Virus that's blocking anti-malware and antivirus from loading.

[MoeB74]

One of my kids downloading something and what it did was open multiple instances of fake programs to eat up memory. Also, it's currently blocking chrome from working and not allowing me to open any antivirus or malware protection and in most cases also not letting me even install the programs. I was able to find and delete most of the fake programs. Not sure if their are any more, but there's still something in the system that's making the system not act right. Also it's adding data to a drive partition to a drive that's segmented for computer recovery. Also the only time chrome will work is when it's hijacked by a fake chrome exe file.

 

[TwinHeadedEagle]

Hello,

Scan with Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Install the progam.
• Click the Scan tab, choose Threat Scan is checked and click Start Scan.
• If threats are detected, click the Quarantine Selected button. You will now be prompted to reboot. Click Yes.
• Upon completion of the scan (or after the reboot), click the Reports tab.
• Double-click the Scan Log.
• At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

 

[MoeB74]

Hello,

Scan with Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Install the progam.
• Click the Scan tab, choose Threat Scan is checked and click Start Scan.
• If threats are detected, click the Quarantine Selected button. You will now be prompted to reboot. Click Yes.
• Upon completion of the scan (or after the reboot), click the Reports tab.
• Double-click the Scan Log.
• At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

That's the whole point of my post. I can't the malware is blocking it from installing.

 

[TwinHeadedEagle]

Hmm, can you try to run it from Safe Mode with Networking?

 

[MoeB74]

Whatever malware I have is preventing me from installing any anitvirus.

 

[TwinHeadedEagle]

What about MalwareBytes in safe mode?

 

[MoeB74]

Even in safe mode.

 

[TwinHeadedEagle]

Please download Farbar Recovery Scan Tool x64 and save it to a flash drive.

• Plug the flashdrive into the infected PC.
• Restart your computer and tap F8 to bring up the Advanced Menu, then click Repair your computer
• Follow the prompt to enter keyboard input method, and then the prompt to enter a password. If the machine does not have a password, simply click Enter.
• In the Choose Recovery Tool menu select Command Prompt.
• You will see a big black window with a blinking cursor (command prompt).
  
  
  
  
  
  Access the notepad and identify your USB drive
  
  In the Command Prompt please type in:
  

  notepad

  and press Enter.
• When the notepad opens, go to File menu.
• Select Open.
• Go to Computer and search there for your USB drive letter.
• Note down the letter and close the notepad.
  
  
  
  
  
  Scan with Farbar Recovery Scan Tool
  
  Once back in the command prompt window, please do the following:
• Type in e:\frst64.exe and press Enter.
  You need to replace e with the letter of your USB drive taken from notepad!
• FRST will start to run. Give him a minute or so to load itself.
• Click Yes to Disclaimer.
• In the main console, please click Scan and wait.
• When finished it will produce a logfile named FRST.txt in the root of your pendrive and display it. Close that logfile.
  
  Transfer it to your clean machine and include it in your next reply.

 

[MoeB74]

I've tried that my recovery menu doesn't work.

 

[TwinHeadedEagle]

Without getting to recovery we can't do much. Try this guide:

Here's How to Access the Advanced Boot Options in Windows

Advanced Boot Options menu is a menu of advanced Windows startup and troubleshooting modes, including Safe Mode. Learn more about how to use it here.

www.lifewire.com

If you have a installation disk you can use it too.

 

[TairikuOkami]

SmartService & S5Mark acts like an Adware Bodyguard by Blocking Antivirus Software

A program called SmartService is being distributed with Adware and PUP installations in order to prevent security software from being able to run and remove the installed adware.

www.bleepingcomputer.com

Malware like smartservice blocks AVs based on the digital signature and the name. CureIt randomizes the name, but it has still got the certificate.
They made an unsigned Zemana for smartservice, but it is no longer around, there are some AVs without a certificate, but they are usually weak.
The best option is to use a bootable removal USB, like ESET SysRescue or Kaspersky Rescue Disk 18 or Dr.Web LiveDisk - Как это работает?