Can't load any apps - urgent

kalvindeane

kalvindeane

kalvindeane

Associate
Joined
13 Jan 2010
Posts
2,032
Location
A box in the Astral Plane
My friends laptop is unable to load any .exe files at all, an error comes up
every time a .exe file is opened saying that the file is infected and asking
if he would like to buy some anti-virus programme. I booted into safe mode
and installed MalwareBytes, ran a full system scan and rebooted normally.
The problem seemed to have disappeared but about 5minutes later it started
again.

I did a quick google search and found tonnes of people saying the same thing,
and the error reports their AV gives are the same too. Apparently the files are
fine and the AV is trying to blackmail people into buying their software.
I wasn't able to find the AV on the HDD using Windows Explorer, so I'm guessing
that it's masking itself.

Can some kind soul tell me how to remove the av completely, I'll be taking
a look at the laptop again tomorrow. When I tried running an AVG scan when
in normal mode, it came up with hundereds of problems, and asked if he
wanted to buy the software to remove them. I was thinking that it could
be disabled from booting in safe-mode and editing the registrey? I would've
done it by now, but as-of-yet I don't know which files need to be taken
out of the registrey, since searches on google come up with many different
fixes. If you need more info please let me know, as I said, I'll be able to
take a look at it tomorrow
 
I'd boot into safe mode and try a few more online AV checkers.

My GF managed to get infected with this the other day and Microsoft Security Essentials didn't pick it up.

I deleted the ie cache and some files in appdata then run a scan with the Trend online scanner.

That picked up the bits I'd missed and all's right again.

It seems to generate a new random file name every time it runs so it's a bit tricky to tell you exactly what files to delete.
 
Last edited:
as above, run a few online/free av scans to try to get the offending virus. housecall,antispyware,spybot s&d,bitdefender etc.
 
it's not AV. it's pretending to be AV, call it Ransomware.

it's usually very easy to get rid of in my experience.
 
Save and merge this as a .reg file

Code: 
Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]
[-HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[-HKEY_CLASSES_ROOT\secfile]
Will sort the no .exe running.

Then clean it with malwarebytes, etc.
 
You must log in or register to reply here.
Back
Top Bottom