I was searching something on Google, clicked some random link, and got a pop-up browser. As I went to close it, a program called AVCare showed up as if it was scanning my computer for viruses. I had never heard of it, so I immediately assumed it was a virus. I hit CTRL+ALT+DLT, ended the process, and ran SuperAntiSpyware. As expected, SAS caught a bunch of crap. I had it delete everything and restart my computer.

When I restarted, AVCare immediately came back up. As I was stopping the process again via Task Manager, I noticed that the shortcut for my SAS icon, which I keep on my desktop, now had no logo. I freaked out, held in the power button until it shut down, and restarted in safe mode. Sure enough, the virus appears to have "eaten" SAS. I used my other computer to look up ways to manually remove the virus. In safe mode, I deleted all traces of the virus from the registry via regedit, and I'm 100% sure I didn't delete anything other than the virus.

I restarted in normal mode, and I immediately got an error about rundll32.exe (I believe it was this, though it might have been a slight misspelling as a way to mask the virus). Things seemed fairly normal, though; I could still access the internet, view my files, etc. I tried to reinstall/repair SAS, but when I did, I got an error 1321 about insufficient privileges to run the program. I tried uninstalling it first, but when I opened the Uninstall Programs screen in Control Panel, I immediately received a "Windows is restarting" error screen before I could click anything. This continues to happen every time I try to open Uninstall Programs.

I tried downloading MalwareBytes instead. It installed, but as soon as I told it to start scanning, it just disappeared; it didn't minimize, and it didn't move anywhere...the program just terminated. I tried to create a HiJackThis log, and as soon as it started, it disappeared as well. When I tried to restart it, I got this error screen: "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."

During my Googling (via my other computer) of how to fix this, I somehow ended up at the screen that shows your startup programs. I noticed that, even after removing every trace of it, AVCare was still listed in the startup programs. I disabled it and deleted it, though I can't remember how I got to that screen, so I'm not sure if it's still running.

Basically, I can't get any virus/malware/spyware program to start. I can use the internet, but I have noticed that if I type anything with "AVCare" into Google, it refuses to search. I keep constantly getting the "Windows is restarting" error, so something is clearly wrong. How ****ed am I? Do I need to go into safe mode and search for something specific? Is the problem most likely with the run32dll.exe file, and is it possible that the virus has "overtaken" that file (I have absolutely no idea how computer viruses work tbh). I have no idea what to do, and I could really use some help.

I just tried downloading Avira. During installation, it stopped and gave me this message:

Try running portable ClamWin antivirus from a thumb drive. It doesn't have to be installed.

I'm now getting the dreaded black screen after starting up (both in normal and safe modes). I can see my cursor, but everything is black. If I hit shift five times, the little "sticky keys" window pops up, but I can't get task manager or anything else to pop up. I'm starting to get very depressed because I have a ton of important information on my HD that I really don't want to lose.

Here is a link to use a Linux boot CD to recover your data when you can't boot in Windows. .Use Ubuntu Live CD to Backup Files from Your Dead Windows Computer The procedore is very well explained and will be a solution to one problem. Hint ( Backup Data before a problem happens)

this sounds like something I had a few months back. See if this helps

If this link is not allowed then delete

Have you tried restoring to a point before the infection? Have you tried booting to safe mode and disinfecting that way?

is your computer on a network? I have been able to scan networked drives before. Or you can remove your drive and get a USB tray and connect to another computer to disinfect. If worse come to worse you can always be a new HDD. And use that for primary and disinfect your secondary drive. At least this will save your data.

I tried restoring once, but when I did, the only option was for 10/15 at 9:38 (about when I got the virus). The description was only "Install: Installed " as if the name had been blanked out.

I just got into repair mode again, and I now have three options: the same 9:38 restore point, one from 10:11 ("Uninstall: Removed SuperAntiSpyware"), and one from 10:12 ("Install: Installed SuperAntiSpyware"). It's as if the virus deleted all past restore points.

I can't get into safe mode because the screen is black when I use it, too. It was fine for awhile, and I was restarting constantly with no issues, but then I randomly restarted once after Windows Explorer crashed, and I got the black screen. Since then, I haven't been able to get anything but the black screen. I can get into "Repair Your Computer" and some other stuff (including command prompt) from the F8 boot menu, but I'm not really sure what to do now.

The computer is not on a network. I'm glad to see there are ways I can recover my files, though I'd obviously like to find out if there's a way to fix this before I go down that road.

you can try an online panda scan but that has to install some components. You can also burn a copy of Ultimateboot CD, it has some scans you can run from the bootable disc.