XP total Security 2011

[BigTC2]

I have a machine infected with XP Total Security 2011. It is completly disabling and will not allow anything to run and I do mean ANYTHING even in safe mode. When trying to run a program or display properties the only response is the XP Total Security 2011 scanner appears. I removed the hard drive and scanned it with a computer with registered and updated MalwareBytes which found nothing. I then Scanned with 4 different AV programs including the very latest from Symantec. No infections of any kind were found. I did find information to manually remove this infection however it was imcomplete or inaccurate and the infection returned within 2 minutes.

I need to return this machine to the client so I imaged another drive with a clean OS and will configure it once on site. I labeled the infected drive and set it aside. Typically I would transfer user information from the old drive to aid in restoring the user profile however as this infection is so far undetectable I can't chance infecting the new hard drive. Worst thing is there is no way to protect it from being reinfected by the user or tell if the infection is on their network already.

[screen317]

Hi,

You might be able to get things running by renaming executables to iexplore.com

Alternatively, these are links to Anti-virus vendors that offer free LiveCD or Rescue CD files that are used to boot from for repair of unbootable and damaged systems, rescue data, scan the system for virus infections. Burn it as an image to a disk to get a bootable CD. All (except Avira) are in the ISO Image file format. Avira uses an EXE that has built-in CD burning capability.

• Avira AntiVir Rescue System - Tutorial for Avira Rescue CD.
  If you encounter problems running the Rescue Disk, you can get further assistance at the Avira Support Forum.
  
• Dr Web LiveCD. Be sure to print out and follow the instructions provided in the User Manual.
  
• F-Secure Rescue CD - Rescue CD 3.01 released.
  Video: How to Remove Malware with F-Secure Rescue CD
  If you encounter problems running the Rescue CD, you can get further assistance at the F-Secure Support Forum.
  
• BitDefender LiveCD - Index of /rescue_cd
  If you encounter problems running the Rescue CD, you can get further assistance at the BitDefender Support Forum.
  
• Kaspersky RescueDisk - Index of /devbuilds/RescueDisk/
  If you encounter problems running the RescueDisk, you can get further assistance at the Kaspersky Support Forum.
  

If you are not sure how to burn an image, please read How to write a CD/DVD image or ISO. If you need a FREE utility to burn the ISO image, download and use ImgBurn.

Let me know how it goes.