security master av controlling my firewall and antivirus in windows security centre
Hello, i really need help with this, my friends laptop got the security master av virus ( he actually thought it was an antivirus prog ), but it is proving VERY difficult to remove, i have tried the the security master av removal tool both in safe mode and normal, i have used rkill , malwarebytes replace hosts file , but it is still there, malwarebytes found over 100 items , mostly adware but some trojans and worms and rogue antispyware things, these were removed , the laptop is now not redirecting web pages or anything like that, it seems fine now apart from the fact i cant download and run avg as it goes halfway and then tells me to removesecurity master av before completeing the installation, but the problem is , i cant find it anywhere on the computer, it is not in add remove progs , i cannot find anything , but in windows security centre it says security master av is protecting your computer it is the firewall and the antivirus and i cannot change them, other things i have tried after searching with google are highjackthis and looking for a specific file , which wasnt in the list, also run DDS and GMER scans and posted logs on the bleepingcomputer website , so far to no avail, also tried the many lists for manual removal which start with killing the processes in task manager , i have been in task manager many times and none of these procesess are there, also the list of files and folders to delete are not on the laptop either , i have been in the appdata folder and the things they tell you to delete are not there , the dam thing is on this laptop but hiding very well, i have no idea what to do now bar throw it out the window , any help would be much appreciated1 person needs an answerI do too
September 8th, 2010 10:27am

http://www.bleepingcomputer.com/virus-removal/remove-security-master-avOne of many found in google, an online scan via www.symantec.com might also help
Free Windows Admin Tool Kit Click here and download it now
September 9th, 2010 1:50am

Thank you , yes i have done that, i followed it to the letter, i have also tried manual removal which guides you to stopping certain tasks , disabling DLL files and going through registry to delete certain files, but running all the spyware and various other things must have got rid of all that because there are no processes in task manager related to this security master av, when i tried to disabl;e the dll files i was told they were not found, also went through the registry following direction to files and they were not there, but i cannot download and install any anti virus as every one says halfway through installing, that i need to remove security master av !! this is the problem i cant uninstall the thing as i dont know where iits hiding, it is in windows security centre running a firewall and the antivirus with no way to switch either off, this is not in my add remove programs , it is not in program files in C: drive, it also does not seem to have any processes running in task manager, this is some of the processes listed as being related to this virus -SM345d.exeDBOLE.exesld.exei dont have any of the in task manager there are many websites to help to get rid of this and i have been through them all but i still cant get this to let go of my windows security centre
September 11th, 2010 9:12am

Download and Run SAS Portable (does not have to be safemode, but may be faster) Make sure to unplug/disable the internet from the PC, go to preferences, click the second tab and make sure the terminate services before removal is checked, then run a Full scan, after its done make sure everything it found is checked, click next to remove everything, Reboot and let us know if it is still there. Most scans done while the internet is connected the virus/malware just reinstalls itself before shutdown."There are only 10 types of people in the world. Those that understand binary, and those that don't." [_1337_Pete_]
Free Windows Admin Tool Kit Click here and download it now
September 14th, 2010 5:06pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics