Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Winxp on August 27, 2007, 01:53:12 AM

Title: Help remove malware: "SecurePCCleaner"
Post by: Winxp on August 27, 2007, 01:53:12 AM
Need help to get rid of a nasty malware called "SecurePCCleaner" .
I have run Lavasoft Ad-Aware antispyware as a counter measure.
But the malware "SecurePCCleaner" has returned.

winxp
Title: Re: Help remove malware: "SecurePCCleaner"
Post by: DavidR on August 27, 2007, 03:14:52 AM
What is detecting SecurePCCleaner and where is it detected, e.g. (C:\windows\system32\infected-file-name.xxx) ? 

AdAware I wouldn't call it anti-spyware it seems more lightweight than that.

If you haven't already got this software (freeware), download, install, update and run it, preferably in safe mode.
1.  If using winXP AVG anti-spyware (formerly Ewido) (http://www.ewido.net/en/download/) Resident scanner during trial On-Demand after trial ends. Or SUPERantispyware (http://www.superantispyware.com) On-Demand only in free version. Or Spyware Terminator (http://www.spywareterminator.com/) Resident scanner. Or a-Squared free (http://www.emsisoft.com/en/software/free/) On-Demand only with free version(if using win98/ME).

http://forums.pcpitstop.com/index.php?showtopic=145407 (http://forums.pcpitstop.com/index.php?showtopic=145407)

However this seems more like scamware/rogueware - Try this tool, RogueRemover, available here http://www.malwarebytes.org/rogueremover.php (http://www.malwarebytes.org/rogueremover.php)
Title: Re: Help remove malware: "SecurePCCleaner"
Post by: Winxp on August 27, 2007, 01:19:45 PM
Thank you heaps, David 

Looks like the downloaded SUPERAntiSpyware and Rogue Remover did the trick.
I located some info on the "SecurePCCleaner" malware here:   http://www.popcorn-net-removal.com.removal-instructions.com/
Very nasty stuff the complicit  "Zlob Trojan"...I felt like it was beginning to take over my whole system.
The  "Net.MSV/VPS-G Trojan" (12 items) was also detected by SUPERAntiSpyware.
I just hope no damage was done to my computer by the above intruders. But appears to be working fine at the moment.
The desperate company marketing "SecurePCCleaner" should clean up its act and refrain from pedalling/marketing their software in this manner.
By employing this low tactic they've succeeded in causing a lot of frustration and wasted time to unfortunate victims like myself, while kicking themselves almightily in the face.  i.e  consumer resentment backlash/bad publicity.

Sorry, don't have the Avast log entry available re the Trojans attack location.
Remember the Avast log stating it was a "Zlob Trojan".


Appreciatively
Winxp :)




Title: Re: Help remove malware: "SecurePCCleaner"
Post by: DavidR on August 27, 2007, 03:30:07 PM
Your welcome.

Something to remember when the brown stuff hits the fan, if you use other tools in the hunt for more infected files, etc. if you find any that weren't detected by avast, before quarantining or dealing with them send a sample to avast.

Open the avast Chest, User Files section (this is where you can put suspect files), File, Add, from the pop-up window navigate to the location of the infected file and select it. The original file remains where it was so now you can deal with it with the other tool.
Now from the chest right click on the file you added and select email to Alwil software.

There are tons of scum/scam-ware tricks like these, so don't lose any sleep over it just be aware of this style of trick, give someone a headache and sell them an aspirin (tell them they have a problem and here is the solution).