[b]I am at my end my husband I have been having issues with my computer and my husband clicked on a link and it popped up all kinds of windows now I can;t get Internet Explorer to work I can’t get into my registry or control panel or even my outlook express e mail but I am able to use Mozilla Firefox I also can’t d/l or install anything for malewere… I got a sf.bin infexted and a rundll.32.exe infected … is there anything that I can do?
Ren[/b]
Here lie detailed removal instructions for AV security suite>>
http://www.bleepingcomputer.com/virus-removal/remove-av-security-suite
Make sure to follow the steps in the order presented.
Assuming that is the name of the rouge infection, by the title of your post?
[b] Is that a free download? It seems that whenever I d/l something I can not run it … avast found a JS:fakewarn whatever that is
Ren [/b]
The link I posted itself was blocked?
Or one of the links in the guide?
If its blocking you from downloading the tools on the site, you might have to download them from an clean PC, then bring them to the infected one with a USB drive or disk.
[b]I keep getting the JS Fake warn Trojan Horse that ave is blocking
Ren [/b]
That is likely a good thing if its an Avast! detect, probably still trying to protect you even though you are currently infected. Follow the removal instructions from the link above, bring the removal tools to your pc from elsewhere, if neccesary.
renfest,
is the malwarebytes link inside that link gargemel posted being blocked??
if it is go to safe mode networking(to get to safe mode hit f8 right after powering up, after powering down of course, and choose safe mode networking) and see if you can download from the website itself.
malwarebytes.org i believe.
I think you gotta use IE, if you have a problem with it go to tools, internet options, connectioning, then lan settings, you hav eto make sure the proxy is unchecked. When you uncheck it download the file fast, because Av security suite is gonna put it back as checked.
run your malwarebytes in safe mode
hope this helps.
Sats
[b]I can not get it to go into safe mode I turn off the comp and back on F8 and it overrides that and goes to the xp page on start up I have tired this several times …
I can d/l but install will not work I tried to and it will install then not run my husband could not wait 2 weeks when I got the other system that was going to be given to me and I know the more I run this one the way it is I am doomed I ran a boot scan and there were no viruses which is a good thing I guess there are 2 things in the virus check they are 2 JS FakeWarn -C [tjn]
Ren [/b]
Hi there try this first - if it fails follow plan B
Note: If using Firefox right-click on any download links and choose Save As
Please download OTH to your desktop
Please download OTL to your desktop
Please download the attached file Scan.txt to your desktop
Double click the OTH file to run it and click Kill All Processes, your desktop will go blank.
http://oldtimer.geekstogo.com/OTH/OTH_Main.gif
Then select Start OTL. OTL will now run
[*]Double-click on the Custom Scans box and a message box will popup asking if you want to load a custom scan from a file
Select Scan.txt that you downloaded
[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Click the Internet Explorer button, post these logs in your Virus Removal topic.
PLAN B
Please download RKill.com to your desktop
Double click the programme to run it
Please be patient while the program looks for various malware programs and ends them.
When it has finished, the black window will automatically close and you can continue with the next step.
If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by rogue malware when it terminates programs that may potentially remove it.
If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate
Once that finally runs then continue with the OTL step
[b]Ok where do I find that on Mozilla Firefox?
Ren[/b]
The coloured names are hyperlinks - just click on them
The scan.txt is at the bootom
[b]I can d/l them but when I click to install nothing happens … I just got back home turned the comp back in and the AV Security Suite did not come up interesting I have not tried using IE yet … might just have to try
Ren[/b]
When you download them with Firefox did you select save as ? When you double click them what happens as they are standalone programmes
Maybe renfest should not use a computer ???
Posting in Green is a sure sign of significant help needed. 
Not helpfull
[b]Thanks that worked and I even got IE running again the way it was before … I just had to sleep and then tackle it …
Ren[/b]
[b]If you don’t like the way I post in green then you should not have replied … unless you were helping … to evertone else that helped I thank you
Ren[/b]
Concur Ren
Could I see the OTL log please as there are probably still some remnants to remove