win 7 antispyware 2012,

[coachsoccer2006]

I have this virus "win 7 antispyware 2012" on my HP Pavillon slimline window 7 64 bit computer.  I have ordered the the recovery disks and am awaiting their arrival.  Is this the proper way to go and what else should I be doing in the mean time.  Do I just insert the disks when they arrive?  I guess I just want to know if this will help...? 

[banhien]

Hi,

One way is to Restore the machine BACK to the point before getting the virus. It won't let you to restore using Windows Restore, you have to do this manually under Safe mode.

In Safemode, navigate to %systemroot%\system32\rstrui.exe and run as Administrator from there. After that, backup important data/files and rebuild your machine using Recovery dics from HP.

Good luck.

[coachsoccer2006]

Thank you very much.  The problem I'm having is I can't start up in safe mode.  I talked on the phone with a tech  who's number I received from this site and we tried all the f keys 8-11 and it would not reboot.  He said I have a bad hard driveand offered to sell me a computer.  I have read some sites and they say try the disks and if that doesn't work hard drive could be bad.  I'm a rookie at this and thought I would give it a try myself.

[banhien]

Hi,

Sorry, this is a well known virus and I don't know why many anti-virus software and Microsoft CAN NOT detect it. I know it's a "smart" virus but why it has to do that to force people to buy software.

I still believe F8 should work to get into Safe mode, must be hit at the right time.

Good luck.

[reflexusa]

hello,

I found this same problem on two computers brought to me,

the first was so well entrenched, that i had to system restore it to factory.

the second was much easier though,

1. on another computer goto "bleepingcomputer.com" search for "FixNCR" and "rkill", you will need both.

     for "rkill", i used the "iExplore" one, and save them on a usb stick exactly as they are.

2.start the infected computer, disconnected from the net, and plug in the stick after its done booting.

3. run FixNCR,  a registry command mode killer, as it is working you will start to gain control again

4. run the rkill/iExplore, this one will run a while because it actually waits for the triggers to occur.

    both of these programs will generate a notepad report of their respective findings

Now the computer should be running fine, for good measure hook it back up to the net

   and get anti-malware program from malwarebytes.org, install, update, and scan.

This is what i did and advise the owner to stay away from bad sites and always update the security programs

Hope this helps you!!!