Antivirus (Avcommand.net) trouble - please help!!

Re: How to Remove Antivirus Live [Removal Guide]
by Irishroan Today at 10:14 am

I have the AntiVirus infection on my laptop. It is not networked and I am afraid to network it to my PC in case I spread the infection. When I uncheck the proxy server box (there is no "apply") and try to get to the web it says I am offline.

I have Malware Bytes installed on my system but it hasn't been updated in a few months. This infection has blocked all access to the web and I can't get an update. I tried to download Spyware Doctor onto a USB and reinstall on the infected computer but it won't run because it can't access the internet for "updates". I pulling my hair out!!

Any suggestions? This is really bad!

I managed to get to another computer and download the updated version of MalWare Bytes to a USB stick and run it on the infected computer. I scan a quick scan and got three Trojans that Malware deleted. I rebooted and the virus didn't come back but I am still not able to get to the internet. This is a really destructive thing.

Hello.

Hello.

• Open HijackThis
  
• Choose "Do a system scan only"
  
• Check the boxes in front of these lines:
  
  
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
  R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
  O4 - HKLM\..\Run: [aasiaycu] C:\Documents and Settings\Owner\Local Settings\Application Data\vjkfdr\tjfrsysguard.exe
  O4 - HKCU\..\Run: [aasiaycu] C:\Documents and Settings\Owner\Local Settings\Application Data\vjkfdr\tjfrsysguard.exe
  O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
  
  
  
  
• Press "Fix Checked"
  
• Close Hijack This.
  

Remove the Proxy setting in Internet Explorer and/or in FireFox.

In Internet Explorer

1. Tools Menu -> Internet Options -> Connections Tab ->Lan Settings > uncheck "use a proxy server" or reconfigure the Proxy server again in case you have set it previously.
   

In Firefox

1. Tools Menu -> Options... -> Advanced Tab -> Network Tab -> "Settings" under Connection > Choose "No Proxy"
   
2. Click the apply button and restart that computer in normal mode.
   

Thanks - when I run the Hijackthis I can find the first two lines you mentioned but none of the rest are in the scan list. Could it be disguised as something else?

Nevermind, bad copy/paste error from me.

Is your internet back now? was there a proxy set?

No - I can't get out to the Internet at all. I've been downloading programs to a USB stick and trying to run them on the infected laptop but nothing seems to touch this thing.

Sorry - I should say that I have a PC that is functioning fine - that's where I'm getting programs from. But the laptop is fully infected. It won't let me open registry anymore or taskmgr unless I do it in SafeMode.

Okay, see if you can run this.

Download OTL by OldTimer to your Desktop.

• Close all windows and double click OTL.exe
  
• Click Run Scan and let the program run uninterrupted
  
• It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  
• You may need to use two posts to get it all.
  

Where do I find OTL by Oldtimer? Can I get it from the internet?

The link is in the bit that is bolded in my above post.