Can't get rid of security suite, please help

[mamosley]

If someone could please help me get rid of security suite, I would greatly appreciate it.

After hours of work last night, I was FINALLY able to scan my computer with malwarebytes after renaming the folder and it came up with 15 infections, which I promptly deleted then rebooted my computer in normal mode. Unfortunately, the first thing to come up when I rebooted was security suite. I can

[Maurice Naggar]

Hello mamosley,

The rogues often come with hidden re-infection vectors. It is not enough to just run MBAM. And it sometimes takes expert guided help.

Let me suggest, if you're an MBAM customer, you contact the help desk at support@malwarebytes.org

Alternatively, Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Please post there Gmer.txt log

the DDS logs

Don't post your logs here, please.

[mamosley]

Sir, are these all to be run in safe mode, which is the only way I can access programs?

Edited September 3, 2010 by Maurice Naggar
removed quote section

[Maurice Naggar]

As you go along, here, when about to start a reply, please as much as possible, only use the AddReply butoon to start reply.

Otherwise, you end up quoting whole lots of text.

Now then, what exact message are you getting when you try to run the tools?

P.S. The tools should be run in Normal mode, as much as possible.

Sometimes it helps to bring up Windows Task Manager ( CTRL+ALT+DEL)

and then do a New Task Run

and guide the dialog to the exact location (folder) plus exe name to start the tool.

Let me know the message you get.

Edited September 3, 2010 by Maurice Naggar

[mamosley]

Sorry about that!

When in safe mode, I can open the programs after renaming them. Oddly, I can open every program in safe mode EXCEPT for spyware/malware removal software, in which case I have to rename them, and it opens properly. In NORMAL mode, if I attempt to open ANY program, it tells me it cannot open it because it is infected (this includes task manager). I am thinking that if I can run malwarebytes in normal mode, it will eliminate the problem, but I can't figure out how to open it. Again, thank you for your assistance.

[Maurice Naggar]

Do not try to run MBAM at this time. It is more important to get some required logs. But before you do that, do these:

Download exeHelper and SAVE to your Desktop.

Double-click on exeHelper.com to start it.

A black window (command prompt) should pop up, press any key to close once the utility is completed.

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

For directions on how, see How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Do NOT turn off the firewall

Please download Rkill by Grinler and save it to your desktop.

Link 2
Link 3
Link 4
Double-click on the Rkill desktop icon to run the tool.
If using Vista, right-click on it and Run As Administrator.
A black Command prompt will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
If the tool does not run from any of the links provided, please let me know.
If your antivirus program gives a prompt message, respond positive to allow RKILL to run.
If a malware-rogue gives a message regarding RKILL, proceed forward to running RKILL

Download to your Desktop FixPolicies.exe, by Bill Castner, MS-MVP, a self-extracting ZIP archive from

>>> here <<<

• Double-click FixPolicies.exe.
  
• Click the "Install" button on the bottom toolbar of the box that will open.
  
• The program will create a new Folder called FixPolicies.
  
• Double-click to Open the new Folder, and then double-click the file within: Fix_Policies.cmd.
  
• A black box will briefly appear and then close.
  
• This fix may prove temporary. Active malware may revert these changes at your next startup. You can safely run the utility again.
  

After you have run these 3 utilities, go back to the link I gave you in my first reply.

Do not run MBAM. Do as much as possible of the other requirements. If Normal mode if possible. If not, try Safe Mode With Networking

Then create a new topic as per http://www.malwarebytes.org/forums/index.php?showtopic=9573