Segurazo "Antivirus" - how to remove

Viruses and worms
1

I obviously downloaded something that included Segurazo fake antivirus. I can’t remove or uninstall this piece of garbage. I first tried uninstall from control panel, but the malware opens itself when you try to uninstall, so Windows won’t touch it. I then tried Malwarebytes, Avast, Revo Uninstall and have even got to command prompt and tried to manually delete the folder. I’m faced with repeated lines saying I don’t have permission to uninstall. I am in the admin mode, so this shouldn’t be an issue. I even right clicked on the Segurazo folder in Program Files (x86) and ran Avast on the actual file and it found nothing.

Has anyone accidentally installed this trash and not been able to remove it? Ideas? Thanks.

2

Instructions https://forum.avast.com/index.php?topic=194892.0

attach FRST diagnostic logs from step #2

3

Mbam file attached, going to step 2 but can’t download Farbar because my computer keeps removing it as malware

4

While you are waiting for a qualified remover to go through your logs and help you out with the cleansing of it.
read this: https://www.carbonite.com/blog/article/2016/04/when-antivirus-is-a-virus

polonus

5

what program is detecting FRST ? … can you disable it?

Did you let malwarebytes remove quarantine all the crap it found? your log say “no action by user”

6

I ran Malwarebyes and generated the file again, then I deleted the 500+ files from the Quarantine folder in Malwarebytes. It still doesn’t see or remove the Segurazo files, which are located (at least some are visible) in: C:\Program Files (x86)\Segurazo. Additionally, I reran Revo Uninstaller. It no longer was able to see the Segurazo folder, so I had to use the Hunter directly on the icon in the bottom right tray. It found all the Segurazo files, said it was deleting them, then said the files would be removed when I restarted. Sounds good, but when I restarted the files were still there. This is the second try. Avast and Malwarebytes are both blocking FRST.

7
Avast and Malwarebytes are both blocking FRST.
Turn off malwarebytes realtime protection right click avast tray icon and pause all shields
8

The best I was able to do was to go into Safe Mode offline and manually delete any file with Segurazo in the title. I assume I missed some, but I got back online and ran Avast and Malwarebyes and they caught a few more when I used the name as a keyword? I believe it is gone but keep running the antivirus and malware software to be sure. I believe I got this while downloading a supposed file recovery software named Reclaimation.