A Virus that deletes/disables virus scanners

[Flamzart]

I recently got infected by Anti-virus 201X cant remember now if it was 2010 or 11.

The second i saw it popup i immediately went to control panel >add-remove programs and ran the uninstaller

ran spybot search and destroy

started scanning then boom spybot process died and the spybot executable was deleted or sent to the twilight zone when i try to run it agin via the link on the desktop i get

"Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."

So far i have also tryd

Avast

Avg

Antivir

hijack this

spyhunter

OTL

spywaredoctor

everset < just to see what processes where running, it died none the less

i next tryed malwarebytes i let it update then started scanning

So far i have determined that when ANY program starts to scan memory to see what processes are running the exact same aforementioned stuff happens with the scanning process being killed and the executable being deleted or sent to the twilight zone with the link giving an "access denied" style error when ran.

should i kill the windows partiotion and reinstall?

[shadowwar]

This should be able to be killed in safe mode fairly easy with malwarebytes combofix and/or a run of sfc /scannow from normal mode. This is one of a few exceptions where safe mode is necessary to remove it. To restore the permissions on the exe files that are blocked you have to reset the permissions on the parent folder replacing permissions on child objects. You definitely don't need to format. If you need help removing this i can move this post to our removal forum.

[noknojon]

Hi and Welcome -

This is the link to our experts who can assisst you to remove the infection -

I would not run Combofix without one of them supervising the process -

As we do not work on Malware removal or diagnostics in the general forums please follow these directions -

Please print out, read and follow What do I do now? , skipping any steps you are unable to complete.

The next step is post a New Topic Here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that

you're alerted when someone has replied to your post - Please allow at least 48 hours for a reply as the experts can get busy at times -

Also add a brief note to the experts as to your problems -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or via This Link

Always use the ADD REPLY Tab at the bottom of the page when you reply -

Thank You -