Virus posing as antivirus software!

[Krenzathal]

Hi all! I've just contracted a nasty virus on my desktop! I think I clicked on a bad link while searching for some video software!

Anyway, this virus is posing as an Antivirus alert that pops up at the bottom right corner with the title "Antivirus software alert" in a red bar with the windows logo on it. As I use Avast! I knew it was a fake!

The problem is that the virus will not let me access the internet or run taskmanager or go to control panel! and Internet explorer keeps popping up!

I'm really stuck about what to do! I've run a pre boot system scan with Avast! Which found something and I moved it to the chest but when I rebooted the same problems were still there! Should I run it again and actually delete any infections rather than move them to the chest?

Does anyone know anything about this virus or how to get rid of it? I'm really worried that Avast had no effect on it as usually it is very reliable!

Sorry if I'm in the wrong section!

Please help, I'm a bit desperate!

Thanks!

[Gecko]

Hello Krenzathal,

Please download HijackThis http://downloads.malwareremoval.com/hijackthis.zip and save it to your desktop.

To extract HijackThis:

1. Right-click your file HijackThis.zip and from the menu select "Extract All".
2. The Extraction Wizard Window will appear, Click "Next".
3. Click Browse and navigate to "C:\" or the "C:\Program Files" and click "Create A New Folder" and call it "HJT" or "HijackThis" or whatever that is easy to remember and then click OK.
4. Click the Extract button.
5. Close the HijackThis.zip dialogue box.

Now double-click on hijackthis.exe and when the window opens, Press the Scan now and save a logfile button and then when it is done, copy and paste the contents of the notepad it opens as a reply to this post.

[Krenzathal]

Hi, thanks for the reply!

Unfortunatly everytime I try to open, well anything really I get a security warning saying "Application cannot be executed the file "Whatever the file is" is infected. Do you want to activate your antivirus software now? Then an option for yes or no, obviously pointing to the virus.

I normally use Hijack this regularly but it won't open so I can't post any results here. I tried doing exactly what you said but it won't let me use winrar either to extract it!

Sorry!

[Gecko]

Krenzathal

Please download to your desktop.

Double click combofix.exe and follow the prompts.

If combofix will not start or is ended before the "Blue window" please rename combofix.exe to cbf.exe and try again.

If cbf.exe will not start or is ended, you will have to run cbf.exe from safe mode.
Reboot in to Safe mode:
Restart Windows after you see the BIOS screen and before Windows starts to load.
Start tapping the F8 key. The Windows Advanced Options Menu appears.
Use the Arrow key to ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.

Do not exit Combofix while it is running you my loose all your personal settings!
Important Note - Do not mouseclick combofix's window while it's running, that may cause it to stall.

When it's done running it will produce a log for you. Please post that log in your next reply.