sucerity malware beware !!!

N

Nismo240s13

Member
windows 7 vista ect its a little blue shield that pops up and says your comp is infested with hundreds of viruses click here to remove just pay for the soft ware. well its a load of crap... it looks legit but indeed its a virus in it self. its a bitch to get rid of and wont let you download anything or click on anything without telling you that you have a virus. to beat this you must search security in the start menu then right click it open properties and click open file location from there right click the security file and delete that sum bitch!!! if it doesnt let u like it did me move the file onto the desktop right by the recycle bin and restart the computer . upon start up drag the icon to the bin and empty it and ta da . search the menu one last time and delete any shortcuts for it and your good to go . after this if your still worried u have a virus go ahead download avast do a scan and like me you will find out that it was a load of shit and your fine . well that was my adventure for the night hope this helps someone
 
Yea. Been downloading torrents or anything lately? It happens. Just task manager, see whats running, find the file(s), delete. Done.
 
easy to get rid of

safe mode
clear your temp files
download..update & then run spybot/malwarebytes (delete everything that is infected)
msconfig-->startup items--->unclick all startup items that you don't know wtf they are.

you'll be straight for now
 
there is a program called r kill it stops most malware and virusis on your comp so you can then delete them. running other shit wont help if the virus is still running
 
I've had to do this a few times already on my old computer and on some friend's, to kill it completely [it uses proxies, and is a self install p.o.s. that'll keep coming back if you don't remove everything completely]. Running task manager won't work since it blocks it... They have software that you can download to fix it, like rkill, mbam, etc., but I like doing it manually:

Reboot in safe mode w/ networking and:

Kill processes:
[RANDOM CHARACTERS]sysguard.exe, for example ghrtsysguard.exe
[RANDOM CHARACTERS]sftav.exe

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\AvScan


Delete files:
Windows XP: %UserProfile%\\Local Settings\\Application Data\\\\[RANDOM CHARACTERS]sysguard.exe
Windows Vista and Windows 7:
%UserProfile%\\AppData\\Local\\\\[RANDOM CHARACTERS]sysguard.exe %UserProfile%\\AppData\\Local\\\\[RANDOM CHARACTERS]sftav.exe

Delete directories:
%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS]\ (Win XP)
%UserProfile%\AppData\Local\\ (Win Vista & 7)
 
GeneStarWindGSW said:
easy to get rid of

safe mode
clear your temp files
download..update & then run spybot/malwarebytes (delete everything that is infected)
msconfig-->startup items--->unclick all startup items that you don't know wtf they are.

you'll be straight for now
Click to expand...

THIS FTW... I do this at work all day, No idea what we would do without malwarebytes, their just giving away win...
 
comablack783 said:
THIS FTW... I do this at work all day, No idea what we would do without malwarebytes, their just giving away win...
Click to expand...
im the computer technician/specialist at my job, so i do everything computer related.

yea thats what i do at work too. if it ever gets nasty I use Combofix & HiJackThis but only recommended if you know wtf your doing lol.
 
roflmaccomment

my laptop has this virus right right now which is why i am on my desktop, geeksquad dude coming to fix the problem.

Yea and the 'antivir pro' page it brings you to, it's like 'buy me buy me', sorry last thing I would do is put my CC info out on a comp that has spyware wtf...
 
You must log in or register to reply here.
Back
Top Bottom