PC has Personal Security Trojan or Spyware

[neworldman]

My daughters Dell Latitude D600 laptop got a Trojan I think. It has the Personal Security software that disables everything unless you buy it for $180. I have tried the Malwarebytes, Anti-Malware and the Super Malware..... did not take it all off. I can only work the PC in save mode as either regular or administrator. The Malwarebytes, Anti-Malware removed like 240 things so I thought it was good. But when I start it in normal mode it gave me a DLL error and goes back to the personal security software error. Is there any other software to try in safe mode to fix this? Or do I need to wipe the drive and start over.

[fritzi93]

Do you have a restore point to go to prior to the infection? Assuming you don't or it didn't work, did you try disabling system restore, then run the malware scans?

You'll probably get some more suggestions, but personally, if the above don't work, I'd backup files and do a re-install.

Good luck.

[Nelson37]

There are many variations on this software. Some are a royal bitch to remove.

Clean the temp files, check system32 dir for bad files.

When you run any anti-virus and it finds infections, run it AGAIN until you find nothing.

[budz]

I just fixed a 6 year old Sony Vaio laptop that also had DLL errors. I ended up reformatting and reinstalling to factory settings. It was easier then having to scan with various programs for spyware and viruses. I was fortunate to find the restore image settings in the control panel.

[jagabo]

Take the drive out of the computer and scan as a secondary drive in another computer. It's much easier to remove malware when it's not on the boot drive.

[HotDamn!]

The virus might have a gen. so whenever you use the computer its downloading more infections. If you've tried Avast anti virus, Malwarebytes, and Superantispyware and your still having problems then instead of going through the drive just get whatever you can onto a flash drive (pictures, videos, ect..) and reformat like suggested above.

If you go through the drive then odds are your going to google every other file to find out what the heck it is, good or bad, and you might end up deleting something you need. Besides, some infections won't let you delete them that way anyhow.

Be sure to plug the flash drive into a computer and before you remove them from the drive run multiple scans on the pictures, videos, ect.. to be sure the infections were not put in those files.

[freebird73717]

Take the drive out of the computer and scan as a secondary drive in another computer. It's much easier to remove malware when it's not on the boot drive.

I agree with this.
Also you can use a boot cd to clean an infected computer

http://virushelp.forumotion.com/security-software-f3/clean-an-infected-computer-with-u...windows-t4.htm

http://virushelp.forumotion.com/security-software-f3/clean-an-infected-computer-with-u...boot-cd-t5.htm

[neworldman]

Take the drive out of the computer and scan as a secondary drive in another computer. It's much easier to remove malware when it's not on the boot drive.

I agree with this.
Also you can use a boot cd to clean an infected computer

http://virushelp.forumotion.com/security-software-f3/clean-an-infected-computer-with-u...windows-t4.htm

http://virushelp.forumotion.com/security-software-f3/clean-an-infected-computer-with-u...boot-cd-t5.htm

Thanks this seamed to work. Now I will do some my scans. Geuss she needs a better antivirus then AVG. What would you recommend

[freebird73717]

Not everybody likes it but the free Avast works well for me.

[neworldman]

Now I get a dll error when I do a restart but it goes away after I click ok. It is F3SCRCTR.DLL. What do I need to do to remove this? The PC runs fine it is only when I start it.

[freebird73717]

What's the exact error? Can you post a screen shot?

[neworldman]

This is the screen shot of the dll error

[deadmeow]

I think it might be better to install a clean copy of windows and not bother trying to nuke the computer with anti-virus programs. If you found 250 bad progs, how many more are missed in the scan??

[Bjs]

Go into safemode and regedit and visit these two locations

A: HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

Delete anything shown as belonging to myweb junk

B: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Same for here

Close regedit and reboot the pc

[hech54]

I think it might be better to install a clean copy of windows

That is simply NOT a feasible option for the majority of the population.....especially since this moronic, knee-jerk reaction almost NEVER comes with the disclaimer that ALL of your personal data (pictures, docs, etc) will be lost.

[neworldman]

I think it might be better to install a clean copy of windows and not bother trying to nuke the computer with anti-virus programs. If you found 250 bad progs, how many more are missed in the scan??

Ya that is probally the best thing to do. The problem is that the original XP Pro sticker is gone that had the activation keys on it. I have a XP pro cd. I wonder if there is a program that can get the XP Pro activation keys?

[budz]

I think it might be better to install a clean copy of windows and not bother trying to nuke the computer with anti-virus programs. If you found 250 bad progs, how many more are missed in the scan??

Ya that is probally the best thing to do. The problem is that the original XP Pro sticker is gone that had the activation keys on it. I have a XP pro cd. I wonder if there is a program that can get the XP Pro activation keys?

Contact Dell to get another xp disc...it doesn't cost much...when I fixed that Sony Vaio laptop I contacted Sony and it would have cost under $24.00 including shipping to Honolulu. I was able to find a restore setting in the control panel of that Sony Vaio so I didn't have to purchase the restore cd disc. It would be a long shot but check the control panel because that's where I found the restore to factory settings wizard. I didn't need the xp key for that.

[lordsmurf]

I think it might be better to install a clean copy of windows

That is simply NOT a feasible option for the majority of the population.....especially since this moronic, knee-jerk reaction almost NEVER comes with the disclaimer that ALL of your personal data (pictures, docs, etc) will be lost.

I'm with you, Hech.

Sometimes stores like Best Buy don't even give you warning. You get this "oh, sorry dude" response instead. I had a friend recently do that. He was not patient enough to wait for me to think of a solution -- so he had all his stuff deleted instead. Dumbass.

[kimco52]

I think it might be better to install a clean copy of windows

That is simply NOT a feasible option for the majority of the population.....especially since this moronic, knee-jerk reaction almost NEVER comes with the disclaimer that ALL of your personal data (pictures, docs, etc) will be lost.

Not if you do what jagabo suggested. I gave up with the time consuming process of trying to get rid of problems and just put in a new HD, reinstall the OS and other programs, put the bad one in as a secondary drive and copy all my stuff from it to the new one, then reformat (a few months later when I have verified I have all the files I want) that drive and use it again.
Much simpler and easier. I have done this on more than one occasion on several computers.

[hech54]

I think it might be better to install a clean copy of windows

That is simply NOT a feasible option for the majority of the population.....especially since this moronic, knee-jerk reaction almost NEVER comes with the disclaimer that ALL of your personal data (pictures, docs, etc) will be lost.

Not if you do what jagabo suggested. I gave up with the time consuming process of trying to get rid of problems and just put in a new HD, reinstall the OS and other programs, put the bad one in as a secondary drive

Wonderful story...but that's NOT what Jagabo said or even suggested.

[deadmeow]

You can backup all of your videos, pictures, documents to a cd/dvd-r or a usb flash drive. With USB drives, you can backup all of your documents/pics in seconds practically.

It comes down to practicality.
(A)If you can afford another copy of Windows XP, maybe you can get it cheap on Ebay, that is a simple option, and nearly full proof. (Nothing moronic about re-installing windows, and you don't have to format or wipe your drive, you can reinstall windows and keep all of your documents/pics/videos etc.)

(B)If you cannot afford the money to do that, you must invest many hours of time and frustration, and once the computer is working, is all the maleware gone, or merely dormant??

Either way copy all of your important documents/pics etc. to a flash drive or cd/dvd just encase the infected computer should wipe or corrupt the data on the hard drive.

[lordsmurf]

Most people don't realize where all their files are hiding. I'm very meticulous about file locations, but even some of my stuff can turn up in odd locations. Unless you fully backup up the ENTIRE computer, you're going to lose something -- I promise you, I'd bet money on it.

A second hard drive is the way to go here.

If you can't afford a new $50 hard drive, then you have other problems, and shouldn't be sitting at a computer. When a car breaks down, I never see somebody griping about a $50 fix -- they're usually happy that's all it cost. This is NO DIFFERENT. Have some perspective.

If your computer is already legally running Windows, then there is no guilt in finding another copy by whatever means necessary. (Borrow disc from neighbor/friend/family.)

Wiping a computer is the most lazy way to "fix" a computer.

[hech54]

You can backup all of your videos, pictures, documents to a cd/dvd-r or a usb flash drive. With USB drives, you can backup all of your documents/pics in seconds practically.

So you expect the very same "computer newbie" who does not know how to properly get rid of a virus, doesn't know how they got the virus, knows nothing about something called "safe mode".....you expect that computer newbie to have HAD the common sense to backup their important date beforehand? Is that what you are trying to say?

that is a simple option, and nearly full proof. (Nothing moronic about re-installing windows

full proof?
Fullproof?

moronic

[freebird73717]

Okay. According to that screen shot that dll is related to mywebsearch which your scans probably deleted. Now the program is trying to run and guess what, it can't find a necessary dll because your av/malware product deleted it.

Do what Bjs suggested. Also download and run ccleaner and clean your registry that way as well.

And yes I also agree that reformat/reinstall is the lazy way out. With a little effort you can clean most any infection. About the only time I ever re-install is when a virus has destroyed some needed system files, and even then a non-destructive repair installation can usually fix those problems as well. As said by others, it just depends on how much effort you want to put into it.

[aedipuss]

I think it might be better to install a clean copy of windows and not bother trying to nuke the computer with anti-virus programs. If you found 250 bad progs, how many more are missed in the scan??

Ya that is probally the best thing to do. The problem is that the original XP Pro sticker is gone that had the activation keys on it. I have a XP pro cd. I wonder if there is a program that can get the XP Pro activation keys?

there are several key finder programs.

http://pcsupport.about.com/od/productkeysactivation/tp/topkeyfinder.htm

[neworldman]

Go into safemode and regedit and visit these two locations

A: HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

Delete anything shown as belonging to myweb junk

B: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Same for here

Close regedit and reboot the pc

That worked great thanks. All good to go now. Have everything backed up and also the drivers backup if I need to reinstall windows. Even got the activation keys. Thanks to all for the help. Now I know what to do next time

[hech54]

I've never edited the registry on my own....you are braver than me... I rely on programs like CCleaner to do that for me.

[redwudz]

Just a comment. BACKUP your registry before doing any editing there, including using programs that edit your registry automatically. This can usually help the PC to recover if you screw up the registry, which is very easy to do.

[classfour]

rkill.exe to stop the trojan in it's tracks - if there is one, it will show up in the rkill log.

malwarebytes, then run malwarebytes in safe mode on boot.

Uninstall malwarebytes and reinstall it - some trojans corrupt the program files.

Then, just to be safe, repeat it over with superantispyware - it's all freeware.

It should take about 20 minutes or so - then run ccleaner to clean out the crap.

[aedipuss]

i would add gmer to that list to find any rootkits hiding as services.