[G]

Fuckkkkkkkkkkkkkkkkkkkkkk , I was trying to find some episodes of The Office and I get some random shit called "AntiSpyware Soft"?? This fucker is destroying my computer and I can't seem to find a proper way to get rid of it. Can anyone help?

[Gt-R R34]

try google and that specific program, usually there are methods to remove it.

If not, http://www.malwarebytes.org/mbam.php

best program imho.

[tiger_handheld]

download spybot search n destroy.
update spybot , and immunize
turn off system restore
restart pc in safe
run spybot
fix errors
run virus scan
restart in safemode
run spybot
if no errors. restart in normal mode
re run spybot
if clean , turn system restore on
log back into rs - thank tiger_handheld, and post picture of your gf.

[StylinRed]

safemode

run malwarebytes
spybot s&d
and Kapersky

if its still messed up run Hijackthis get a log file and post it up on a help page

i recently had a bad virus ran those programs it was removed but something was still preventing me using search engines, so i ran hijackthis and noticed there was something implemented to block google/yahoo/bling etc's websites (which cant be detected since its not exactly a virus or spyware and used hijackthis to delete the blocks)

[J32A2-S]

try google and that specific program, usually there are methods to remove it.

If not, http://www.malwarebytes.org/mbam.php

best program imho.


agreed! this will clean it!

if you have trouble installing or launching the exe file, try renaming it to something else

[CP.AR]

I just cleaned it off 2 computers manually (I do it manually so I know EXACTLY what changes I have made)

this is what I did:

1. boot safe mode w/ command prompt
2. start ask manager and end any [RANDOM].exe processes
3. start regedit and remove the following keys

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVe rsionRun ""
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentV ersionRun ""
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVe rsionPoliciesAttachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVe rsionInternet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVe rsionPoliciesAssociations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = "1"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVe rsionInternet Settings "ProxyOverride" = ""
HKEY_CURRENT_USERSoftwareAvScan


4. navigate using command prompt to c: \[username]\Documents and Settings\Local Settings\Application Data\

and delete any folders with random folder names... ie: "xopqktj"

5. (I just did this to make sure it didn't leave any residue crap on my system directory) - empty windows prefetch folder

6. restart and all should be fine, but just as a precaution I used AVG to give it another scan


OP: If you want to do it this way and need help, PM me and I would be more than glad to give you a hand over msn or whatever

[Vansterdam]

omfg i just spent 2 hours removing this shit. just went to system restore lol this program wont let you go online or remove anything its harsh pissing

[JesseBlue]

you gotta love how some idiots just spend time doing this for kicks eh

[G]

Jesus, Fucking, Christ. I got rid of it the day I posted it... took me around 3 hours of shitting bricks. I tried a lot of methods, but they all didn't work , or it took a long time. I finally resulted in doing this:

1) Downloaded Ad-Aware Free.
2) Restarted my computer and opened Ad-Aware Free as fast as I can, I did this because when the virus starts it will block all the programs from being opened.
3) Ad-Aware Free will take care of the virus during the scan and quarantine it.
4) When the scan ends, just remove it and its gone!

Win!

Thanks for your all your help! And Tiger_handheld, no thanks, and no pics. lol

[VooDood]

hmmmm, i got this exact same virus too. apparently its a fake virus that just introduces a whole bunch of other trojans if ure not careful. what i did was went on removevirus.org searched up "antivirus soft" and it came up with a guide on how to remove it throughly, i even did all the registry editing and stuff.... my computers running kinda sluggish now, prob due to all the antivirus programs i installed...
ps: i think this problem might have originated from nsfw forums....specifically porno thread.

[Razor Ramon HG]

1. Spybot
2. Malwarebytes
3. ComboFix
4. HiJackThis

That usually does it, although if you're noob you might not want to tinker with ComboFix/HJT without reading up first. The first two are straight-forward.

[Purely]

will system restoring remove this spyware?

[Vansterdam]

it did for me

[Purely]

it did for me

I started my computer up.. and this spy ware/virus thingy ran a fake anti-virus thing.. and I couldn't close it. I decided to system restore, and I scanned with ad-ware and Malwarebytes and nothing came up. I am worried if I still have the spy ware/ virus right now though.

[G]

Does it still pop up? If you can, you don't need to system restore (I didn't). You just need to be fast enough to open ad-aware before the fake anti-virus thing opens, this way, it won't restrict all the programs you open. When ad-aware scans, when it detects it it will automatically shut it down and quarantine it so it doesn't fuck with your computer, then finish the scan and remove it and you will have a good day.

[Purely]

Does it still pop up? If you can, you don't need to system restore (I didn't). You just need to be fast enough to open ad-aware before the fake anti-virus thing opens, this way, it won't restrict all the programs you open. When ad-aware scans, when it detects it it will automatically shut it down and quarantine it so it doesn't fuck with your computer, then finish the scan and remove it and you will have a good day.

I turned off my computer when the anti-virus thingy opened. I re-booted and did system restore, and after system restore the fake anti-virus thingy didn't open anymore. But I read this thread, so I scanned with Malbarebytes and ad-ware and it came up with nothing. How do I make sure I got rid of the spy ware/virus?

[G]

It should be gone. Those 2 programs check it pretty thoroughly. As long as you don't get the annoying popups then you should be fine.

[Vansterdam]

most anonying spyware i have ever had

[hotong]

just got this spyware today got rid of it in 2 hours so annoying

[wouwou]

Microsoft Security essentials
Malwarebytes

that's the godly spyware killer combo.

and they are free.

[Gumby]

I hate getting rid of viruses, so periodically I make an image of my hd. If shit hits the fan, I just restore my image (that I know is clean). Hirens Boot CD is a life saver! :D

[underscore]

I don't like Malwarebytes, I've run it and Spybot S&D and MWB rarely picks up on anything, whereas Spybot picks up a lot more crap. That plus MSE and you should be golden.

[G]

FUCKKKKKKKK IT'S BACK WTF????? AD-AWARE DIDN'T GET RID OF IT?

HELP: Ad-Aware Free + Malwarebytes CAN'T FIND IT WTF??

[BlacknJean]

dude just system restore it to a date before you got hit by the virus. this usually removes shit the easiest

[CP.AR]

FUCKKKKKKKK IT'S BACK WTF????? AD-AWARE DIDN'T GET RID OF IT?

HELP: Ad-Aware Free + Malwarebytes CAN'T FIND IT WTF??

read my post above (post #6). It kills the virus from inside out. It takes a bit of elbow grease. But it worked for me on two seperate occasions

[ericthehalfbee]

FUCKKKKKKKK IT'S BACK WTF????? AD-AWARE DIDN'T GET RID OF IT?

HELP: Ad-Aware Free + Malwarebytes CAN'T FIND IT WTF??
Ahhh, so sad. Downloading illegal content and you got a virus. Boo fucking hoo.

[Psykopathik]

update to Adobe Acrobat 9 or higher. theres a hole in the PDF reader's security.