remove antivirusplus

[stemco]

antivirusplus has attacked my pc. I get pop ups every 60 seconds saying I
have a virus and need to purchase this product. I have deleted it from add
and delete programs, but pop ups still there. I searched the program in my
files and deleted 4 files found, but 2 files say cannot be deleted. I tried
to restore the system, but it says it has been turned off, when I go into the
system dialog box where it is suppose to be, its not there. Any help on a
back door to turn on restore, or remove a locked file woul be appreciated.
The file name I need to remove is C:\documents and settings\kevin
stemcosky\start menu\programs\antivirusplus.ink" any help would be
appreciated

 

[FromTheRafters]

antivirusplus has attacked my pc. I get pop ups every 60 seconds
saying I
have a virus and need to purchase this product. I have deleted it from
add
and delete programs, but pop ups still there. I searched the program
in my
files and deleted 4 files found, but 2 files say cannot be deleted. I
tried
to restore the system, but it says it has been turned off, when I go
into the
system dialog box where it is suppose to be, its not there. Any help
on a
back door to turn on restore, or remove a locked file woul be
appreciated.
The file name I need to remove is C:\documents and settings\kevin
stemcosky\start menu\programs\antivirusplus.ink" any help would be
appreciated

You need to remove the malware. Try Malwarebytes' Anti-Malware (MBAM)
free version. Also SuperAntiSpyware (SAS).

Actually, bleepingcomputer.com probably has a good procedure to follow
for removing this scareware - though I haven't looked.

 

[FromTheRafters]

http://www.bleepingcomputer.com/virus-removal/remove-antivirus-plus

page-down to below the advertisements

 

[Nil]

http://www.bleepingcomputer.com/virus-removal/remove-antivirus-plus

page-down to below the advertisements

A relative recently got this bug, and I tried coaching her through
these instructions by telephone. The malware seems to have been tweaked
since those instructions were written, and recent versions prevent both
their rkill utility and Malwarebytes from being installed.

I finally had to give up and recommend she pay someone locally to clean
it up. I hate to admit defeat, but this malware is very difficult to
remove and I couldn't do it without having the machine in hand.

 

[Leythos]

A relative recently got this bug, and I tried coaching her through
these instructions by telephone. The malware seems to have been tweaked
since those instructions were written, and recent versions prevent both
their rkill utility and Malwarebytes from being installed.

I finally had to give up and recommend she pay someone locally to clean
it up. I hate to admit defeat, but this malware is very difficult to
remove and I couldn't do it without having the machine in hand.

The latest malware I've seen seem to specifically target and block most
of the tools you can download.

I've been using Trojan Remover 6.8.1 in safe mode for the initial scan
when MBAM, SAS, AV tools won't run properly because of the malware.

TR 6.8.1 seems to do enough to remove the parts that are keeping the
other tools from running - run it in safe mode, then run it in standard
mode and do the update, then run a scan now that you've updated it -
your other antimalware tools should work now.

http://www.simplysup.com/tremover/download.html