Welcome to ECCIE - Sign up today!

tikkler33 · 06-08-2010, 11:30 AM

Somehow I accidentally got this on my computer. I can't find anyway to delete it or remove it. I went to Google and found that there are sites for AV Security Suite removal, but the virus even prevents those sites from opening up. It's a really bad bug. Any idea on how to get rid of this thing? Ad Aware and Malwarebytes can't touch it. Thanks in advance.

Bushaholic · 06-08-2010, 11:55 AM

Did you just run MalwareByte's normally or did you follow a step-by-step process with MalwareByte's specific to the removal of AV Security Suite as described here: http://www.bleepingcomputer.com/viru...security-suite

There seems to be pages-and-pages of scam links on Google regarding the removal of "AV Security Suite", and are actually veiled advertisements for other companies products they want you to purchase. These are often BS ads/scams to remove the malware but require you to purchase something in the end to achieve that. Many shady companies market their "lessor known" malware products by creating a webpage specific to a certain malware, making it look like a possible free removal tool, or instructions, they will often have you download something, it will detect the malware, but won't typically offer to remove it unless you pay for their product. History on the internet often finds purchases of these "lessor known" malware products don't end-up doing their job. Just giving you a heads-up on that so you don't get sucked-in spending too much time or money on them. Who knows if most are BS products that don't work, with a company based overseas that's shady and doesn't give refunds?

If the steps detailed on the BleepingComputer link (first link at the top) don't work, then you might check the next one in this post. There appears to be a removal tool (that might end-up costing you) on the page to the next link I'll show, but below that there seems to be manual removal instructions you could try for free, if you're comfortable with regedit or registry editing software.

CAUTION - before giving you the link, be very careful doing registry editing, if you do one thing wrong your system might not reboot! Always back-up your registry before doing any reg-editing, and create a "system restore" point. It may be best to have someone you know whose familiar with reg-editing do that for you, if you're uncomfortable with that, or haven't done it before. Here's the link...

http://www.virusremovalguru.com/?p=6257 (scroll til you see the manual removal instructions)

I found some other links that might provide help, but don't have time to thoroughly look into them. Check these out and some of the comments left on these pages appear to have additional links...

http://answers.yahoo.com/question/in...3184515AA9VmDq
http://answers.yahoo.com/question/in...4072354AAVL6iE

Other than that, you might try some of the things I stated in this thread that aren't specific to "loudmo" http://www.eccie.net/showpost.php?p=342016&postcount=5

SIDENOTE - you stated that you can't open sites from your PC to look at the instructions for removal of AV Security Suite. That being the case, you may have to look at links regarding that from another PC. Maybe print them out and then follow those printed instructions from your PC. Or you might try booting into "safe mode with networking" (F8) and see if it turns-off "AV Security Suite's" processes, and if you can then access the internet, thus being able to follow the links and instructions for removal that way.

Mokoa · 06-08-2010, 09:27 PM

One of the first things some of the nastier code does is cut off access to the Internet so the infected computer cannot get help. I suggest you go get the following of the Internet from a different computer.

Malwarebytes Anti-malware Go here... Malwarebytes
avast! anti-virus Go here... Download avast!
CCleaner Go here... CCleaner

Install an use them to clean up the infected computer.

DarthMaul · 06-08-2010, 10:59 PM

I use Windows Defender...it's free to download and as long as you use Firefox or Opera you should be ok.

tikkler33 · 06-09-2010, 12:23 PM

I was finally able to download Super Anti Spyware and run it. Took 2 times but it finally got rid of it. That is a bad ass virus!
Thanks for the help.

Mokoa · 06-09-2010, 07:19 PM

Glad to read that you were able to take care of it.

tikkler33 · 06-10-2010, 09:34 AM

I'm just hoping it doesn't resurface. Some of these things are like cancer. You think it's gone, but they hide and pop back up when you don't expect them to.

Mokoa · 06-10-2010, 06:42 PM

Keep your anti-virus stuff up to date. Scan regularly.

Vigilance is what will help you.

MisterHx · 06-12-2010, 04:38 PM

I do hard drive cleaning as a side job. I am now a code writer and moved away from full technical support. But the sites provided by others are well known to help you clean your system. http://www.bleepingcomputer.com is good site to help you. Should you ever run into something you never seen, GOOGLE it. Seriously, only rarely do you run into things not seen before and usually its something that just came out as I have encountered that 2 times in my life.

I use the following: AVG Anti-virus, Malwarebytes, Spybot, Hijackthis
these tools help me clean almost anything and they are free. As far as your browsing well I recommend Firefox with NoScript installed. This will prevent websites from auto-running stuff. IE sort of does that NOW but not like NoScript. NoScript you have to accept it on each site you go so its annoying at first but the settings are either NEVER, Temporarily (for current session), or always (use this for trusted sites such as ECCIE.NET).

You have to use a combination of tools to prevent things but you are never 100% because some jerk out there is writing something new that people have not seen. Btw, if you know someone (like me) who can pull out your harddrive and scan it offline, this is best way to clean it and make sure you dont lose data.

I will say this, if you get a rootkit virus, you are pretty much screwed. These are the latest hard to remove virii, they bury themselves into the registry of windows elsewhere on the harddrive making it each time you boot up the machine slower and slower to the point of death.

Pinkerton · 06-19-2010, 01:20 PM

Unfortunately I am an expert in this problem as AV Security has infected my computer twice. So here's the key to removing it.

1. You have to be in safe mode. Reboot your computer and continually hit the F-8 key as it is booting up. This will take it to safe mode.

2. Hopefully you have a spyware program already installed. I use malwarebytes and ad-aware. If you are in safe mode, you will be able to run scans. Malwarebytes found 8 infected files on my computer. It removed them and after I rebooted I was good to go. Simple as that.

If you are not in safe mode, the AV Security program will not allow you to run any scans and will annoy the heck out of you. Good luck!

PS I found that when you Google AV Security Suite you will find a ton of site that will help you remove the virus. However most want you to buy their programs before allowing you to download the removal tool. My way is free and works!