Lenovo 3000 J 115 desktop running 32bit, XP, SP3. Is infected with phony "MS Remove Tool" spy/malware, which has taken over most operations. Can't back up any files to CD--computer tells me there is no writable disk. I have internet access but is very balky. I have tried running several spyware removal tools but none will run--virus has installed its own icon in notification area with bubble stating that file you are trying to open (names the file) "is infected." Window keeps popping up, inviting me to run "MS Remove Tool"--same page I have seen on several sites and absolutely identified as malware. Tried getting into Safe Mode, but ignores it and boots up anyway, even after holding down or hitting continuously the F8 key. Tried both a number of times. Also tried running spyware programs from CD but won't run either--same story. I am using a laptop to communicate with you.

The fake Windows Security Center is a virus that invades a computer and threatens the user that his computer is infected with multiple viruses. Although this "tool" looks legitimate, it is actually rogue malware. It can be time-consuming to remove this fake Windows Security Center from your computer, but you can do it for free.

Download and install a legitimate free anti-malware program, such as Malwarebytes Anti-Malware (malwarebytes.org), on your computer. Restart your computer and hold down the "F8" key for a few seconds before the Windows logo appears to start the computer in safe mode. Run the anti-malware program and allow it to perform a full scan of your system. This may take hours, depending on a number of factors, but allow the anti-malware software to do its job so that you will be able to fully remove fake Windows Security Center from your computer. http://www.malwarebytes.org/ rather than pay for it http://corbitek-antimalware.soft32.com/free-download Free reliable antimalware solution with realtime protection and automatic update Click to put a check mark next to all of the malware files detected in the scan and click "Delete." Download and install CCleaner (piriform.com/ccleaner). http://www.piriform.com/ccleaner This free program will scan and clean out all temporary files on your computer. Run the program, and when it finishes, your computer should be free from the fake Windows Security Center. Restart your computer to exit safe mode.

Welcome to Fixya

This will require time and expertise in fixing this issue. This question is raised a free question. It would be better if you purchase our chat package and let one of the experts resolved the issue. I guarantee you that this is a 100% fix. Here's the link.

Thank you for using Fixya!

If you need further help, reach me via phone at https://www.6ya.com/expert/elixirjose_00375ea24bd8141b

Use another PC and get a flash drive. Go to http://www.malwarebytes.com and get the free download. Put the .exe file on your flash drive then while disconnected from the network, install and run the malwarebytes program (quick scan) on your pc (if it boots up). If you get that far, then get online and update the malwarebytes program and then run it again with the updates. Good Luck.
James

If laptop was bought a month ago, it may still be covered by store exchange policy. If so, just take it back to store for exchange. If you bought it with a credit card, it may also be covered by the credit card company for its exchange or repair. Also, if you bought an extended warranty when you did the purchase, it will cover not only repair but also replacement should repair not be possible. Finally, there is the manufacturer's warranty which typically is for one year from the date of purchase but you likely will have to ship at your expense to manufacturer's designated repair site.

If you choose to continue troubleshooting yourself, here are possible freezing causes...
1. hard disk drive has defective sectors (not likely but possible which is why there is exchange)
2. virus infection (pc usually come with a firewall and antivirus which you must activate)
3. conflict between two firewalls, two antivirus or two spyware/malware programs (suppose to only run one of each but often an antivirus program includes features like an internet security suite.)

On the 2nd Tuesday of every month, Microsoft releases a free tool to address virus infections. The tool is called Microsoft Windows Malicious Software Removal Tool. It is usually downloaded in an infected computer's hard drive but if this cannot be done, the tool can be loaded into a USB stick or thumbdrive on another computer then inserted into the infected computer's USB port to be run. Microsoft also has online tools to scan and remove malware. For more information and download go to .... http://www.microsoft.com/security/pc-security/malware-removal.aspx

1. Print out these instructions as we may need to close every window that is open later in the fix.
   
   
2. It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If you find this is the case when following these instructions, then you will need to download the requested files in this guide to another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive.
   
   
3. Before we can do anything we must first end the processes that belong to Security Tool so that it does not interfere with the cleaning procedure. To do this, download the following file to your Desktop.
   
   rkill.com Download Link
   
   
4. As this infection hides the Windows desktop, we need to open up a window that allows us to see the icons.
   
   If you are using Windows XP perform the following steps: Click on the Start button and then click on the Run menu item. When the Run box opens, type %UserProfile%desktop in the Open: field and then press Enter on your keyboard. If you are in Windows Vista or Windows 7 perform the following steps. Click on the Start button and type %UserProfile%desktop in the Search field at the bottom of the start menu. Then press Enter on your keyboard.
5. You should now see a window that shows all of your desktop icons, including the rkill.com program. Now double-click on the rkill.com in order to automatically attempt to stop any processes associated with Security Tool and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by Security Tool when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate Security Tool . So, please try running Rkill until malware is no longer running. You will then be able to proceed with the rest of the guide.
   
   Do not reboot your computer after running rkill as the malware programs will start again.
   
   
6. Now you should download Malwarebytes' Anti-Malware, or MBAM, from the following location and save it to your desktop:
   
   Malwarebytes' Anti-Malware Download Link
   
   
7. 
   
8. When the file has finished downloading, look on your desktop for mbam-setup.exe and right-click on it and select Rename. The title of the program will now have a blinking cursor where you can edit the name. Please change the name of the program to Explorer.exe.
   
   
9. After you rename the mbam-setup.exe to Explorer.exe, close all your programs and Windows on your computer, including this one.
   
   
10. Double-click on the icon on your desktop named Explorer.exe. This will start the installation of MBAM onto your computer.
    
    
11. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing and is at the last screen, make sure you uncheck both of the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware check boxes. Then click on the Finish button. If Malwarebytes' prompts you to reboot, please do not do so.
    
    If you receive a code 2 error while installing Malwarebytes's, please press the OK button to close these errors as we will resolve them in future steps. The code 2 error will look similar to the image below
12. As this infection deletes a core executable of Malwarebytes', or does not allow it to run, we will need to download a new copy of it and put it in the C:program filesMalwarebytes' Anti-Malware folder. To download the file please click on the following link:
    
    
    Malwarebytes' EXE Download

Whatever malware programs you've run haven't been able to clear this infection on their own...
Some of these viruses require guided assistance to keep them from recreating themselves.
The only malware removal tool I'd recommend for starters is Malwarebytes Anti-Malware, available free here. I advise you to follow the first four steps of instructions in these malware removal protocols to take steps to attempt to remove this infection yourself. Then if you have problems installing, or need further help, your best bet is to start a request for guided help from ONE of the dedicated malware removal forums. Links to those are available here, here, & here.
Follow carefully the prerequisite instructions for the forum you choose, then be patient. You may have to wait several days to hear back, but once you do, you'll get help from someone trained to remove just this type of problem, with expert tools available to do so. Stay in touch with them, and follow their instructions to the letter, without dabbling about.
If you wish, many of these sites have self-help tools available for the various infections, and you may find a removal guide that pertains directly to your infection, but your best bet will be to trust an expert to look things over for you. Depending on the infection, you may decide to reinstall windows after all, but in many cases that's not necessary. See this article for guidance with that.
You can download a utility from MS SysInternals called Process Explorer that will help you to isolate and shut down the process creating all those pop-up windows, but that's just a temporary fix if you don't get at the root of the problem...
Good luck.

I hope this information allows you to resolve this issue. If you need further assistance, please post back with a comment to this thread.
If I've managed to answer your question or solve a problem, please take just a moment to rate this post....thanks!

If you recently installed .NET Framework 3.5 this can happen.

While Avast may say that there are no infections, it's impossible to know if it has not been compromised without being able to scan the system with a non-local AV.

I would suggest trying to boot the system into safe mode. Hit F8 while powering the machine on and select Safe-Mode. While there, if you have better functionality of your machine, run a Malware scan at:
www.trendmicro.com/housecall

And follow the instructions on the page, let this run, until the results dialogue window pops up, this make take a while. 1-3+ hours. Just let it run, you do not need to attend it once it tells you it is scanning.

Perform some maintenance cleaning, visit this site to download an application called CCleaner
http://www.filehippo.com/download/file/df09062a5bdcfd3a0a0cf31f7117c0cb566fe5b698d89848911da4e434cb72f5/

After these steps.
Adjust what programs you have starting up in the beginning:

Start > Run > Type "MSCONFIG" > Click the Startup Tab then un-check any program entries that you don't need starting up in the beginning. This does not remove them from your computer, just from starting up in the beginning and taking resources in the background. When you need the program, you can simply click on its link in your start menu. It is your choice what you keep and what to remove.

Let us know if you run into any bumps.
If this information was helpful, please take a moment to rate the solution.

Here are versions of a removal tool:
XP - http://www.scanforfree.com/download/hijack.taskmanager-remover.php
Vista - http://orderpage.paretologic.revenuewire.net/plav/download

And some knowledge about the virus:

Hijack.taskmanager is a malware hijacker generally installed on the system through corrupt video and media codec shareware and file-sharing p2p programs, e-mail attachments or via **** adult websites. Hijack.taskmanager can create random malvare records in system32 registry and overwhelm the desktop with **** popups and phony warning messages to threaten users to scan their pc. Hijack.taskmanager rojans can gather credit card, passwords and other sensitivel information and infect your Computer with additional malware.

old post, reload the OS
NO OS stated, by you at all is this XP?
or go to microsoft.com
and ask them how to remove malware from your unstated explorer
IE11 is the only support MS browser by Ms. now.
and some sites even ban IE11, now, as i have seen .
all older versions of IE are for sure banned by most www web sites on earth, for GOOD REASONS>

in order to uninstall the anti virus from your system you need to visit the vendors site of your anti virus and download uninstaller and run the same. You can also visit download.com or gur.in to get uninstaller tools