PPRuNe Forums - View Single Post - Please help - virus attack
View Single Post
Old 8th Nov 2010, 23:22
  #33 (permalink)  
reynoldsno1
 
Join Date: Jan 2000
Posts: 1,346
Received 19 Likes on 10 Posts
I had an issue with a similar program called Personal Security a few months ago. I followed this process:

To start with I booted up and started Task Manager before the malware program started and stopped it running, then:

Personal Security manual removal:
Kill processes:
psecurity.exe
HELP:
how to kill malicious processes

Delete registry values:
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58FFCF482208906E6A889FD56
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ Run "PSecurity"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion \Internet Settings\5.0\User Agent\post platform "WinTSI 01.12.2009"
HELP:
how to remove registry entries

Unregister DLLs:
win32extension.dll
HELP:
how to unregister malicious DLLs

Delete files:
psecurity.exe Uninstall.lnk win32extension.dll Computer Scan.lnk Help.lnk Personal Security.lnk Registration.lnk Settings.lnk Update.lnk
HELP:
how to remove harmful files

Delete directories:
C:\Program Files\PSecurity
C:\Program Files\Common Files\PSecurityUninstall
C:\Documents and Settings\All Users\Start Menu\PSecurity

Obviously the details will be different, but the above worked fine and I haven't had a problem since.
reynoldsno1 is offline