Warning

 

Close

Confirm Action

Are you sure you wish to do this?

Confirm Cancel
BCM
User Panel

Site Notices
Posted: 1/15/2011 10:28:52 AM EDT
Looks like a new Spyware/malware and its a doozy, made a fake windows directory in the C drive, disables administrators rights to regedit etc...






Anyone have any experience removing this one yet?







I remember removing the Antivirus 2010 was easy, just boot in safemode remove the two recently modified/created .dll files but this one is more complicated, looks like its pretty new spyware also...

 
Link Posted: 1/15/2011 11:20:16 AM EDT
[#1]
boot in safe mode back up your data and format c
Link Posted: 2/1/2011 3:58:54 PM EDT
[#2]
I figured it out without having to reformat C:



Boot into safe mode with no networking, make sure you can see hidden files by enabling it in folder options on Win7. Turn up your security levels so it asks for permission before it runs any programs.




Run Malware bytes updated version.




When you boot up into regular mode get into task manager right away, end process and programs you do not need. Also make sure to say no to whatever program wants to run during boot up, like setup.exe. Run Msconfig and turn off unnessasry start up programs, a lot of those are the spyware.




Run Malwarebytes again then reboot.




Now your computer should be able to get online without the browser hijack, go run House Call PC from you browser. Run Malware bytes again.




Repeat this step till all full scans from both programs come back clean. Took me about four scans/reboots.




Some of these steps maybe unesasary but it is what worked for me.









Link Posted: 2/2/2011 2:44:54 PM EDT
[#3]
Link Posted: 2/2/2011 3:16:15 PM EDT
[#4]



Quoted:




No tech support for you.

 
Close Join Our Mail List to Stay Up To Date! Win a FREE Membership!

Sign up for the ARFCOM weekly newsletter and be entered to win a free ARFCOM membership. One new winner* is announced every week!

You will receive an email every Friday morning featuring the latest chatter from the hottest topics, breaking news surrounding legislation, as well as exclusive deals only available to ARFCOM email subscribers.


By signing up you agree to our User Agreement. *Must have a registered ARFCOM account to win.
Top Top