You need to run spybot seach and destroy to get rid of the spyware that is causing this. It is one of those scam attempts to get your cash. Msav.exe is a DOS command for an early Microsoft anti-virus scanner from like the days of Windows 3.1 or so. You can also check at Symantec for threats on it though I didn't see it listed there.

If you don't have spybot search and destroy you can get it at download.com as it's free shareware.

 

Thanks for your help. I was wondering if maybe a program like Avast! would be able to get rid of this? I am trying to make this as easy for him as I can, considering he is older and I'm not sure his level of understanding on computers. He is a smart man, but computers maybe not? What do you guys think about this?

 

http://www.greatis.com/appdata/d/m/msav.exe_Removal.htm

 

I am not sure if thats what I am looking for of if thats the program that the virus wants you to get or what?

I don't actually have his computer with me, that would be too easy.

 

Gah, I wish he would just let me do a system format BUT he is a Doctor of Vet Medicine and probably has important documents on his PC.

 

AVG is fairly awesome when it comes to this, and are a number of spyware-crunching proggies, but...

 

Having just recently dealt with the same virus your boss is contending with on my own machine, I recommend he back-up his important files and re-format his hard drive. That sonofabitch latches itself onto root Windows files and downloads trojans, other spyware and decoy versions of itself in order to clog-up anti-viral software and make you think you took care of it... only to reboot and, BAM!, system crash. It'll nail one of your drivers.

Wipe the disk and re-install your OS, or you'll be in for a Hell of a headache.

I highly recommend getting Spybot Search and Destroy.  It is extremely useful and works very well.  It is also free.

You might also want to avoid the problem of getting stuff like that in the first place (it's not actually a virus at all) by installing Spyware Blaster, a programme that blocks thousands of pages and performs one-time registry edits that prevents you getting a great deal of spyware and malware at all.

Oh, also, tell your boss never to EVER use internet explorer.  This often does not get through so remove it from his machine permanently by removing it from the programme list first and then from the Windows programmes (I can't recall where that is, but I believe you can get to it from the System window in control panel or through add/remove programmes depending on the version you're running... and you have to do that or it will reinstall itself).  Of course, ensure that you already have Firefox or another browser installed.

It should never be necessary to do a clean reinstallation unless you are completely inept.  If you are capable, look online for the manual registry fix for the malware and perform the actions yourself, or just go to the registry and do-it-yourself from scratch (never edit the registry unless you know what you are doing!  -you will fuck up your computer).

I was thinking that same thing, and I have a general idea of what to do in reg. files. But the problem lies with it being at his house and not with me anywhere. I would just tell him take it to someone to fix but that cost more $ than it's worth... >.< FUCKING VIRUS! lol.

Looked and worked totally different for me (I point and click, don't use keyboard other than to type. ) Also couldn't figure out IE7, so still have 6. I am very non-tech savvy.

This is the program it's prompting him to buy

 

http://www.greatis.com/security/buy.htm

 

What do you all make of that? I think it's a bullshit scam.

Malware infection is NOT to be taken lightly.  Trust me, removing these things is currently my favourite part of working in IT.  I've seen just how deeply these things can get themselves stuck in to a system and the damage they can do.  If you or he do not know what you are doing when it comes to malware removal, then a reformat is definitely the way to go.  No ifs, no buts. 

This particular program has a rootkit associated with it.  What rootkits do is make the program invisible, so you can never be garanteed you've gotten rid of it.  Chances are even when you've run every anti-malware program under the sun it will still be there hiding away, it'll re-download all the programs that create the popups and log keystrokes and before he knows it he'll be back in the situation he has now.

This program also has a rootkit.  If he does any financial work with this computer, his login details are already on the internet somewhere.  I am not kidding.  If he does any financial work, he needs to change his logins from another computer.

Get him to allow you to re-install.  Make sure he gives you all the discs for installing the applications he uses on the machine, and back up all the data on it first and do a full wipe of the system using something like Darik's Boot and Nuke. 

Those rootkits are also the shit the assholes that make the extreme DRM shit use, The law should proscribe death by extreme torture for anyone who creates a rootkit. (such as a drill coated with salt and vinegar slowly drilling up the ass of its creator. ) Or a giant meatgrinder to lower them feet first into then once it gets up to their waist make them eat raw what comes out then lower them into it again up to their face.

Ha! Yes! Force them to make programs that fix it while slowly removing their skin, layer by later, at a set rate that gives them 2 days to fix it before they die! And whenever they complete the task, they can choose to have a swift death.

Did you know the UAC feature in Windows Vista uses rootkit style hooks to work and add security to the OS?  Did you know that numerous antivirus programs, anti-malware programs fingerprint reader and other security programs use rootkit style hooks to add security to OS's?

Rootkit isn't a four letter word.  It goes down entirely to who us using the rootkit, for what purpose, what methodology they use and what level of disclosure they provide.

How about making them roll naked from the middle of a 200 sq foot room the floor of which is covered in broken glass coated with salt, vinegar and tabasco sauce?

I don't really care WHO uses them... I don't even really care who used the one on my boss... I just want to help him fix it. But from what I have heard so far it sounds like a backup / format is in order. Which I don't think he will be to happy about. > I would say I wish all hackers that hacked for bad purposes would be tortured but thats probably where everyone learns... I don't know that for sure though so I will just not say anything on that. -.- fuck.

ROFL That is an image I never wanted in my head, thank you! xD! So it IS porn and the devil did it!

Rofl, lets do it!