Expert: Keith Davis - 4/24/2011

Question
Hello,
I have this XP Security alert virus that seems like it won't go away even after SuperAntiSpyware deletes it. The first time I got it, it seems as if it has deleted all my programs or are hiding them. For instance when I go to Start and click on my programs all I have is Mozilla and SuperAntiSpyware nothing else. I even had to re-download Mozilla. And I can't download Malwarebytes I don't know why. So my first question is did the virus really delete my programs or are they hidden somewhere, but I did watch a video with Windows Media Player and didn't have to download that again so I'm thinking my programs maybe hidden, but I'm not sure? Also My Windows Security Alerts keeps saying I have automatic updates turned off, but when I go to the Control Panel they are on. Any help and suggestions would be greatly appreciated.

Answer
You have one of the fake anti-virus programs. It will make your machine do all kinds of crazy things. It sounds like you have a extra bad infection of it. Go here: http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Download Combofix. It is an executable. It does not install on your machine. It the infection is bad enough it will give an error when you try to run Combofix. If this happens just rename Combofix to anything else (I usually name it my name) and it will trick the fake anti-virus into letting it run.
Let me know how it goes.