This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

rogue anti-virus

1 min read

This thread's last reply is from August 8, 2009, 3:34 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Hello and thanks in advance for helping.

I believe I've been infected with several rogue anti-virus programs, including Windows Antivirus Pro. When I try to run MalwareBytes, HiJackThis, RSIT or any other type of program that scans my machine, the program quits and I'm then "locked out." I then get a message saying, basically, that I don't have permission to access the file. I've tried re-installing MalwareBytes three times with the same result.

The rogue program has changed my desktop to disly play a warning message that says, in part, "DANGER!!! Your computer is INFECTED!"

Again, thank you for any help you can offer.
We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.

Please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here, just be certain to rename HijackThis: >Guideline for posting your HijackThis log<