Adding Reply Archived Topic: It will not be bumped to the top of the forum. Topic Need help removing 'PC Cleaner' virus Membername   Not a member? Sign Up Free (takes 20 seconds) Password   Forgotten your password? Post Font: Verdana Arial Black Georgia Comic Sans Impact   Size: Tiny Normal Big Huge   Color: Default Dark Red Red Orange Brown Green Olive Cyan Blue Dark Blue Indigo Black [ Check Spelling ] [ Post Preview ] [ LiveTags ] FAQ Keyword Search: Post Options Favorites Manager Notify me of new replies to this topic by email Notify me of new replies to this topic by private message Original Post Brookie Chookie23 Posted at 10:41 pm on July 4, 2008 My mum stupidly clicked on one of those "You have 568674" viruses! Click here to remove them now!" adverts and now her PC is officially fuxored. The program she downloaded is called 'PC Cleaner' but is really a virus itself. It has disabled the task manager, removed the My Computer, My Documents etc icons from the desktop and start menu, and even removed 'Run...'. So I have no way to browse for the files that PCCleaner uses in order to delete them, nor can I disable the PCCleaner processes. I made a bootable CD and used the McAfee virus scanner on it to scan her PC, but it appears to be stuck on the Symantec folder (she has Norton Antivirus installed but it has expired and thus is rendered useless). I've tried booting in safe mode but the same problems occur. She has internet access but she can't check her email or sign into MSN. I got my sister to run an online virus scanner the other day but once it got to the virus removal stage, a Windows error of some kind (my sister's description was a bit vague) prevented her from completing the step. I've googled the PCCleaner virus but every website I could find just tells me what files to delete and what processes to stop, when obviously I can't do that. The only other thing I can think of doing is a system restore or a fresh install of XP/Vista, but my mum has some important files she uses for work and I don't know if they would be in the last restore point, nor do I want to risk infecting my own computer in order to browse her hard drive for them.

Replies Brookie Chookie23 Posted at 10:56 pm on July 4, 2008 Quote: from Themakingofagod at 3:22 pm on July 5, 2008 Quote: from UltimateSatisfaction at 1:44 am on July 5, 2008 you should use that restore thing and restore it to an earlier date.. maybe a week ago. then download superantispyware and scan the PC.    idk, i'm not a tsl or anything but that's what I'd do.. That would be a good solution if System Restore deleted installed files. What you need to do is from another computer, download an anti virus program, (I recommend AVG free edition from Download.com) and download the installer.  Take the installer and either copy it to a CD or Flash Drive if you have one, and install it on the infected computer, then it will scan and fix all errors and should get you back remotely to normal.  Then once thats fixed, KICK YOUR FUCKING MOM IN THE FACE and don't let her get near the computer ever again. I can't access My Computer, therefore I wouldn't be able to install anything from a CD. Themakingofagod Posted at 10:52 pm on July 4, 2008 Quote: from UltimateSatisfaction at 1:44 am on July 5, 2008 you should use that restore thing and restore it to an earlier date.. maybe a week ago. then download superantispyware and scan the PC. idk, i'm not a tsl or anything but that's what I'd do.. That would be a good solution if System Restore deleted installed files. What you need to do is from another computer, download an anti virus program, (I recommend AVG free edition from Download.com) and download the installer.  Take the installer and either copy it to a CD or Flash Drive if you have one, and install it on the infected computer, then it will scan and fix all errors and should get you back remotely to normal.  Then once thats fixed, KICK YOUR FUCKING MOM IN THE FACE and don't let her get near the computer ever again. UltimateSatisfaction Posted at 10:50 pm on July 4, 2008 Quote: from brookie chookie23 at 12:46 am on July 5, 2008 Quote: from UltimateSatisfaction at 3:14 pm on July 5, 2008 you should use that restore thing and restore it to an earlier date.. maybe a week ago. then download superantispyware and scan the PC.    idk, i'm not a tsl or anything but that's what I'd do.. It's not just spyware - it's a virus. But yes, if worse comes to worse I will have to restore her PC. I want to see how much I can salvage first. you know i mean restore it to an earlier date? it doesn't really get rid of anything, I don't think. i know you'll be able to access the control panel then. Brookie Chookie23 Posted at 10:46 pm on July 4, 2008 Quote: from UltimateSatisfaction at 3:14 pm on July 5, 2008 you should use that restore thing and restore it to an earlier date.. maybe a week ago. then download superantispyware and scan the PC. idk, i'm not a tsl or anything but that's what I'd do.. It's not just spyware - it's a virus. But yes, if worse comes to worse I will have to restore her PC. I want to see how much I can salvage first. Khadgar Posted at 10:45 pm on July 4, 2008 Step to remove , directly from http://www.spyware-techie.com/pccleaner-2008-removal-guide/ PCCleaner 2008 Automatic Removal Instructions This automatic removal method is for non-techie computer users. If you're too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you. Before you start: Print or bookmark these instructions because you'll have to reboot into Safe Mode. Also back up your computer in case you make a mistake. 1. Download and save SmitFraudFix ( http://siri.urz.free.fr/Fix/SmitfraudFix.exe ) to your desktop. 2. Restart your computer in Safe Mode. Once the desktop appears, double click on the smitfraudFix.exe on your desktop. 3. After the credits screen, you'll see a menu. Select the option number 2, which is 'Clean (safe mode recommended)', and then press Enter to delete infect files. 4. SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program. 5. Once the Disk Cleanup program is complete, you will be prompted with the message 'Registry cleaning - Do you want to clean the registry'. Answer Y (Yes) and hit Enter. Reboot your computer. 6. SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there's any) 'Replace infected file?' Answer by typing Y (Yes) and hit Enter. 7. Reboot your computer to complete the cleaning process. 8. After reboot, a Notepad screen may appear containing a log of all the files removed from your computer. If it doesn't appear, a file will be created called rapport.txt in the root of your drive, (Local Disk C:). 9. Restart your computer in Safe Mode (how to do safe mode). 10. Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that you want all the items to go to the Recycle Bin. 11. Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that you want all the items to go to the Recycle Bin. 12. Reboot your computer back to normal mode. Go to Windows Update and download all critical updates. Brookie Chookie23 Posted at 10:45 pm on July 4, 2008 Post from this position was omitted due to content violations UltimateSatisfaction Posted at 10:44 pm on July 4, 2008 you should use that restore thing and restore it to an earlier date.. maybe a week ago. then download superantispyware and scan the PC. idk, i'm not a tsl or anything but that's what I'd do.. Mustang11 Posted at 10:43 pm on July 4, 2008 Post from this position was omitted due to content violations boombabyy Posted at 10:43 pm on July 4, 2008 Post from this position was omitted due to content violations All 9 previous replies displayed.