cancel
Showing results for 
Search instead for 
Did you mean: 
GoocherLee
Level 7

Infected so bad I can't even start the support chat program

Hello... antivirus software expired dec 1st, got slammed last night with 34 threats. Don't want Spyware but rather McAfee... bought the antivirus subscription last night but can't execute anything. Started the purchase process for the online support to get removal assistance... and even that won't run. It downloaded, but will not execute. Nothing will, not even my system restore will execute. Any ideas?

0 Kudos
3 Replies
Peacekeeper
Level 20

Re: Infected so bad I can't even start the support chat program

If you are sure it is infected four tests

Scan using http://vil.nai.com/vil/stinger/

Oh it requires a download so if that does not work or find anything try a

Scan in dos using Mcafee (I have used this on friends Pcs and it works good. a tad slow but it finds a lot.
see http://service.mcafee.com/faqdocument.aspx?id=TS100288

If things are still unstable or your want a second opinion then to be on the safe side scan with the free versions of these tools:

http://www.superantispyware.com/superantispywarefreevspro.html

http://www.malwarebytes.org/mbam.php
If malwarebytes was already installed and the virus could be protecting itself against it try this
In order to get Malwarebytes running, you'll need to rename the executable.. If Malwarebytes is already
installed, open the C:\Program Files\Malwarebytes Antimalware folder, then rename the "mbam.exe" file
to something else, like "gogetum.com", then double click directly on the file to open the program.
After updating the program, Run a full system scan using Malwarebytes

Update both programs them before running them and let them clean anything they find. If they quarantine
a file or fails to remove a file try to get a copy of it and send it to Mcafee using the virus submission path described here.
https://www.webimmune.net/default.asp
or
http://vil.nai.com/vil/submit-sample.aspx

0 Kudos
GoocherLee
Level 7

Re: Infected so bad I can't even start the support chat program

Tried to rename file to gogetum.com, but when I dbl click I get the following:"Application cannot be executed. The file gogetum.com.exe is infected. Do you want to activate your antivirus software now? ---Which of course stalls at the usual address: hxxp://winsecure2010.com/purchase?r=57.0

Message was edited by: SamPrice - amended URL in case of accidental access.  on 12/3/09 7:03 AM
0 Kudos
Peacekeeper
Level 20

Re: Infected so bad I can't even start the support chat program

Winsecure2010 is a hijacked domain promoting a fake antivirus Antivirus System PRO.  Try the scan in dos or follow the instructions here the problem is they also suggest Malwarebytes. Maybe download it on another pc and installl via a stick?

Message was edited by: Peacekeeper on 12/3/09 1:37 PM
0 Kudos