I'll give you a rundown of what happened and what I have done already in hopes that someone can give me reccomendations on what to do next to remove this from my HP mini laptop.
I was online the night before last and all of a sudden I started getting pop-up's that a virus had gotten into my system. I had things popping up all over the place and then this "Antivirus IS" service telling me they ran scans and found all these things and to buy their service to have it removed. I realized this was obviously a virus of some sort so I X'd out of everything. Then tried running a scan with my virus software, which is Avast Free edition. While I was doing this, I realized whatever this was happened to be crippling my system. I could not access the internet, any files, even my task manager. After the scan ran, nothing came up, so I went into safe mode with networking in an attempt to find something to download to get this out.
First I was told to try this Reimaging Scan, so I downloaded it and it did the scan and nothing was found. I then tried Malwarebytes, ran a scan and they said they found nothing either.
Last night, I redownloaded MalwareBytes, ran it again and it said it found a couple medium level threats and a few low threats...I had them removed when the scan finished, and rebooted my computer and Antivirus IS was still there. I then tried another service called "Super Anti Spyware" after a 2.5 hour scan, it said I had 2 trojans and 36 infections. I had all removed after scan was complete, and thought it was over. Rebooted my computer and to my dismay, it was still there when I started up. I then tried Spy Doctor, and it to said it found a few things and I quarantined them and the stuff was still there when I rebooted the computer.
Nothing has located and removed this virus yet. I am at a loss. I did download RKill as your site had suggested, and it did stop it from working. I was able to be on normal mode, even though when I tried to access the internet it would not work because of some issues with the proxy servers, I was able to go into internet options and the Lan Settings and remove the proxy's the same as I had to do when I was in safe mode with networking, and nothing has popped up or messed with my system since starting RKill and stopping the malware processes before they could start but I know this thing is still in my system and I want it removed before it ruins anything and I was hoping someone could help me to do this by suggesting what I should do next. I am not sure how to remove anything manually, whether it would end up ruining my system by doing this, or even how to find what I need to remove and nothing else seems to be working so any help would be much appreciated.!
Edited by hamluis, 06 October 2010 - 03:56 PM.
Moved from XP Home to Am I Infected ~ Hamluis.