I made a bootable CD and used the McAfee virus scanner on it to scan her PC, but it appears to be stuck on the Symantec folder (she has Norton Antivirus installed but it has expired and thus is rendered useless).

I've tried booting in safe mode but the same problems occur. She has internet access but she can't check her email or sign into MSN. I got my sister to run an online virus scanner the other day but once it got to the virus removal stage, a Windows error of some kind (my sister's description was a bit vague) prevented her from completing the step.

I've googled the PCCleaner virus but every website I could find just tells me what files to delete and what processes to stop, when obviously I can't do that.

The only other thing I can think of doing is a system restore or a fresh install of XP/Vista, but my mum has some important files she uses for work and I don't know if they would be in the last restore point, nor do I want to risk infecting my own computer in order to browse her hard drive for them.

-------
Check out my:
Art|Blog|Store
Need help with photography or graphic design? Ask me!

idk, i'm not a tsl or anything but that's what I'd do..

-------
Happy Birthday!

PCCleaner 2008 Automatic Removal Instructions

This automatic removal method is for non-techie computer users. If you're too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you'll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.

1. Download and save SmitFraudFix ( http://siri.urz.free.fr/Fix/SmitfraudFix.exe ) to your desktop.

2. Restart your computer in Safe Mode. Once the desktop appears, double click on the smitfraudFix.exe on your desktop.

3. After the credits screen, you'll see a menu. Select the option number 2, which is 'Clean (safe mode recommended)', and then press Enter to delete infect files.

4. SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program.

5. Once the Disk Cleanup program is complete, you will be prompted with the message 'Registry cleaning - Do you want to clean the registry'. Answer Y (Yes) and hit Enter. Reboot your computer.

6. SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there's any) 'Replace infected file?' Answer by typing Y (Yes) and hit Enter.

7. Reboot your computer to complete the cleaning process.

8. After reboot, a Notepad screen may appear containing a log of all the files removed from your computer. If it doesn't appear, a file will be created called rapport.txt in the root of your drive, (Local Disk C:).

9. Restart your computer in Safe Mode (how to do safe mode).

10. Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that you want all the items to go to the Recycle Bin.

11. Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that you want all the items to go to the Recycle Bin.

12. Reboot your computer back to normal mode. Go to Windows Update and download all critical updates.

Post edited at 11:01 pm on July 4, 2008 by Khadgar

-------
------
-----
----
---

---

you should use that restore thing and restore it to an earlier date.. maybe a week ago. then download superantispyware and scan the PC.

idk, i'm not a tsl or anything but that's what I'd do..

---

---

Quote: from UltimateSatisfaction at 3:14 pm on July 5, 2008

---

you should use that restore thing and restore it to an earlier date.. maybe a week ago. then download superantispyware and scan the PC.  

 idk, i'm not a tsl or anything but that's what I'd do..

---

It's not just spyware - it's a virus. But yes, if worse comes to worse I will have to restore her PC. I want to see how much I can salvage first.

---

---

you should use that restore thing and restore it to an earlier date.. maybe a week ago. then download superantispyware and scan the PC.

idk, i'm not a tsl or anything but that's what I'd do..

---

That would be a good solution if System Restore deleted installed files.

What you need to do is from another computer, download an anti virus program, (I recommend AVG free edition from Download.com) and download the installer.  Take the installer and either copy it to a CD or Flash Drive if you have one, and install it on the infected computer, then it will scan and fix all errors and should get you back remotely to normal.  Then once thats fixed, KICK YOUR FUCKING MOM IN THE FACE and don't let her get near the computer ever again.

-------
Procrastination is bad for these two reasons.
1.
2.

---

Quote: from UltimateSatisfaction at 1:44 am on July 5, 2008

---

you should use that restore thing and restore it to an earlier date.. maybe a week ago. then download superantispyware and scan the PC.  

 idk, i'm not a tsl or anything but that's what I'd do..

---

That would be a good solution if System Restore deleted installed files.

What you need to do is from another computer, download an anti virus program, (I recommend AVG free edition from Download.com) and download the installer.  Take the installer and either copy it to a CD or Flash Drive if you have one, and install it on the infected computer, then it will scan and fix all errors and should get you back remotely to normal.  Then once thats fixed, KICK YOUR FUCKING MOM IN THE FACE and don't let her get near the computer ever again.

---