[rps67]

Hi,

At some point yesterday, someone installed the WinPC antivirus malware on our other computer.

I tried to manually remove it, by getting rid of the exes and the registry entries I found listed on a couple of internet sites about WinPC AV.

I was able to run adaware several times with no problem, but I cannot run any other type of anti-malware program. I had the Malwarebytes program on there, but when I tried to run it, I could see it in the task manager, but it wouldn't show up on the screen.

I downloaded the installer to my laptop and transferred that over to the infected pc. I tried to reinstall and that worked -- but the program still does not run (in safe mode or regular).

I thought for sure that I had hijackthis! on that computer but couldn't find it. I copied that installer over and it won't even install.

I tried to do a system restore, but when I get to the screen to pick a new date, I could click Next, but nothing happened.

And now when I start up into regular mode, everything locks up. It doesn't go to a blue screen or anything -- the screen is simply frozen. Ctrl+Alt+Del does nothing.

Does anyone have any suggestions?


Thanks in advance.

[Cookiegal]

The General Security forum is only for general questions regarding security software and things of that nature but not for actually removing malware as we have qualified helpers who are the only members who are authorized to assist with those matters. You can easily identify them as they have either a gold or blue shield beside their usernames. Please refer to this excerpt from the rules:

Log Analysis/Malware Removal - In order to ensure that advice given to users is consistent and of the highest quality, those who wish to assist with security related matters must first graduate from one of the malware boot camp training universities or be approved by the administration as already being qualified. Those authorized to help with malware issues have a gold shield next to their name and authorized malware removal trainees have a blue shield next to their names. Anyone wishing to participate in a training program should contact a Moderator for more information.

I'm going to close this thread and ask you to repost in the Malware Removal & HijackThis Logs forum for the proper assistance.