2 weeks ago this had the fakeav that put up false Windows security warnings. The user (not me) didn't understand and installed the malware.
Trend gave some sort of warning but did not remove.
I have run superantispyware successfully to remove, and it gave the name above, 'fakeav'.
I did uncheck 'system restore' when I did that.
One thing I had not seen before was that it changed network settings to use a proxy server, which was the fakeav itself. After removal, machine could not access web, but could ping. Then I changed that setting back, to no proxy server, and could access web.
I cannot install or run malwarebytes. I download ok but on install near the end gives an error, runtime 0 and runtime 440, and it will not actually run.
I uninstalled, which also issued the same errors, and removed all files in the registry, and reinstalled from 2 different sites including malwarebytes itself.
No difference. Repeated google searches for this problem do not help; fixes others have found have not worked here.
User reports that Trend sometimes still issues a warning that 'something' is being blocked. I haven't seen it myself.
I think something is still on this machine and have had success with Malwarebytes in the past.
I dl'd and ran DDS. I got to the black screen, then it disappeared and I did not get the 2 output text windows.
I ran it again and did get the output, so I have those saved.
Edited by jerryc, 17 March 2010 - 09:24 PM.