Rogue AV "Virus Protector" launches in Safemode!

I'm running Windows XP Pro - Service Pack 3, IE 7. My wife searched Google for MarieClaire.com and clicked on the top result. Immediatley Virus Protector began running and scanning. She did not stop it quickly enough. It hijacked the entire OS. Task Manager will come up, but End Task and End Process are greyed out. I rebooted to Safe Mode with Networking and the Virus Protector app hijacks safe mode the same way. I can't get to the desktop to run anything. Any ideas on what i can do to remove this version of Virus Protector ?

Remove Virus Protector (Uninstall Guide)
Posted by Grinler on February 19, 2010
http://www.bleepingcomputer.com/virus-remo...virus-protector

Rett, I am having the same issue. The only version of Safe Mode I can get launched without Virus Protector starting is Command Prompt.

Sasha, as soon as you restart your computer (even in Safe Mode) Virus Protector launches and you can't access the Task Manager, Start Menu, etc.

Alytags, I am having the exact same problem as you and I cannot figure out anything to fix it. I wish I had never shut down the PC when I first got it because then I would still have some basic functionality and the Internet to download the Malwarebytes' Anti-Malware. Now the only thing that functions is Safe Mode with Command Prompt, but no clue which commands to use? I spoke with Dell and they told me to re-install my operating system I am not ready for that resort yet. Any help? Thanks, Patty

If you can reboot in safe mode with command prompt, then you can get to your desktop by typing explorer.exe in the command window.

If you have another PC with internet access, you can download malwarebytes install files there and then copy them over via a USB stick, CD, etc.

EDIT: You likely lost access to task manager, which you can get back by searching the forums for TDSSkiller.zip (I think that is the spelling).

Edited by Baym, 08 March 2010 - 12:56 PM.

Hallelujah!!! I was able to restore my system to yesterdays restore point. And to think I almost lost everything because of Dell's crappy instructions to reinstall.

I hope this works for others, here is the information:


http://support.microsoft.com/kb/304449

How to start System Restore by using the Command prompt

If a new program has made your computer behave unpredictably, and uninstalling the new program did not help, you can try the Windows XP System Restore tool.

Important If you have not previously set a restore point in System Restore, you cannot restore your computer to a previous state. If you are not sure, or if you have not previously set a restore point, contact Support.

To start System Restore using the Command prompt, follow these steps:

1. Restart your computer, and then press and hold F8 during the initial startup to start your computer in safe mode with a Command prompt.
2. Use the arrow keys to select the Safe mode with a Command prompt option.
3. If you are prompted to select an operating system, use the arrow keys to select the appropriate operating system for your computer, and then press ENTER.
4. Log on as an administrator or with an account that has administrator credentials.
5. At the command prompt, type %systemroot%\system32\restore\rstrui.exe, and then press ENTER.
(It took a while before the program popped up.)
6. Follow the instructions that appear on the screen to restore your computer to a functional state.
(The restore took a few minutes)

Grats. Now go download malwarebytes, update and scan.