|
|
Joined:
December 2001
Posts: 10583
Location: NJ | somehow I got this damn PC antispyware 2010 to infect my computer
it disabled
norton 360
norton antivirus
adaware
superantivirus
and
windows defender
any clue how I can rid my self of this PITA????
thanks
al |
|
| |
|
Joined:
November 2008
Posts: 1119
Location: Michigan | Al,
You may want to call an IT guy. These things tend to infect themselves in many process and files and can be difficult to find them all. Most of those eggheads (no offense) have dealt with specific virus and know how to locate them and take them out. My computer guy can rid them in minutes or and hour depending on how creative the virus is. Good luck. |
|
| |
|
Joined:
October 2008
Posts: 639
Location: NW of Philadelphia | From:
http://windowsprotection.net/how-to-remove-pc-antispyware-2010-pcan...
Download and run this:
http://windowsprotection.net/spyware-doctor/pcantispyware2010/downl...
OR
How to remove PC Antispyware 2010 manually:
To perform manual removal of PC Antispyware 2010, you should do the following:
Delete PC Antispyware 2010 corrupt files:
%Program Files%\Common Files\aqamodero.dat
%Program Files%\Common Files\hubeweqa.lib
%Program Files%\Common Files\jatikysup._dl
%Program Files%\Common Files\ofyxodaqa.dat
%Program Files%\Common Files\sahaso.bat
%Program Files%\Common Files\zotys.bin
%Program Files%\PC_Antispyware2010
%Program Files%\PC_Antispyware2010\AVEngn.dll
%Program Files%\PC_Antispyware2010\htmlayout.dll
%Program Files%\PC_Antispyware2010\PC_Antispyware2010.cfg
%Program Files%\PC_Antispyware2010\PC_Antispyware2010.exe
%Program Files%\PC_Antispyware2010\pthreadVC2.dll
%Program Files%\PC_Antispyware2010\Uninstall.exe
%Program Files%\PC_Antispyware2010\wscui.cpl
%Program Files%\PC_Antispyware2010\data
%Program Files%\PC_Antispyware2010\data\daily.cvd
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\msvcm80.dll
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\msvcp80.dll
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\msvcr80.dll
%WINDOWS%\akudyta.lib
%WINDOWS%\hoxigawax.inf
%WINDOWS%\kyci.dl
%WINDOWS%\nuxojih.scr
%WINDOWS%\qynomikov.bin
%WINDOWS%\seni.reg
%WINDOWS%\yfoneby.db
%WINDOWS%\system32\_scui.cpl
%WINDOWS%\system32\cocefezyj.dl
%WINDOWS%\system32\qebykiti.dl
%Documents and Settings%\All Users\Application Data\pybisezyr.db
%Documents and Settings%\All Users\Application Data\ulycozoho._dl
%Documents and Settings%\All Users\Documents\ekenubes.com
%Documents and Settings%\All Users\Documents\icosagula.reg
%UserProfile%\Application Data\jugifyryve.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PC_Antispyware2010.lnk
%UserProfile%\Cookies\ajeby.reg
%UserProfile%\Cookies\yqeqaranym.vbs
%UserProfile%\Cookies\zebav.pif
%UserProfile%\Desktop\_scui.cpl.txt
%UserProfile%\Desktop\PC_Antispyware2010.lnk
%UserProfile%\Local Settings\Application Data\xoqupuwytu._dl
%UserProfile%\Start Menu\Programs\PC_Antispyware2010
%UserProfile%\Start Menu\Programs\PC_Antispyware2010\PC_Antispyware2010.lnk
%UserProfile%\Start Menu\Programs\PC_Antispyware2010\Uninstall.lnk
Remove PC Antispyware 2010 associated registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC_Antispyware2010
HKEY_LOCAL_MACHINE\SOFTWARE\PC_Antispyware2010
HKEY_CURRENT_USER\Control Panel\don’t load “scui.cpl”
HKEY_CURRENT_USER\Control Panel\don’t load “wscui.cpl”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PC Antispyware 2010″
Please, note that manual removal of PC Antispyware 2010 is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic PC Antispyware 2010 removal tool below:
Good Luck. |
|
| |
|
Joined:
May 2008
Posts: 1556
Location: Indiana | Hi Al-
Trying to clean the drive is made more difficult as long as the infected drive remains the boot drive because these Trojans are designed to do their dirty work utilizing the permissions (authorities) inherent in their roll as the system drive.
The most effective way to clean it is to remove the drive and install it into another computer as a secondary drive. Then run up to date Antivirus and Spyware programs on the drive to clean it. (AVG Free is an excellent Anti-Virus, SuperAntiSpyware and Spybot Search and Destroy are very effective Spyware programs.)Infected drives may take multiple scans until no more issues are reported.
Once clean, reinstall into the original computer.
Best of luck- |
|
| |
|
Joined:
October 2006
Posts: 5575
Location: big island | it took me 3 1/2 hours to get the "personal antivirus" (which is the same bug) trojan off my stepson's laptop last week. it disabled AVG, gave false warnings and blocked every other site i visited to find out how to get rid of it. my stepson got the trojan from P2P sharing on limewire, which i had warned him about using countless times.
here's what eventually worked for me fast and painlessly: go to "run"/msconfig/startup and uncheck pav.exe
then a fresh download of "spybot" removed the trojan completely. i prefer to use "ccleaner" but it did not recognize this trojan.
this trojan is bogus antivirus/antispyware and offers the solution to fix your troubles for $59.99 or other amounts. they steal your money and have your credit card number and then you are still in ownership of the trojan. |
|
| |
|
Joined:
October 2006
Posts: 5575
Location: big island | once you disable (uncheck) the trojan's startup file in run/msconfig (type "msconfig" in the box and click OK)/click startup tab) you can reboot your computer and the trojan will be unable to block your legitimate antivirus program. then download spybot to remove the trojan. |
|
| |
|
Joined:
December 2001
Posts: 7224
Location: The Great Pacific Northwest | Just FYI... Those running F-Prot or F-Secure products will not generally have to worry about such issues.
Much like Al often posts and reposts the "proper" way to ship a guitar, then people complain when they don't follow those directions and have issues... I provide either of these solutions in the same vain.
Neither F-Prot nor F-Secure are available on any production machines as an OEM product hence, they are not a target. So while there is a plethora of worms, trojans, and other cyber-nasties out there that will attack Microsoft, MacAfee, Symantec etc... At least for now, these products are relatively immune to those attacks, and have been for many years. |
|
| |
|
Joined:
December 2001
Posts: 10583
Location: NJ | Originally posted by Auriemma:
From:
http://windowsprotection.net/how-to-remove-pc-antispyware-2010-pcan...
Download and run this:
http://windowsprotection.net/spyware-doctor/pcantispyware2010/downl...
OR
How to remove PC Antispyware 2010 manually:
To perform manual removal of PC Antispyware 2010, you should do the following:
Delete PC Antispyware 2010 corrupt files:
%Program Files%\Common Files\aqamodero.dat
%Program Files%\Common Files\hubeweqa.lib
%Program Files%\Common Files\jatikysup._dl
%Program Files%\Common Files\ofyxodaqa.dat
%Program Files%\Common Files\sahaso.bat
%Program Files%\Common Files\zotys.bin
%Program Files%\PC_Antispyware2010
%Program Files%\PC_Antispyware2010\AVEngn.dll
%Program Files%\PC_Antispyware2010\htmlayout.dll
%Program Files%\PC_Antispyware2010\PC_Antispyware2010.cfg
%Program Files%\PC_Antispyware2010\PC_Antispyware2010.exe
%Program Files%\PC_Antispyware2010\pthreadVC2.dll
%Program Files%\PC_Antispyware2010\Uninstall.exe
%Program Files%\PC_Antispyware2010\wscui.cpl
%Program Files%\PC_Antispyware2010\data
%Program Files%\PC_Antispyware2010\data\daily.cvd
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\msvcm80.dll
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\msvcp80.dll
%Program Files%\PC_Antispyware2010\Microsoft.VC80.CRT\msvcr80.dll
%WINDOWS%\akudyta.lib
%WINDOWS%\hoxigawax.inf
%WINDOWS%\kyci.dl
%WINDOWS%\nuxojih.scr
%WINDOWS%\qynomikov.bin
%WINDOWS%\seni.reg
%WINDOWS%\yfoneby.db
%WINDOWS%\system32\_scui.cpl
%WINDOWS%\system32\cocefezyj.dl
%WINDOWS%\system32\qebykiti.dl
%Documents and Settings%\All Users\Application Data\pybisezyr.db
%Documents and Settings%\All Users\Application Data\ulycozoho._dl
%Documents and Settings%\All Users\Documents\ekenubes.com
%Documents and Settings%\All Users\Documents\icosagula.reg
%UserProfile%\Application Data\jugifyryve.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PC_Antispyware2010.lnk
%UserProfile%\Cookies\ajeby.reg
%UserProfile%\Cookies\yqeqaranym.vbs
%UserProfile%\Cookies\zebav.pif
%UserProfile%\Desktop\_scui.cpl.txt
%UserProfile%\Desktop\PC_Antispyware2010.lnk
%UserProfile%\Local Settings\Application Data\xoqupuwytu._dl
%UserProfile%\Start Menu\Programs\PC_Antispyware2010
%UserProfile%\Start Menu\Programs\PC_Antispyware2010\PC_Antispyware2010.lnk
%UserProfile%\Start Menu\Programs\PC_Antispyware2010\Uninstall.lnk
Remove PC Antispyware 2010 associated registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC_Antispyware2010
HKEY_LOCAL_MACHINE\SOFTWARE\PC_Antispyware2010
HKEY_CURRENT_USER\Control Panel\don’t load “scui.cpl”
HKEY_CURRENT_USER\Control Panel\don’t load “wscui.cpl”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PC Antispyware 2010″
Please, note that manual removal of PC Antispyware 2010 is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic PC Antispyware 2010 removal tool below:
Good Luck.
that site wants to buy some software |
|
| |
|
Joined:
October 2008
Posts: 639
Location: NW of Philadelphia | Ever since I started using AVAST!, I haven't had any issues. *knock on wood* |
|
| |
|
Joined:
October 2006
Posts: 5575
Location: big island | i came across several sites offering a fix for these trojans. methinks they are operated by the same folks that gave birth to them or are other parties trying to cash in on unsuspecting/ignorant folk. |
|
| |
|
Joined:
December 2001
Posts: 7224
Location: The Great Pacific Northwest | Originally posted by lanaki:
i came across several sites offering a fix for these trojans. methinks they are operated by the same folks that gave birth to them or are other parties trying to cash in on unsuspecting/ignorant folk. Exactly.. Any supposed "fix" should only be retrieved from a known reliable source.
While I am a fan of Open Source software for working such as Open Office, Gimp, etc... When it comes to data protection, you truly do get what you pay for. There are some really nice freeware packages like AVR, or Adaware, but if you are really concerned about protection, $35-$50 a year seems like a worthwhile investment.
I usually ask people... "If your computer got infected, would you care if it was just formatted and you lost all your data." If the answer is "I don't care, I don't keep anything worth saving on my computer".. then I recommend AVR, AdAware and ZoneAlarm firewall.
However, if they say.. "no I keep everything on my computer, and even though I have backups, I'd rather not have to rebuild if something goes sideways" I recommend F-Secure usually. |
|
| |
|
Joined:
December 2001
Posts: 10583
Location: NJ | still no luck
any other suggestions? |
|
| |
|
Joined:
February 2005
Posts: 11840
Location: closely held secret | Al, Here is step-by-step instructions (scroll down) to get rid of it using MalwareBytes Anti-Malware (free version). Just follow the instructions carefully and it does most of the work.
We've had a few incursions of this program and this is the easiest way we've found for most computer users to dispatch it using a trusted program. |
|
| |
|
Joined:
October 2006
Posts: 5575
Location: big island | malwarebytes was my second option if the method above did not work. since it did, i needed to go no further. hope you get all the bugs out, al. |
|
| |
|
Joined:
April 2008
Posts: 498
| I just had to do the same removal of Personal Anti virus/PC antispyware from Shannon's computer.
1st I Backed up all her photos/music to a 16gb pen drive just in case... then used Malwarebytes to get rid of the trojan,
I Then installed F-secure trial version...which cleaned up all the nasties completely, and told her to pay for the full version before the expiration date as this was the last time I was rebuilding or restoring a computer for her again.
of course the culprit of the infection as usual was file sharing programs... Limewire and Vuze.
(the following is NOT directed at AL and is just a general statement)
If you're going to download pirated software and or music or even pictures or videos... all of which is pretty much illegal... you'd better expect some easter eggs, viruses, and other hidden surprises in what you've just "got for free" lots of time bombs in those programs/files on the P2P networks... limewire, napster, vuze, sumotorrent, etc.....
Glenn |
|
| |
|
Joined:
March 2009
Posts: 416
Location: On the Coast - Halfway between SF & OR | Originally posted by Jonmark Stone:
The most effective way to clean it is to remove the drive and install it into another computer as a secondary drive. Then run up to date Antivirus and Spyware programs on the drive to clean it. +1
Worth a try but I've actually given-up even attempting it. I've found that reformatting the drive and re-installing data from back-ups to be less frustrating and the only assured method. |
|
| |
|
Joined:
December 2001
Posts: 10583
Location: NJ | well
I downloaded the program it seemed to work
then I plugged the cable back in and it rebooted and put that pc spyware 2010 on again.
any other suggestions |
|
| |
|
Joined:
March 2005
Posts: 5563
Location: Blue Ridge Mountains | Al, this started in Russia and began in 2008...each year it comes back again w/a new updated year...I had it and it took me a while: here are several helps:
http://www.pcworld.com/businesscenter/article/153810/antivirus_2009...
http://fix-computer-problem.com/rogue-antispyware/antivirus2010/ant... |
|
| |
|
Joined:
April 2004
Posts: 13303
Location: Latitude 39.56819, Longitude -105.080066 | Al, I sent you an email that I think will solve your problems. |
|
| |
|
Joined:
May 2003
Posts: 4389
Location: Capital District, NY, USA Minor Outlying Islands | I use the CA software provided by road runner. it works. |
|
| |
|
Joined:
February 2005
Posts: 11840
Location: closely held secret | Al, sorry MBAM didn't work for you.
Did Stephen email you money to buy a new computer? |
|
| |
|
Joined:
October 2008
Posts: 639
Location: NW of Philadelphia | Al, I didn't expect you to buy it, the manual removal was my main priority. Sorry for the confusion. |
|
| |
|
Joined:
December 2001
Posts: 10583
Location: NJ | I am still in virus hell
please don't send me to sites that give me a scanner then you have to pay for removal. I think they are made by the same people that wrote the virus |
|
| |
|
Joined:
December 2001
Posts: 10583
Location: NJ | still in virus hell |
|
| |
|
Joined:
September 2006
Posts: 10777
Location: Keepin' It Weird in Portland, OR | Originally posted by alpep:
somehow I got this damn PC antispyware 2010 to infect my computer Hey Al... (First, My Condolences) Is this some kind of freeware that you downloaded?
Is it one of them "Your computer has 235 viruses, click here for to remove them" pop-ups?
I just was curious, so I don't go to whichever neighborhood you caught this in...
(And yes, the virus-removal software is made by the same folks who made the virus. :mad: ) |
|
| |
OT virus help needed
