adware removal help

[SXRguyinMA]

I got some kind of it from one of Google's "recommended" search results

Anywho, it's taken over my computer. Security Essentials won't update, Windows Updates won't run, it won't let me edit my hosts file, Malwarebytes keeps turning off it's real-time protection and there's a file in my users folder that it won't let me delete.

I've tried the safe mode route, system restore, etc all to no avail. Anyone have any ideas?

[AmEv]

Taskkiller.

MSConfig.

[Drum Thumper]

Linux.

Seriously, what's the name of the file that won't delete? Google that and go from there.

[AmEv]

^Can't believe I forgot Linux LiveCD.

Just be careful. Linux IS able to modify core files, and Windows might not be able to replace it.

[TLHarrell]

I usually run Process Explorer (renamed as iexplore.exe in case other executables are blocked). Then mouse over processes you don't recognize. Locate where they are and what the .exe name is. Kill process. Regedit - search - delete process name items in reg - delete executables - reboot - win, hopefully.

Last one I got was a Google image search with a poisoned photo. Hover over photo, immediately I get a popup stating that my "multimedia system is corrupted. click here to repair." The regedit hack wiped out my machine's ability to run executable files, but a quick trip on the internet got me a script file that reassociated the extensions.

[SXRguyinMA]

the file I can't delete is named fccu4o20iv.exe. It's in c:\users\Will folder. I googled it but nothing came up. Spybot was able to delete the registry entry that keeps it from running at boot. I also can't set my permissions on my user account to edit/replace the hosts file.

I'll try taskkiller next.

[AmEv]

Those random garbage names are usually self-replicating RAM hogs.

Try "cacls". It's the file permission editor of windows, equivalent to "chmod". Read up on that, delete the file, shut down.

Last resort, get a Linux LiveCD,

[farlo]

hirens boot cd will let you scan before windows is loaded, and has many utilites for AV and malware included

edit: forgot link: http://www.hirensbootcd.org/

[SXRguyinMA]

Those random garbage names are usually self-replicating RAM hogs.

Try "cacls". It's the file permission editor of windows, equivalent to "chmod". Read up on that, delete the file, shut down.

Last resort, get a Linux LiveCD,

didn't work. the command said it processed the file successfully but when I tried to delete it it still said I needed permission. Funny thing is that it said it needed permission from Will (the only account on the PC and the one I'm logged into) to modify it.

hirens boot cd will let you scan before windows is loaded, and has many utilites for AV and malware included

edit: forgot link: http://www.hirensbootcd.org/

Looks neat, will look into that now

[SXRguyinMA]

Also, the file is the least of my worries right now as it's no longer running in startup. problem is I still can't update windows/malwarebytes/security essentials or a whole host of other things. I'm thinking I may just do a fresh install anyways....