Please help me, my sister was using my computer and now it seems like it has a virus / spyware or whatever it is and its really annoying and I’m scared it might have stolen some of my passwords.
It is called av.exe – thats what appears on my task manager. I looked up some pages that say that help remove it but all of them imply downloading something and when i try to download it, it seems a bit too suspicious, like another spyware.
ALSO, MY ANTI VIRUS EXPIRED AND I DONT THINK I CAN BUY ANYTIME SOON.
The Best way to Remove all kind of Virus,Trojans,Malware,Spyware,
Worm,Pop Up Advertisements ,Hijack Web browser rootkit , all Rogue Fake
Anti-virus and
Browser redirect in you Computer is
Restart You Computer Safe Mode with Networking
1. Log out and reboot your machine.
2. When the machine starts the reboot sequence, press the F8 key repeatedly.
3. Select Safe Mode with Networking from the resulting menu.
4. Login. If the malware has changed your password, try logging in as
Administrator. By default, Administrator has no password.
5. The machine will continue booting, but the Windows desktop will look different.
Then in The Safe With Networking .Download by using Rkill press here http://download.bleepingcomputer.com/grinler/rkill.exe
Download and Scan By Using Malwarebytes’ Anti-Malware http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=contentBody;mostPopTwoColWrap&cdlPid=10997763
Download and Scan By Using Super Anti-Spyware Press here http://www.superantispyware.com/
Download and Scan By using Norman Malware Cleaner Press here http://majorgeeks.com/downloadget.php?id=5450&file=1&evp=6980e63d4e482f0670e991265b3250e7
Download ATF is a new, freeware, temporary file cleaner for Windows, IE, Firefox and Opera with a simple, easy-to-use interface.
The main screen allows the user to either clean all temporary files, or select files for cleaning. The program also knows if Firefox and or Opera is being used, and gives the option of cleaning the temporary files associated with those applications.
ATF Cleaner provides the user with a window showing the total bytes freed upon completion. The program is small (36kb), quick to run and no installation required. to Download ATF Cleaner press this link http://majorgeeks.com/ATF_Cleaner_d4949.html
6. When you’re finished Remove Virus, Malware, Trojan, Worm,
rogue
virus rootkit and
Spyware log out and reboot back into normal mode
try installing spyware doctor free trial that works fully greate
downlaod it from here
http://www.pctools.com/spyware-doctor/
scan and fix your issues with it
thank you
Download MalwareBytes Anti-malware (FREE). http://www.malwarebytes.org/mbam.php gives links to free programmes and help. You can also ask for help there from the regulars. Alternatively this site gives info on many current malware threats http://bestfree-spyware-virus-trojan-protec.blogspot.com/
Shows you how to remove rogues, but works for other viruses too (By me):
http://www.youtube.com/watch?v=eGVWQgtCvtg
Use combofix from bleepingcomputer.com, then download malwarbytes(you may need to rename the installer/setup to something like winlogon.exe to be able to run or install it) from malwarebytes.com or softpedia.com, then clean the rest of the virus with superantispyware and Hitman Pro 3.5 from softpedia.com/cnet.com and just in case you do have a rootkit on your system use GMER from majorgeek.com(Use gmer to scan and anything in red delete.)
Future Protection use this wizard to recommend security protection for your system:
http://www.techsupportalert.com/secwiz
or go to safe mode and then do the above:
To get into Safe Mode with Networking:
1. Log out and reboot your machine.
2. When the machine starts the reboot sequence, press the F8 key repeatedly.
3. Select Safe Mode with Networking from the resulting menu.
Note: Rogue security software is a form of computer malware that deceives or misleads users into paying for the fake or simulated removal of malware.
Or Manually:
Terminating the process:
1.I verify that a Rogue is present. This isn’t hard, since it’s usually popping up just about every few seconds.
2.Click CTRL-ALT-DELETE (if it’s available)
3.Click Task Manager
4.Click Processes
5.Find a process that usually contain all numbers. For example 2342342.exe. If you do not see all numbers then your rogue has a name like…SystemSecurityPro.exe or GreenAV.exe…etc.
6.Select that process and click end process.
7.At this point the rogue process has been terminated.
Removing Rogue Anti-virus that is named with random numbers.
or If you can’t open task manager then use Rkill from http://download.bleepingcomputer.com/grinler/rkill.com
1.Click Start
2.Click Run (or for Vista/Win7 type in the start search box)
3.For windows xp type: C:\documents and settings\all users\Application Data and click OK. A window will open containing a folder with about 8 numbers. Your Rogue is in there. Delete that folder.
4.For Windows Vista/Win7 type C:\users\all users in the "start search" box and click enter. Your randomly named folder with about 8 digits should be in there. Delete it.
Removing Rogue Anti-Virus that has a name like System Guard Pro, AV2010, etc
1.Open Windows Explorer.
2.Open your C:\ drive.
3.Open Program Files
4.Find the Rogue and Delete the folder.
If not seek an expert. Good Luck!
http://www.superantispyware.com/download.html