Help All Programs Disabled After Removing Xp Antivirus 2012 malware

[Switchblade]

Hello I've been using mbam for years and i have conquered all viruses in my path with this wonderful program.

So yesterday whilst browsing the web Avira blocked a Trojan when i clicked remove my browser closed and the fake AV software began to run. I have had a similar virus before and i followed the same steps i used to remove it.

1. booted into safe-mode with out networking, reinstalled mbam and manually updated i also reinstalled superantispyware and manually updated that as well

2. i ran both programs mbam found 7 infections and removed them upon reboot. I went back into safe-mode and ran SAS which also found several more and were removed upon reboot.

Here's my problem upon normal reboot i cannot open any exe, if i try it comes up with an (Open with) dialogue box. Also there is a small Red shield named windows security alerts in the task bar which I'm almost positive it part of the virus, however upon 2-3 more scans of both mbam and SAS in safe-mode nothing has been found.

please help

Switchblade

[LDTate]

DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.

Vista and Windows 7 users:

1. These tools MUST be run from the executable. (.exe) every time you run them

2. With Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

I suggest you do this:

XP Users

Double-click My Computer.

Click the Tools menu, and then click Folder Options.

Click the View tab.

Uncheck "Hide file extensions for known file types."

Under the "Hidden files" folder, select "Show hidden files and folders."

Uncheck "Hide protected operating system files."

Click Apply, and then click OK.

Vista Win7 Users

To enable the viewing of hidden and protected system files in Windows Vista please follow these steps:

Close all programs so that you are at your desktop.

Click on the Start button. This is the small round button with the Windows flag in the lower left corner.

Click on the Control Panel menu option.

When the control panel opens you can either be in Classic View or Control Panel Home view:

If you are in the Classic View do the following:

Double-click on the Folder Options icon.

Click on the View tab.

If you are in the Control Panel Home view do the following:

Click on the Appearance and Personalization link.

Click on Show Hidden Files or Folders.

Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.

Remove the checkmark from the checkbox labeled Hide extensions for known file types.

Remove the checkmark from the checkbox labeled Hide protected operating system files.

Please do not delete anything unless instructed to.

Next:

• Please download Malwarebytes' Anti-Malware from here
  If you are unable to do this from the infected computer directly, transfer the file from another computer.
  
• Download the mbam-setup.exe to your desktop.
  
• Now make sure extensions are shown. To do this, please look here
  
• Then rename the mbam-setup.exe: to explorer.exe:
  
• Then launch explorer.exe in order to install Malwarebytes' Anti-malware
  
• Once Malwarebytes' Anti-Malware is installed, navigate to your Program Files\Malwarebytes' Anti-Malware folder and locate the mbam.exe in there:
  
  rename it to iexplore.exe:
  
  
• Now doubleclick iexplore.exe to launch Malwarebytes' Anti-malware.
  
• Click the "Update" tab and click the "Check For updates" button.
  
• Once the program has loaded and updates were downloaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart, so please allow MBAM to restart.
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  

Please don't attach the scans / logs, use "copy/paste".

Also please describe how your computer behaves at the moment.

[LDTate]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!