Rogue antivirus 2009 removal problems

I am attempting to remove antivirus 2009. This program prevents access to malware removal sites so I have downloaded the program malwarebytes onto an other pc and installed it in safe mode on the infected PC via a pendrive.
It would let me install it only after a changed the installers name to something else.
However, though the program installed it will not run.
Even in safe mode.
Has anyone encountered this problem when trying to remove antivirus 2009?  Is there a way around it?
Running windows xp.
perilAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mrsteve-itCommented:
Perhaps try Spybot S&D? Download the main program & the includes, immunise and run a full scan in Safe mode.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
rpggamergirlCommented:
You can also try Smtfraudfix or SDFix, these tools also removes Antivirus 2009, rename them also.

Download SmitfraudFix, and select Option 2. Clean (Safe mode recommended)
http://siri.geekstogo.com/SmitfraudFix.php

Or SDFix, (only works in Safe Mode, extract the file and doubleclick on "RunThisBat").
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

How to use SDFix.
http://www.bleepingcomputer.com/forums/topic131299.html
 
0
perilAuthor Commented:
Just as you spoke I am running Spybot but via a "ultimate boot for windows cd" (since the malware is not allowing any known antivirus/antispyware to run even in safe-mode.
I'll see what happens when it gets to the end of this scan then let you now.
0
rpggamergirlCommented:
And if those also fail, then use combofix also need to be rename.

Please download ComboFix by sUBs:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

You must download it to and run it from your Desktop. (If using another pc to download the file, rename it also.
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log and attach it in your next reply by pasting it in the "Code Snippet" or "Attach File" window.
Re-enable all the programs that were disabled during the running of ComboFix..

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
 
 
0
perilAuthor Commented:
I couldn't download spybot to the infected machine nor would the malware program allow me to run or update any spyware or antivirus programs. But I had a copy of spybot on a "Ultimate Boot Disk for Windows" CD and ran it from that environment rather than in windows itself.  This found the problem and got rid of enough of the problem for me to then run malwarebytes and get rid of the rest.
Good choice!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.