Help My Friend Has a Virus, and It's Kicking Some Ass

[HaterSlayer]

A female friend of mine got a virus on her PC somehow. I tried helping her with it before and thought she got it taken care of, but she didn't. Her mom bought Norton 360, but the virus wont allow it to install. I told her to go into safemode, but Windows wont install it in safe mode.

Earlier I tried to get her to do the same thing with MSE, but the same situation happened. So right now we're kinda stuck. What should she do?

----------------
Listening to: Alicia Keys - Un-Thinkable (I'm Ready)
via FoxyTunes

 

[lxskllr]

I'd try a bootable CD with A/V tools on it. Try the Avira AntiVir Rescue System from here...

http://www.avira.com/en/support/support_downloads.html

 

[MadScientist]

As lxskllr suggested, try the bootable Avira Rescue System first.

If that does not work download and run Combofix in Safe Mode with Networking. It usually can run when other AV programs can not install and run because it runs in the Command Prompt/DOS window from an exe file.
Gets the latest version here: http://www.bleepingcomputer.com/combofix/how-to-use-combofix

 

[BW86]

I'd try a bootable CD with A/V tools on it. Try the Avira AntiVir Rescue System from here...

http://www.avira.com/en/support/support_downloads.html

:thumbsup;

I used this on a few clients PCs and it works great

 

[StormSide]

If you run Hitman Pro (build 88 or newer) from a USB stick and start its EXE while holding down the left Ctrl-key, then Hitman Pro will kill every non-essential process running under the user's context, including the rogue infection. You can then scan with HMP and any other on demand scanner.

Make sure you hold down the left ctrl key until Hitman Pro is running!

http://www.surfright.nl/en/hitmanpro

Video - http://www.youtube.com/watch?v=m6eRWTv2STk

 

[blackangst1]

Norton360 is bootable also...since she already has it.

 

[jackofalltrades]

That sounds like a virus my wife got on her desktop and it looked like it was a virus scanner notifiying her of the infection but it was actually the virus itself. I googled the problem and it recommended downloading mailwarebytes and a program called rkill you run rkill first and it stops the program then mailwarebytes is installed and allowed to run and it will find the problem and you must allow it to take out every problem it finds then when you reboot the world will be a better place. if you have the virus I'm talking about it will pop up a window telling you that you have a virus and if you pay for the fix it can be removed, don't do it!

 

[HaterSlayer]

Thanks for the help guys. I'll respond with some progress.