i can't get rid of this virus?

Question

I was streaming tv shows online from a fairly trustworthy site. I have the latest verson of Webroot Security and my firewall was up. But in the middle of the show, without touching anything, internet explorer closed, Webroot started firing notifications at me about something trying to get access to my computer and some program that I did not install on my computer started running a "virus scan." I used Webroot to quarantine and remove several bad files that it detected, but it did not get rid of the problem. I restarted my computer, which turned out to be a terrible idea because when it booted, Webroot did not start up and Windows Defender did not start up. When I went to manually boot them, a program called "Vista Security Center 2011" opened and started "scanning for viruses" again. It listed a bunch of files that don't exist on my computer and prompted me to purchase the "full version." I tried terminating it using Task Manager, which worked except any time I open something, the process begins again. When I close Internet Explorer, it does not allow me to reopen it unless I restart my computer. The process is called "tqn" in Task Manager and its file directory isn't correct, because when I go to its location C:/Users//App Data/ it isn't there.

This couldn't have come at a worse time. I have final exams in a week and I need my computer to study. So if there is any fix, I need to be able to do it fast, and cheap preferably because I'm a university student.

Thanks for your advice.

P.S. I hope that it doesn't have access to my bank account or other private information. It's quite coincidental that this happened the same day that a large sum of money (to pay for the entire next year's rent) gets moved into my bank account.

Answer 1

Update:

If the malware allows you to access the Internet, do so and download the programs below in the links. Even if you have to do them one at a time. Start with the RKill utility, then Malwarebytes Anti-Malware next.



Original Post -

Unfortunately, these same type of questions are showing up every day. The symptoms you describe point to rogue anti-virus or anti-spyware malware. Look at the link below from Bleepingcomputer.com. They have instructions for you to follow involving malware process killers (RKill) and anti-malware software like Malwarebytes Anti-Malware and SuperAntispyware all of which you're going to have to download. Can you access the Internet? How about from the Safe Mode with Networking? If not, use another computer and a compact flash drive to store your downloads. Print out the pages on the link below, and read it carefully. Some folks have been able to transfer files from a flash drive to their desktop using Safe Mode with Networking. I hope it's not as bad as I've seen other folks' computers. If you hit Ctrl-Alt-Del, do you see any process that's running that looks suspicious? Can you kill it there? Some malware block the task manager, execution commands, and access to the Internet.



http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2011



http://filehippo.com/download_malwarebytes_anti_malware/



http://filehippo.com/download_superantispyware/

Answer 2

Get a Free trial of norton antivirus after you scan with it then remove it or keep using it till the trial runs out. You might want to research Adblock plus and PeerGuardian also if you are using IE then stop using it and use firefox or google chrome.





You have malware it want you to "buy" it so it can *fix* the problem that it created... Its some nasty stuff. If you can't get Norton to fix it then back up your important files then reinstall your whole operating system. These viruses have multiple copies of themselves the process once closed will just be remade and restarted.

Answer 3

http://www.pcadvisor.co.uk/forums/index.cfm?action=showthread&threadid=314114&forumid=23



It's important you find out the name of the virus. That will help. Also i can tell you aren't stupid so I will NOT mention running various programs to help. The list is LARGE so just give some a try. UNPLUG your internet connection. That will take care of your info leaving your computer.

Answer 4

Apparently, you have encountered a virus called a "Trojan.Fake.AV or a rogue.

Answer 5

ask your doctor