Please Assist - WinPC Virus turned Registry problem?

[kennyjg44]

Hello-

A computer of my co-workers was infected with WinPC Antivirus 2009, which I was (I think) able to effectively remove. The problem is, now, that I cannot get this computer online (at all), nor will it run the Security Center service. During the removal process, I did delete some registry lines, but nothing (that I know of) that would be harmful.

What to do next (we're in an office, so wiping the drive is not an option!)

Thanks,
kg

[SeanC]

I'm assuming there's no office IT staff you can turn to? If so, then the office policy would probably be they have to look after the problem.

Need some more info, OS version, what AV software is being used, antispyware, firewall, etc...

Most importantly, do they have admin access on the PC? If not, you're kind of limited in what you can do.

[awadodem]

I removed it manually, according to these instructions:

WinPC Antivirus - how to remove

Supposedly Malwarebytes and Spyware Doctor should work as well, but it's better to do it manually if you have the patience

[Martoch]

Quote:

Originally Posted by awadodem

Supposedly Malwarebytes and Spyware Doctor should work as well, but it's better to do it manually if you have the patience

Malwarebytes does a great job at detecting/removing Antivirus 2009 (AKA Antivirus 360). Install it, update it, and run a full scan in safe mode.

[awadodem]

WinPC Antivirus, Antivirus 2009 and Antivirus 360 are 3 different parasites, so it's really hard to say how MBAM will work against every one of them

[Martoch]

It lives in an Antivirus 2009 folder. It seems that Malwarebytes does the job for removing "WinPC Antivirus".
How to remove WinPC Antivirus (Removal Guide)

Quote:

Remove WinPC Antivirus, removal instructions
Other programs to remove WinPC Antivirus:
• Malwarebytes Anti Malware - Review - Download

I'm not saying to depend only on Malwarebytes (run A Squared Free, SuperAntiSpyware, etc after deleting temp files with a program like CCleaner), but it can certainly speed up the process removal and is easier to use for the average person than removing folders, files, and registry entries...wouldn't you agree?

[awadodem]

I would, but that would be flaming.... whoooooooops ;D