Virus Shuts Down Virus Scanner Install

Hi I am trying to fix a computer for someone. Every time I start up the Dell PC Running windows XP right after the windows spashscreen. I get a small image in the middle of the screen that says "Warning: Spyware detected on your computer! Install a antivirus or spayware remover to clean your computer." with the first part in yellow box and the rest of the message in a blue box. I will attach of file to this post of that message. The computer starts up normal besides that it really doesn't do anything weird. Other then in the MSCONFIG there are like 80 entries when usually I only see about a dozen or so in that area, and some are just the same thing over and over again different folders but loading the same file SRVXUPWV.EXE. When I try to install a anivirus like AVG or KASPERSKY or Malwarebytes its shows like a second of the install screen then shuts down and it does the same thing is safe windows too. Even if I try to search for those virus scanners on the internet. Say I got to google and search for AVG if I click on the link to there web site it shuts that browser down and if I try to do a free online based scanner it shuts that web page down also. But I can view pretty much anything else on the internet. How do I get this off his system with out reformatting and installing a fresh OS?...

 

I am surprised that you can even get here. It looks like you have posted in the right forum and that you have been infected. One of our malware removal specialists will take charge of this and help you though it. We have a pretty good record of response times to malware issues but, today being Sunday, it is hard to say when it will be looked at. It could be a matter of minutes, hours or a bit more but it will be addressed.The malware removal forum is "semi-private" Once you start a thread or have one moved here only you and the Specialist helping you can post. It is available for anyone to read and follow. Other staff members may jump in but only for the purpose of helping you follow the directions if you run into difficulties.

 

Hello, jvenh
Welcome to the ComputerHelp Forums. My name is Thomas (Tom is fine), and I will be helping you fixing your problems.



Please take note of some guidelines for this fix:

• Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
• If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
• Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
• Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.
• Please set your system to show all files.
  Click Start, open My Computer, select the Tools menu and click Folder Options.
  Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.
  Uncheck: Hide file extensions for known file types
  Uncheck the Hide protected operating system files (recommended) option.
  Click Yes to confirm.

1. Please download OTL from one of the following mirrors:
   • This is THE Mirror
2. Save it to your desktop.
3. Double click on the icon on your desktop.
4. Under the Custom Scan box paste this in
   netsvcs
   %SYSTEMDRIVE%\*.exe
   /md5start
   eventlog.dll
   scecli.dll
   netlogon.dll
   cngaudit.dll
   sceclt.dll
   ntelogon.dll
   logevent.dll
   iaStor.sys
   nvstor.sys
   atapi.sys
   IdeChnDr.sys
   viasraid.sys
   AGP440.sys
   vaxscsi.sys
   nvatabus.sys
   viamraid.sys
   nvata.sys
   nvgts.sys
   iastorv.sys
   ViPrt.sys
   eNetHook.dll
   ahcix86.sys
   KR10N.sys
   /md5stop
   %systemroot%\*. /mp /s
   CREATERESTOREPOINT
5. Push the Quick Scan button.
6. Two reports will open, copy and paste them in a reply here:
   • OTL.txt <-- Will be opened
   • Extra.txt <-- Will be minimized