antimalaware doctor keeps coming back

[bartmanekul]

Had this on the girlfriends laptop, and couldn't get rid of it. So I just did a restore from the system partition that Dell handily sticks on there.

However, it's back. She is adamant that she only goes on facebook and steam websites, so it's not back that way.

It had Avast installed and updated (she won't pay for AV), and yet it still got on there.

I found instructions on how to get rid: http://www.bleepingcomputer.com/virus-r ... are-doctor

But that's pointless unless I find out where it's coming from.

Only things I can think of:

It's somehow put itself on the Dell install partition, and gets back that way.

It's on a form of removable mass memory, her phone is the only thing I can think of, though I don't think she connects it often.

Her router is somehow compromised, and redirecting to websites. Highly unlikely, but possible since I think the defaults are there, i.e. username and password. I will change this when I get the chance.

How can I check for any of these?

And has anyone got any other ideas?

[Gecko]

bartmanekul

It came from the internet, it's the only way this rouge ware installs itself.
Facebook is only safe if you stay on your Facebook page only!
So there's a chance it came through Facebook, if she goes to other peoples Facebook pages or links.
If she's using IE then the chances are even greater of getting infected and never knowing how or where!

Use the removal instruction given in the bleeping computer link you posted.
Once you stop it from running Malwarebytes should find all aspects of this rouge ware and remove it.

These types of rouge ware infections are constantly evolving to stay ahead of Anti Virus and Anti Malware programs.