I am attempting to help a friend remove a virus from his computer, which is running Windows XP. Upon start up, the following adds continuously pop up: Advanced Virus Remover and PC AntiSpyware 2010.
In an attempt to remove the virus I have restarted the computer in safe mode and attempted to run AVG's free anti virus, however the virus prevents the start of the scan.
In normal mode the virus also won't let me access any program in the control panel and does not allow access to the task manager.
My friend told me he once saw AVG report a win32 cryptor virus being present, but I was not able to confirm this. However, I looked up the virus and tried to follow some recommendations. The main recommendation I tried to follow was to download MBAM and rename it as winlogon.exe. Then in safe mode I tried to execute the MBAM, it opened and installed the malware and then when I try to do a quick scan it says it is preparing to scan, but then it just closes.
Also, I have been able to stop the continuous pop ups of the Advanced Virus Remover and PC Anti Spyware 2010 by installing http://live.sysinternals.com/procexp.exe and then I renamed it winlogon.exe. It does run and once I kill the process of svchosts.exe the pop ups stop, but I still cannot run anti virus software, malware, access any programs in the control panel or access the task manager.
I am sorry I can't provide any logs as you can see this thing has really locked me out of everything.
I really don't know what to do and would appreciate anyone who can help me fix my friends computer.
Thanks in advance.