microsoft security essentials virus popping up in safe mode???

[Nathan Brazil]

This is popping up in safe mode. I can start the malware scan but the virus will shut down any scans after seconds. Help!!!!!!!

I followed the directions supplied.

It failed to run the setup. The fake alert popped up and the setup screen immediately disappeared.

[MrCharlie]

Welcome to the forum.

Carefully read and follow this Guide.

Make sure you run rkill and then immediately run MBAM as desribed.

Most important....update MBAM before you run it.

The link below explains how to rename MBAM set-up if needed:

http://forums.malwarebytes.org/index.php?s...st&p=274963

Post the logs back here, Good Luck....MrC

[Nathan Brazil]

Thanks for you assistance. No luck so far. Can't run the batch file. I've tried the rkill about 100 times and no go so far.

I will try again tomorrow- hopefully with more success.

This is the first time I've had a virus popup IN safe mode.

[MrCharlie]

OK, try all versions of rkill and if no luck...

Try RogueKiller:

http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

http://en.kioskea.net/faq/11626-roguekiller-tutorial <---tutorial

Download RogueKiller on your desktop

Quit all running programs

For Vista/Seven, right click -> run as administrator, for XP simply run RogueKiller.exe

When prompted, type 1 and validate

The RKreport.txt shall be generated next to the executable.

If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe

Then run MBAM.

--------------------------------

If no of that works...please do this:

Please download OTL from one of the links below:

http://oldtimer.geekstogo.com/OTL.scr

http://oldtimer.geekstogo.com/OTL.com

Save it to your desktop.

Double click on the icon on your desktop.

Click the Scan All Users checkbox.

Push the Quick Scan button.

Two reports will open, copy and paste them in a reply here: (or attach them as .txt files)

OTListIt.txt <-- Will be opened

Extra.txt <-- Will be minimized

MrC

[Nathan Brazil]

The renamed rkill worked like a charm. The ongoing battle with hackers. You make an adjustment and then they change the virus to work around it.

Thanks a ton. Malware is running now.

[LDTate]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!