Windows Security 2011

[garrettmoore]

Hi, my mom's computer became infected with the "Windows XP Security 2011" virus. I tried booting in safe-mode but the virus was preventing MWB from running. For some reason she had another user account on the computer that was never used, so I tried logging into it and the computer ran fine without the virus running at startup. I was able to run a full MWB scan there, it found numerous infections and deleted them all. I then rebooted under her usual account. The virus didn't run at startup but any time I clicked an icon on the desktop, even an application, a Windows box appears asking me to "choose the program you want to use to open this file". Trying to open "System Restore" generates the same box.

Then, if I open the Control Panel and click any icon in there, it opens a box saying "C:\WINDOWS\system32\rundll32.exe Application not found". Trying to open MWB from the Start menu generates the same box.

Does this virus only try to obtain your CC info when you "purchase the full version", or does it do something else?

Any help? Thank you!

[Mainard]

Hello, and welcome to Malwarebytes.org

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

You can follow the directions below and someone will assist you with running scans on your system to see if they can detect anything.

Please print out, read and follow the Directions HERE, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Thank you very much.