Translate to your language.

Monday, August 27, 2018

How to remove Trojan:JS/Bondat virus easily

For the average user.

Files created by the virus:
The threat copies itself as .js to %USERPROFILE%\. The name of the file and the folder is generated from your computer's name, for example %USERPROFILE%\badce\tgwrryyi.js. 
all drives will be affected. Spreads through removable drives and steals information from the compromised PC.

This are the files created by this trojan virus

The following can indicate that you have this threat on your PC:

Your files and folders in removable drives have been replaced with shortcut links or moved to a folder called .Trashes or Drive and create a folder name 598

and the javascript inside it


  1. Download and run ESET JS/Bondat fixer   
  2. just click the link to continue the download and open JS/Bondat removal tool



Click Run



3. and agree, now the JS/Bondat removal tool will scan and notify if your computer is infected




4. just click yes, after cleaning is complete, press Y to restart your computer. 


Here is option 2
  1. Download Microsoft Security Essential and extract on the desired path. Click here for 32 bit and 64 bit.

      2. Install MSEIntall32/MSEinstall64, Note! after the installation do not restart the computer just
         download the updates, after updating the MSE will show updated then do a quick scan. if you
          have trouble downloading the updates, for MSE 32Bit Click Here. for 64Bit Click Here

     3.After a quick scan reboot the computer, if desired make a full scan to all drives if you have 
        drive d:, e: and so on, anyway, mse is always on guard.all done :)!


      Click here for more info about JS/Bondat


Sunday, April 12, 2015

For quick adware and malware removal without installing anti-malware

Note! Anti-virus is still needed.

Removal of the following without installing anti-malware.
Adware (advertising Softwares)
PUP (Potentially Undesirable Program)
Toolbars
Hijacker (Hijack of the browser's homepage or search engine)

Tools needed
Download:
Bitdefender ART and AdwCleaner
Compatible with Windows XP, Vista, 7, 8, 8.1 in 32 & 64 bit.



Nowadays PUP or potentially unwanted programs are commonly installed on computers of unaware PC users, it is because these apps were bundled with some common freeware applications used by most consumers looking for free software, most of this apps consumes more resource than your legitimate programs.
To prevent this program install in your PC's make sure you read any agreement before you click yes or agree while installing the program.

Signs of malware and adware installed on your computer:
                                               
                                               In the toolbar and in the start page

Hijacker


The default search engine you use

adwareonsearch


In process 

adwareonprocess


Pop-ups

SpeedUpMyPc



What to do:

                   Download and Run  AdwCleaner
                       
                                                BitDefender ART                                                   
                                                                 

                                            BitDefender ART scanning
                               





                                    Adware and malware found while scanning

Bitdefender Adware removal tool


Adwcleaner found adware

AdwCleaner

After scanning the removal tools will notify you to reboot just confirm to reboot.



Friday, December 19, 2014

Remove Adwares and Malwares Free: Adware, fake virus, Malware, Trojan Virus, keyloggers, hijackers, pup.


 computer virus, remove the virus, fake virus, adwares, malwares


This program can remove adware, fake virus, and malware, all you have to do is download, install and scan.
You can download free Malwarebytes Anti-Malware Free, just copy and paste the link below into your browser.

http://data-cdn.mbamupdates.com/v2/mbam/consumer/data/mbam-setup-2.0.4.1028.exe

Tuesday, October 21, 2014

How to remove yuyun Cantix virus easily.

For the average user.
Files created by the virus: autorun.inf, Microsoft.Ink, Desktop.ini, all drives will be affected by this virus.



  1. Download Microsoft Security Essential and extract on the desired path. Click here for 32 bit and 64 bit.
  2. Install MSEIntall32/MSEinstall64, Note! after the installation do not restart the computer just download the updates, after updating the MSE will show updated then do a quick scan. 
  3. Optional: While scanning, download  these utilities  Cure Utility  or  Quicklock . This utility will restore the task manager, registry editor, folder option and run. If Cure.exe won't run, download Dot net framework. this app needs dot net 2 framework. To download get here at filehippo.
  4.  Extract Cure.exe or Quicklock, on windows 7 right click then Run as administrator.on Cure.exe click Heal button then ok. On Quicklock, if the task manager and registry editor is disabled it will show the checkboxes were all checked, to restore them uncheck the checkboxes then apply.  
  5. Click run or windows icon + r, on the text box type MSConfig then hit enter, select startup tab uncheck all except Microsoft security client then click ok.
    Startup tab in msconfig utility
    Msconfig Utility
  6. Reboot the computer, if desired make a full scan to all drives if you have drive d:, e: and so on, 
  7. anyway, mse is always on guard.all done :)!


Sunday, May 19, 2013

Win32.Sality Removal: Remove Win32.Sality VIrus/ Disinfect Win32.Sality Virus the easy way





To disinfect a computer from Win32.Sality Virus, use this utility SalityKiller from Kaspersky Lab.

1.) Download SalityKiller and execute.

For worst!
2.) Download and burn to CD/DVD

3.) Turn off system restore.

Optional download utility to open task manager if taskman is disabled.
      If Cure.exe wont run get dot net framework
4.) Download Registry cure  

You just open it and scan for a few minutes then reboot ^_^.


Download from main website Sality killer




Friday, July 29, 2011

facebook virus july 26-27 2011

Tools needed:
Process Explorer
Kaspersky Virus Removal Tool 2011
Antivirus, we use free AVG antivirus
 HijackThis
Malwarebytes
Closing ports 445 and 135  - fix Generic Host for Win32 Process and svchost.exe errors.
 or update your windows security patches


Step 1
Before we begin first download Process Explorer if the browser wont allow, open task manager and kill in the process the falshplayer.exe (press Delete then ok or right click the flashplayer.exe and delete.).
and second download the above tools needed.
when all the tools are ready, install the Kaspersky Virus Removal Tool 2011 and make a quick scan, after it removes the infection reboot the computer if needed, after the reboot  click Start >>> click Run then type msconfig, go to Startup tab uncheck  flashpalyer.exe and any application with 32 example services32.exe, ccdrive32.exe,  and also application with no name.

 Step 2
Open the process explorer again and look if the flashplayer.exe, and any apps name with 32 is running , if it is press Delete then ok or right click the flashplayer.exe and delete. you can see mostly the virus stay below the windows explorer. click here

Step 3
Open windows explorer go to tools  then click folder option, In the View tab under the Hidden files and folders click Show hidden files and folders and Uncheck Hide extensions for known file types and Hide protected operating system files.
In the WINDOWS folder in C: delete the folder name update 1, update 01, update -1,update 02 and etc.. or any folder name update/s there's no such thing name updates in WINDOWS sub folder, look at the picture below.
system files,  computer virus, remove the virus, fake virus, adwares, malwares


Step 4
Install  free AVG antivirus

Step 5
Run  HijackThis
and  accept then do a system scan, find flashplayer.exe or any name of an application with 32.exe and delete. note! (NvMediaCenter and NvCplDaemon is not included this is not a virus)

Step 6
Install Malwarebytes
update and do a quick scan and remove infections, reboot if needed, if you want to be sure that no virus is still running, repeat step 2.

Step 7
Closing ports 445 and 135 - fix Generic Host for Win32 Process and svchost.exe errors.

 or update your windows security patches

if the virus is still running backup your important files and do a REFORMAT.
.

Monday, June 13, 2011

Registry Cure

 computer virus, remove the virus, fake virus, adwares, malwares
A simple utility program to cure the registry damage by a virus, it restores the Windows Task Manager, Run, Folder Option and Registry Editor. If the program won't run, Get Microsoft .NET Framework Version 2.0.
Download DotNet Framework 2

 Download  Reg Cure

First what is a Computer VIRUS?

A computer "VIRUS" is an acronym which contain many meanings (V.I.R.U.S.) a Vital Information Resources UnderSiege or a Computer program/ codes that can command to copy or to replicate itself and then infect a computer from one to another without the permission or knowledge of the user. This computer virus can be very harmful and damaging to the computer system, it affects root files, and installed program files. A computer virus can make risk of hacker threats, attacks and opens the door to even more threats, like downloaded files and software installations. Once you found the symptoms, then it can be counterattacked with the appropriate antivirus software and security patches, but first it needs to be installed before the virus infect the system. Installing a powerful antivirus program is a must. you can also check @ Wikipedia.


Symptoms

If your computer is infected with this malicious viruses, it will begin to shows some common symptoms that identifies a virus is present like modified file sizes, contents, or the hogging system resources. The unaccounted use of RAM which shows slowing of your computer.


How to remove the virus in your computer

Tools

Tools needed to remove the computer virus that are now available on the Internet.

From sysinternals, the powerful

Process Explorer By Mark Russinovich (optional) if you want to know what process is eating up your RAM but a powerful tool to kill a process of a malicious program.

Quick lock 1.0 By Quang Anh Do. A small utility to Enable/Disable Task Manager, Command Prompt and Registry Editor, This Utility is a big help to Enable Registry Editor, This is done for manual deletion of malicious program.

and the Virus Removal Tools from different Antivirus Company

Avast,Avg,Avira,Bit defender,Eset, Norton,Trenmicro and Kaspersky.


USB Protection

For USB flash drive protection against malware and viruses use this free utility from sordum.org