Solved Viruses, Trojans, and Malware, oh my!

Asustek computer inc. / Cm5671
October 24, 2011 at 13:12:41
Specs: Windows 7, 2.803 GHz / 3837 MB
I got called in to help my family with a computer issue, and could use a little backup.

The computer was riddled with a fake security suite called System Security 2011. It would run randomly named processes and declare them to be viruses, trying to get you to pay for their protection. I booted up in Safe Mode and used MalwareBytes to pry that up on my administrator account, and checked one other user account to make sure it took. It seemed to.

A bit later, I got a call that when another of the user accounts was logged on to, System Security was still doing it's business. So I came over and did some searches on my (seemingly still clean) Admin account. There I ran into a search redirect malware.

So, I came here, looked over some of the other similar problems, downloaded and ran the suggested programs, and decided not to do anything with the info, knowing that I'm a bit over my head here.


Thanks for your attention and the help!

See More: Viruses, Trojans, and Malware, oh my!

Report •

October 24, 2011 at 13:32:08
try these 3 in the EXACT order
1- rkill.exe
2- tdss killer
3- Malwarebytes
Don't reboot untill after the last scan

Some HELP in posting on plus free progs and instructions 7 Medals

Report •

October 24, 2011 at 17:37:36
Hmm, I have run all three of them, none of them found any malware, and I am still being redirected on searches.

Report •

October 24, 2011 at 18:12:50
✔ Best Answer
ok try these 2 free fully working trials:
1- trojan remover
2- hitman pro
run them till they are clean

Some HELP in posting on plus free progs and instructions 7 Medals

Report •

Related Solutions

October 24, 2011 at 19:33:15
Welp, I've run all those programs multiple times, even to the point of running them until they showed clean, rebooting, and running them again. They're all showing clean. Still getting redirected on search sites. System Security hasn't shown back up, though.

Report •

October 26, 2011 at 10:12:21

My advice to you would be the following:
Search for any registry keys that the fake AV put into your system.
Delete them ( But be careful! ) If you delete the wrong Reg keys your system could stop working!


Boot up your computer and keep hitting F8.
When a menu shows up press 'Repair my computer'
Follow to the options page and click 'System Restore'

Restore your computer to a date when you didn't have this fake AV.

Also, if you can, post a sample of this virus that I can download so I can inspect what it does and maybe help you further!

- Cameron

Report •

October 26, 2011 at 10:19:20
try response #1 in safe may remove the problems

Some HELP in posting on plus free progs and instructions 7 Medals

Report •

October 26, 2011 at 10:26:03
on another note this particular infection changes the proxy settings, which malwarebytes may or may not fix. however totally agree with xpuser4real.

(also be super carefull in removing registry keys, malwarebytes should deal with this i believe)

you may also want to check this visual guide if you get stuck.


Report •

Ask Question