would be my 1st choice as it has better real-time protection and also NO scans have to be scheduled as in the latter.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#12
August 31, 2009 at 12:14:04
I'm having issues finding a rootkit removal tool compatible with vista home premium 32bit.

that and found one I thought would work till I can't figure out how to shut down mcafee ! stupid program.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


Report •

#13
August 31, 2009 at 12:27:17
go to the mcafee site and use their uninstaller. Then try removing the rootkit.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#14
August 31, 2009 at 12:49:19
Scans do not need to be scheduled in AVG , It also protects against some spyware and has an award winning safe browsing feature .
But having said that they are both about the same over all .

Report •

#15
August 31, 2009 at 23:15:24
also try the manul removal guide to remove personal antivirus
http://darfuns.com/spyware-removal/...

Report •

#16
September 1, 2009 at 18:36:20
Yep I manually removed the trojan in program files\ xFX\sfX.sYs
and worm c:\windows\934fdfg34fjif23

rebooted, enabled windows defender since the viri disabled it, re ran malwarebytes this time it removed the rootkit & pav reg entries. Then I did a bit o house cleaning on it and it boots up alot quicker with exceptoin of Mcfee slowing it down.

I read somewhere to prevent these from taking over your computer when the first sign of this fake program turns up hit ctrl-alt-del to open task manager and end the fake av program with end task followed by closing your browser and running spybot to clean any traces of it.

MSI K8N Neo
AMD Athlon 64 3200+ @ 2.21ghz
1.5GB DDR 3200
nVidia N6600 256mb video
Segate 500 gig sata
NEC ND-3500AG DVD R/RW


Report •


Ask Question