Need Help Recovery from Antivirus Security Pro infection

This computer is infected by what Avast! cals Win32:FakeAV-EKA [Trj], and I have quarantined it with Kaspersky , Antivirus, which is why I assume that when I try to move it to chest in the boot scan, I get a message saying that it is unable to move the file because the disk is full (or something along those lines). I have ran MBAM full scan and removed all items, booted in safe mode and ran it again, and cleaned up the remaining items (I forgot to make a long for the second run, but all of the files were listed as PUPs so I didn’t think it mattered. Now all scans with MBAM show that it is clean.

But I am still having lots of problems:
a.) Avast! boot scan freezes the computer every time. I will walk away when its at 13% and when I come back about 15 min later, the screen is turned off, but power light is still on and I can still hear the fans running. I’ve tried pressing buttons thinking it was in sleep mode, I’ve tried pushing the power button one quick time, and nothing… Only thing that works is holding the power button until it turns off and turning the computer back on.
b.) Internet does not work in normal mode of Windows, but it works fine in Safe Mode.
c.) Avast will not start in normal mode of Windows
d.) Computer still runs a lot slower than normal
e.) Windows update will not open, not even in safe mode.
f.) Whenever screen saver comes up it says its unable to display the screen saver but displays a message that says that my video card does not support DirectX (or something along those lines, I can’t manually pull it up in right now because I’m in safe mode).

Thanks in advance for your help. I just attached the first MBAM scan report, because new scan reports say it found 0 problems in all categories.

And here is the ASW report

And I didn’t actually specify this in the body, but all of these problems started when the owner of this laptop installed a program called Antivirus Security Pro, which seems to be a fake AV program that detects normal bugs… It originally me locked out of the computer, but a website gave a work around that told me to enter a specific product key to “register” the fake AV, and that allowed me to run MBAM.

so you have multiple AV installed… avast and Kaspersky?

yes, there are two AVs installed, and I did not install Avast! in “compatible” mode, because I planned on uninstalling Kaspersky right afterwards. But then the owner of the computer said he wanted to keep Kaspersky, and he just told me about 30 min ago that it’s fine to uninstall Kaspersky, and I just haven’t gotten around to doing it yet. Kaspersky had quarantined the Win32:FakeAV-EKA [Trj], and I wanted to make sure I had another AV already running before I uninstalled it. I know the forum says not to do anything else until told to do so, so should I go ahead and uninstall Kaspersky?

Oh yeah, and Avast!'s boot scan detected JS:Decode-BBM [Trj] and HTML:Iframe-inf, I’m pretty sure I picked move to chest for both, but I fell asleep doing the scan last night, so I can’t remember for sure. And I think the Win32:FakeAV-EKA was the only one Avast! couldn’t do anything with.

running multiple AV will give you a slow machine, windows errors and fasle detections :o

General: Uninstalling a third-party antivirus software http://www.avast.com/en-eu/faq.php?article=AVKB11#artTitle

and removal expert are notified, since it is over midnigth they may not be online until tomorrow…

Hi,

As disclaimer says:

All analysts below are volunteers and are not associated with Avast

Why would I allow myself to aid you in malware removal while you making money using my knowledge?

But that was causing all the remaining problems… It wasn’t so much just running two AVs, but even with Avast! disabled, Kaspersky was blocking everything for some reason… Thanks for your help!!!

And I was helping a friend… If it was a client I would have said client, but it takes fewer words and less explanation to simply say the “owner’s” computer instead of “my friend who own’s the computer, who I am helping.”

But thanks again for the help!!!

Well actually, let me go ahead and do a boot scan with Avast! and see if it will complete without freezing and if it will quarantine the FakeAV Trojan.

A resident even when disabled will still have low level drivers running that is the way they are designed. These low level drivers can conflict, though I don’t know if this conflict would present itself in this way.