Posted 05 February 2010 - 01:26 AM
Hi! Long-time reader, first-time poster (although probably not the first person to use that line). I'm using my laptop right now, but the infected computer is a Gateway 504GR running Windows XP SP2.
The first time IS2010 installed itself on my computer, I used rkill and MBAM to get rid of it, and that seemed to work.
Two weeks later, I was browsing and it installed itself again.
However, I couldn't make the rkill file run in Safe Mode with networking. I rebooted to regular mode, discovered I couldn't access rkill or MBAM in regular mode and transferred them via USB to the desktop's desktop from my clean laptop.
I ran rkill. Rkill posted a log like it did the last week I used it, but this time, after about a minute, IS2010 came back and started its fake scan again.
I tried to run MBAM-setup.exe. That did nothing but bring up IS2010 again. I tried running the already installed version from my start menu. Nothing.
I was hoping I was immunized from this btard malware last time. I guess not. My assumption is that because MBAM was already installed, the virus immunized itself against it, but I didn't think it was clever enough to trick rkill as well. rkill thinks it worked when it didn't. I turned the computer off becuase even on the login user screen, the computer seemed to be thinking hard (making more noise), more than normal on that screen. Any suggestions as to what to do now?
Edit: Moved topic from XP to the more appropriate forum. ~ Animal