Any computer guys around?

[Skifledanabit]

My work PC has managed to contest the abnow virus, anti malware won\'t get rid of it and it\'s blocking any attempt at downloading AVG, I\'m running XP.

Got any ideas how to get rid of it, short of wiping the computer?

[B.Martin]

You could stop looking at porn on dodgy sites :Giggle

[Casey]

Try downloading "malwarebytes" and running that. Really good at dealing with most problems.

LINK HERE

Download the free version and decline the "pro" trial wehn asked. The free version is fine.

Run a FULL scan.

[Casey]

Some infections will stop you downlaoding it, in which case you may have to download on another PC and use a USB stick to transfer/install.

[Casey]

If you get really stuck, I\'ve got a bit of time in the next hour or so and might be able to remote into your PC to take a look.

PM me and I\'ll send you my phone number if you want to give that a try.

[Prof]

check your windows\\sytem32\\etc\\hosts file - a lot of malware and viruses nobble the hosts file and create entries for all the major AntiVirus players by spoofing the address back to the local loop back address 127.0.0.1 - this stosp the AntiVirus software from updating itself.
 
A lot of companies have free downloadable removal tools for specific viruses - check their websites from a clean computer and see what you can find.  I know that AVG does a bootable CD running Linux which can clear some infected Windows machines without running Windows - can be handy to stop it spreading.

[Skifledanabit]

I\'ve tried malwarebytes, no luck, sorry Casey, I\'m out of the office now, gave up. I\'ll see what one of my IT mates says.

[ChrisDubbya]

If you can\'t install anything try downloading this -Microsoft Security Scanner

even on another machine and running from a USB should do the trick, it\'s completely standalone so most virus\'/malware can\'t stop it,  I\'ve used it quite succesfully on heavily infected machines that can\'t even open a browser or run anything from the start menu left it going for a few hours and job done!

[m1tch]

Could you not try and get in via safemode (usually tapping F8 when it boots) which should bypass the operating system?

[K7RXX]

Good points above. Another simple option is to try and restore your system to a previous date if you have any saved. Has worked for me on a few occasions.
START > PROGRAMS > ACCESSORIES > SYSTEM TOOLS > SYSTEM RESTORE.
Some Viruses prevent you from doing this and remove the option from start menu all together. Worth a try.
I run a script that creates a new restore point every time I start the computer for such an occasion GL

[Skifledanabit]

Tried system restore, no luck, I\'ll try the options posted, the registry keys etc I wouldn\'t have a clue as I don\'t know what\'s supposed to be there or not.

[Casey]

All the advice above is good stuff

I\'m going to be out all day, but this is looking like a situation where I would physically remove the hard drive, strap it into a fully protected PC (or connect via a USB adapter) and scan the drive without it being active with AVG, MWbytes, Superantispyware.

I don\'t think it\'s going to be easy fixing this whilst the drive and software on it is "active".

Another way to tackle it is to create a "UBCD" (Ultimate Boot CD), which is a WinXP system and tools on a bootable CD. This creates an environment where the hard drive does not boot and you can work on it from the CD installed OS. However, you\'ll need another PC and some PC knowledge to create the CD and use the tools it contains.

UBCD

As mentioned above, I\'ve also used the AVG bootable "rescue disk" suggested above with success in some circumstances. Might be worth a go but, again, requires another PC to create the disk.

AVG CD