Stupid AntiVirus Suite Rogue program

[The Green Fox]

Anyone know how to remove it? It's a rogue anti-virus software program, it's pure evil, and it won't let you access any programs.

HELP!

[Matt Macdowel]

hmmm i think i had something similar to this try repairing your computer its a thingy in the computer by trying to get into safe mode then you must restart it again and it should pop up thats what i did.

[The Green Fox]

I was able to make it so it doesn't appear on startup, I don't remember how, but I'm still worried it could come back.

[Matt Macdowel]

so everything is fine? but if it does come back and nothing works well your gonna have to use recovery discs.  and those are not good well sort of.

[Steve]

Errrr, first of all, you don't need to use the recovery discs (as in, format your pc and recover everything). There are several ways to fix this issue without doing anything harsh. Make sure you ran the uninstaller properly, if the thing keeps appearing, you need to make sure you are deleting all the files (you can help yourself with a program like CCleaner).There's also a way to block programs from starting up when you boot, and you can even block them in case they are running wildly (Risk: HIGH, if you push the wrong buttons):

Go to start, then type msconfig (if you are on vista/7) or go to search and type the same (for XP), a system configuration window will appear, DO NOT, I repeat, DO NOT mess with anything on the "General" or "Boot" tags. Go for the Startup tag and while being there, ONLY disable the program that is causing the problems, then go for Services and do the same (note: it might not appear there if it's not running natively and make sure to click on the "hide microsoft services" so you wouldn't click on something that you shouldn't).

While this won't get rid of the program, it will surely stop it from running on your pc (unless it's trully more a virus than an anti-virus program).  We need to find out how deep the installation went, however, try running the native uninstaller and see if that works (you could help yourself with the control panel tools that windows offers, as in, "remove and install programs"

On another note, Matt, we appreciate your help, but your suggestions are a little bit too extreme.

[Fox-Shot]

If anything, find the shortcut to the Virus Program and delete all the files if the uninstaller doesn't work.  I've had similar issues on an older PC, it disabled use of Internet Explorer, so we had to install FireFox to gain access to the internet to find fixes.  As long as you can get rid of the files, it shouldn't come back unless it somehow reinstalls itself.

[DZComposer]

Steve: He said he already stopped it from running on boot.

Green: But, as Steve said, stopping it from running on boot is only half the battle. Now we have to actually get it off of your system entirely.

To get rid of it, you need to know what it is.

Can you post a Hijack This log, please?

http://free.antivirus.com/hijackthis/

Run it, hit scan, and then post your log here.

Procedure (RISK LEVEL: LOW) -> http://www.whatthetech.com/hijackthis/

Also, try running the Microsoft Malicious Software Removal tool (RISK LEVEL: VERY LOW).

It should come with your Windows Updates.

To run it, go to start if XP, Run, Vista/Win7 search blank, type "mrt" without quotes.

If it doesn't run (IR you get an error or a search window instead). download the tool here: http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en (or here if you are running 64-bit: http://www.microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=en [WILL NOT WORK ON 32-BIT WINDOWS!])

When it opens, run a full scan (middle option). It can take several hours depending on you computer speed and the size of your hard drive(s).

When the scan finishes, clean any infected files it finds.