VP,new age of AV software destroyed everything in seconds

[lilsweetpea2]

 :confused: Virus Protector, new age of ANTI VIRUS software poped up seconds after my avast alarm popped up to alert me. I immiediatly tried to hit ctrl-alt-del to pull up task manager and shut everything down. It allready disabled the task manager and everything else on the desk top. So i held down the power button till it shut down. Tries booting in safe mode but the virus has disabled that option as well. For every safe mode.
AS far as any logs i cant get anyware in regular or safe mode. I see my desktop background and the virus thats it. Nothing else is accsesable, not even any buttons. Tried burning avast to a cd and booting that way, wouldnt let me do that either.
  :( All my babies pictures are on that laptop, there has to be a way to get them before its to late.
PLEASE HELP ASAP :sos:

[Corrine]

Hi, lilsweetpea2.  Welcome to LandzDown Forum.

We will do our best to assist you.  However, in order to do so, please follow all instructions provided in the sequence given.  Do not install/re-install any programs or run any fixes or scanners that you have not been instructed to use.  This may cause conflicts with the tools being used in the cleanup process.   

If you have questions regarding any of the instructions or problems running any tools, please let us know.

It appears that for the initial stages, you will need to download the needed tools from another computer and transport them to the infected laptop.  Since it appears your initial post was made from a second computer, this is what I want you to do:

On the UNinfected computer:

Please download Malwarebytes' Anti-Malware to the desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
  
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  

Copy the following to a CD/DVD or USB:

• The installation file:  mbam-setup.exe
• The most recent definition file, following the path below, depending on the laptop operating system: 
  
  Windows XP:  C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Rules.ref
  Windows Vista or Windows 7:  C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref

Now for the infected laptop:

• Copy mbam-setup.exe to the infected laptop and follow the prompts to install the program.
• Copy the definition files to the appropriate location below, depending on the laptop operating system: 
  
  Windows XP:  C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Rules.ref
  Windows Vista or Windows 7:  C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref

Scan the laptop:

• Launch Malwarebytes' Anti-Malware
• Once the program has loaded, be sure Quick scan is selected, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, EXCEPT items in System Restore as shown in this sample:
  
• Click Remove Selected.
• When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here on Windows XP: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt and C:\Users\UserName\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt on Windows Vista and Windows 7.
• Please post contents of that file in your next reply.

[Eric the Red]

For reference, here is the path to the original post at Gardenweb

http://ths.gardenweb.com/forums/load/comphelp/msg030831271585.html?4

[lilsweetpea2]

On the infected computer i cant find Windows XP:  C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Rules.ref so idk where to put Windows Vista or Windows 7:  C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref . im inside the infected computer though. :Hammys pint:

[Corrine]

Hi, lilsweetpea2.  

Because you cannot connect to the internet with the infected laptop, I need you to transfer the updated Rules.ref file from the good computer to the infected laptop.  The locations provided depend on the operating systems of the two computers.  

• If the good computer is Windows XP, after updating MBAM you will find the Rules.ref file in the C:\Documents and Settings path.
• If the good computer is Windows Vista or Windows 7, after updating MBAM you will find the Rules.ref file in the C:\ProgramData path.

Copy the Rules.ref file from the good computer to the infected laptop:  

• If the infected laptop is XP, save the Rules.ref file in the C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Rules.ref
• If the infected laptop is Windows Vista or Windows 7, save the Rules.ref file in C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref