This was recently inadvertantly downloaded on my computer, and its really annoying. It says i have a whole bunch of infections and wants me to buy their software. I have had this before and i was able to remove it with spyware doctor but its not allowing me to open spyware doctor. Im trying to delete it manually but it’s not allowing me to open my task manager so i can close the process. Can anyone help me with removing it?
Chosen Answer:
Start up in safe mode and then use spyware doctor. Failing that http://www.bleepingcomputer.com/forums/ is a great website fo info on the latest malware threats.
by:
on: 27th December 10
Posted in 
Tags: 
try
malwarebytes and spybot search and destroy
both programs are free and should help you( try malwarebytes first because it seems to me that you have malware)
If you’re trying to get rid of spyware generally you want to do it in this order until you fix it
1- malwarebytes
2- remove anything that shouldnt be there from startup using msconfig
3- see if anything fishy is leftover in hijackthis (careful what you remove, research anything that looks fishy first)
4- if its a rootkit (antivirus 2011 is) sometimes TDSkiller will help (pretty safe/easy)
5- last result is combofix. sometimes combofix takes good stuff with it, so its last resort… make sure you got a windows backup / restore point first.
The more you go through this process, the more you’ll be able to recognize what is and isnt fishy, and it will get quicker / easier. you can get rid of almost anything by following these steps
Start up in safe mode and then use spyware doctor. Failing that http://www.bleepingcomputer.com/forums/ is a great website fo info on the latest malware threats.
Read Everything Here Before You Do Anything-
i had a similar problem once. but it took a little while to solve.
you can try opening task manager by pressing CTRL+SHIFT+ESC.
if that doesnt work then you can just do what i did, and restart the computer in safe mode, login to your account, go to start button, and type “msconfig.exe”.
now you will see another window come up. go to the tab that says Startup.
if you see anything that you arnt familiar with then uncheck the box beside it.
—the reason i say to do this is because these types of things are usually fake anti-virus software, and they will make themselves start automatically to keep you from exiting it by other means, such as the task manager.
after you uncheck all the ones that you dont know then look on the section of those entries under the Locations organizer tab. if they still point to a program that you dont know then leave them unchecked. write down all the ones that you left unchecked
now is the longer part of this process
check all of those that you left unchecked except for one.
restart the computer and if the Internet Antivirus 2011 comes up then restart the computer in safe mode again and open msconfig.exe again.
go through this process and change which one is unchecked.
once you start the computer and the Antivirus does not come up then you have found the right startup entry.
but we arnt done yet.
once logged in normally then go to msconfig.exe again.
find that startup entry that you left unchecked.
no under the Locations organizer tab look at where the file is.
it should be something like
C:\Folder Name\Folder Name\Program.exe
but not with those exact words of course.
click on the start button and go to My Computer.
in the address bar at the top of my computer type everything that you see in the locations organizer tab in msconfig.
but be sure not to put the last part of its location in, everything after the last back-slash you can leave out.
once you get to the folder that it opens, delete the file that is displayed at the last part of the locations tab on msconfig.exe
sorry that this was so long, but that is what i did.
im sure there are easier ways to do this but i dont know for sure.
Try scanning your computer with Malwarebytes. What I’ve found is while antivirus software is good for viruses, it’s not that great with spyware/malware.
Malwarebytes – https://store.malwarebytes.org/342/cookie?affiliate=9230&redirectto=http%3a%2f%2fwww.malwarebytes.org%2f&product=29945 – is the best anti-spyware/malware scanner/remover I know of. Download Malwarebytes FREE (as you only need it to scan and clean otherwise the PRO version has real time scan but it’s a PAID version). You can download the free version here: https://store.malwarebytes.org/342/cookie?affiliate=9230&redirectto=http%3a%2f%2fwww.malwarebytes.org%2f&product=29945 . I have used Malwarebytes at various client sites in the past and it has always been good a picking up nasties and removing them that antivirus software such as Symantec, Trend and NOD32 was unable to do.
Here what I would recommend you should do:
1. Download Malwarebytes from here: https://store.malwarebytes.org/342/cookie?affiliate=9230&redirectto=http%3a%2f%2fwww.malwarebytes.org%2f&product=29945
2. Restart your computer. When your computer starts up, after the BIOS/logo screen, press [F8] and choose “SAFE MODE with Networking” (*very important!*). Install Malwarebytes on your computer. Now update Malwarebytes.
3. Open Malwarebytes and do a **FULL SCAN** (very important to do FULL SCAN) from Malwarebytes and wait for it to finish. This will take some time to complete so be patient.
4. Remove/delete all the nasties it has found then reboot your computer again in *SAFE MODE*.
5. Run a [FULL SCAN] again from Malwarebytes in case there are more nasties that didn’t show up the first time as generally deleting the first lot of nasties, it ‘unhides’ more nasties.
Now see how your computer behaves afterwards.
Let me know how you get on and whether this has fixed it
(Remember: The FREE version is great for scanning and removing spyware/malware. However the FREE version of Malwarebytes will *NOT* do real time scanning or real time protection. So if you want to protect yourself going forward, you may want to consider getting the PRO version instead)
Use “rkill” to stop Internet Antivirus 2011 http://www.bleepingcomputer.com/download/anti-virus/rkill
Then remove Internet Antivirus 2011 manually or use Malwarebytes Antimalware or Hitman pro to remove it from your computer.
http://www.malwarebytes.org/
http://www.surfright.nl/en/hitmanpro
Detailed removal guide:
Hey,
First Reboot into Safe Mode with Networking.
To get to Safe Mode restart the computer, and as soon as the computer starts, begin to tap the F8 key until the boot menu appears. Use the arrow keys on the keyboard to select Safe mode, and then press Enter. If prompted, log on as administrator.
Then you will need to find and remove all infected files. Here is a list of files that you will have to erase: http://www.pcthreat.com/parasitebyid-15431en.html
You should reconsider the Antivirus software that you use.
Good luck