Thread: Antivirus Soft
View Single Post
  #3  
Old February 15th 10, 02:51 PM posted to microsoft.public.windowsxp.security_admin
Nepatsfan
external usenet poster
 
Posts: 3,023
Default Antivirus Soft

"brickman" wrote in message
news
What a headache do I have! My other computer got infected with Antivirus
Soft, I believe it is malware. The problem is that it will not let me
browse
the internet to download Malwarebite's Antimalware, which I read in a post
that will take care of it, it really does not let me browse for anything!
it
keeps going to www.metalsoft.com and will not even let me do a system
restore, that PC is running XP Home PLEASE HEEEEEEEEELP!!!!!!!!!!



I had to remove this pest from my niece's computer last week so I'll pass
along what worked for me. Since you have another computer that's not
infected you can use that machine to download the programs you'll need to
fix the problem.

To get back control of Internet Explorer you can try following the
instructions in this article about making changes in Internet Options. It
involves disabling the proxy setting that Antivirus Soft sets up. Go to
Control Panel, open Internet Options, click on the Connections tab, Click on
Lan Settings, uncheck the box in the Proxy Server section.

http://www.bleepingcomputer.com/viru...antivirus-soft

Another option to regain the ability to download programs is to install
Firefox on the infected machine. Firefox was already installed on the my
niece's machine so it made things a lot easier.

http://www.mozilla.com/en-US/product...win&lang=en-US

I also had to disable the registry entry that launched Antivirus Soft at
startup. It was located here.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Look for an entry with a random series of letters for the program name.

I ran Malwarebytes Anti-Malware along with a program called Trojan Remover
and that combination seemed to get the job done. I ran them first in Safe
Mode and then again in Normal Mode.

Malwarebytes Anti-Malware
http://www.malwarebytes.org/mbam.php

Trojan Remover
http://www.simplysup.com/

Good luck

Nepatsfan


Ads