THANKS to all the help you have given me & others here!! You Rock!!
I am trying to help my brother-in-law who called to say his Mccafe was not running and he could go to no AntiVirus sites or Malwarebytes would not run/ renaming/reinstalling etc. did nothing! We both run XP SP 3- his is Media Edition which I think is the most vulnerable XP Edition around.
When I went over there, upon Normal Boot-up there was advertisings coming through the speakers? No process showed for it? After trial & error to get Mccafe completely removed, so to install Avira- Finally got it. But, Avira never would come up on taskbar, so basically it would not run, nor ever ran any scans. Removed the Malwarebytes, deleted folders, etc. Did Safe Mode w/Networking got Malwarebytes to install by tricking it with rename, got installed started scan then just closed. UGH!!
So, ONLY in safe-mode again, was able to go to Avira, I did get the Anti-Rootkit Tool to install/run, but with no options to FIX? It showed:
23 HIDDEN/LOCKED FILES (INVISIBLE TO THE WINDOW API) ALL BEGAN WITH (H8SRT) but with different
names afterward and different extensions (exe, dat, tmp, few others) and most, but not all were in SYSTEM32.
So, my questions is this:
Is this even removable? Is it safe afterwards if we do get it removed? Or, what I am thinking-
IS A TOTAL SYSTEM RECOVERY the only way to go here?
Thanks & Happy New Year!
You have helped me remove AntiVirusPro 2009 & Security something Infection from my moms succesfully!! This is the best forum around for so many!!
I trust your answer completely!