I followed the instructions there disabled with rkill, updated anti-malwarebytes then scanned but it only found one trojan. Upon restart it was still infected and I ran combo fix as well as tried to look in the locations described on the page where it may be manually. I'm not sure but I feel that this particular virus may be a more updated version than the one Anti-Malwarebytes knows? It's not in any of the usual places, or if it is, it's secretly hidden them well from me.
The computer I have to say also had too many startup items for me to be able to affectively run anything as well as the malware/rootkit causing the cpu constantly at 100%. Because of that I tried using ccleaner, msconfig to disable some startup items. I also used spybot search and destroy but the rootkit disabled most of it's features. At this point I'm not sure what is left, but when I did a fresh restart (with msconfig set back to normal startup) about half the processes were down, (leaving cpu at 50% startup so I could at least work on it) The main screen of antivirus system pro (shown in screenshots in the url) seems to have either been deleted or disabled. But a popup still comes up telling me it needs an update - So I know it still exists. I also have combo fix logs telling me detected MBR rootkit hooks: that were hijacked.
Long story short! This computer already has some work done on it, but it's not complete. I need some help! I won't be here very long at all, only for today so I hope someone can respond soon (next hour or so)? I'd really appreciate it. I'm willing to do whatever you post, note that I am capable of understanding complicated instructions so please don't worry about sugar coating it for me I want to get rid of this quickly before I have to leave today. Also wanted to note, there are no restore points on this box. Thank you!
PS - Is there an irc channel I can join?
Edited by faye32, 28 November 2009 - 05:27 PM.