Comments on: How To Remove Personal Antivirus-Remove Personal Antivirus Automatically http://www.tech21century.com/how-to-remove-personal-antivirus-remove-personal-antivirus-automatically/ Technology in the 21st Century Mon, 06 Feb 2012 17:21:56 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: BlogAdmin http://www.tech21century.com/how-to-remove-personal-antivirus-remove-personal-antivirus-automatically/comment-page-1/#comment-236 BlogAdmin Tue, 06 Oct 2009 05:24:21 +0000 http://www.tech21century.com/?p=443#comment-236 Thanks for your comment, Indeed those rogue antivirus programs have fooled many people who lost money paying for them. The origins of these viruses come from Russia or China, so even a lawsuit against them will not have any positive results in my opinion. Thanks for your comment,

Indeed those rogue antivirus programs have fooled many people who lost money paying for them. The origins of these viruses come from Russia or China, so even a lawsuit against them will not have any positive results in my opinion.

]]> By: GFerrell http://www.tech21century.com/how-to-remove-personal-antivirus-remove-personal-antivirus-automatically/comment-page-1/#comment-235 GFerrell Tue, 06 Oct 2009 04:32:19 +0000 http://www.tech21century.com/?p=443#comment-235 Just spent about 4 hours fixing a computer with this problem. Ended by installing Vista back to its factory settings. A friend asked me to look at this laptop. When I got it, it was generating warnings on things such as Trojan.Wincod. At the time I knew nothing about Personal Antivirus. The friend said they had virus protection on the system but I could find neither Norton nor McAfee. The Personal Antivirus screen came up. I asked if this was their protection software. They said yes and we started to do a scan. It indicated that it hadn't been activated yet (or something. I did not realize at that time that it was important to keep notes.) I got suspicious and looked it up on line before doing anything else. Next I opened task window and shut down the Personal Antivirus application. Then I went into processes and found something called netFilter.exe that was using 50% of the CPU. Looked that up and found out it was a trojan backdoor. Ended the tree for that process and began looking for any files associated with Personal Antivirus or netFilter.exe. Did not find them. However, in the C/windows/system32 directory I found a series of files. Here is a sample: 1a99azdwa5e148.dll 1fbba5dwar9z064.bin 1z15thief6169.cpl 1z24x5y9are73.dll 1z28t59j5a4.ocx ... 2c36zackdoor5059 ... 2dc5spywzre9839.dll ... 3edfaddw5rz649.bin With a little imagination, you can see "adware", "spyware", "theif", "backdoor", "threat", "spybot" and other words loosely encrypted throughout the titles. Either that is a sense of humor or it is how these guys distinguish what these various files do. When I shut down the computer and restarted --- A MISTAKE -- I could no longer get anything except the Personal AntiVirus screen. Tried to recover but there were no save points for this computer. So, this being a Compaq, I went through the F11 restore process and restored it back to factory settings. These programs are illegal and my guess is that many people have been victimized. Given that these guys are taking credit card numbers, there must be a record of who they are and who their customers are. Some enterprising computer-savvy attourney should be able to build a pretty good class action suit. Just spent about 4 hours fixing a computer with this problem. Ended by installing Vista back to its factory settings. A friend asked me to look at this laptop. When I got it, it was generating warnings on things such as Trojan.Wincod. At the time I knew nothing about Personal Antivirus. The friend said they had virus protection on the system but I could find neither Norton nor McAfee. The Personal Antivirus screen came up. I asked if this was their protection software. They said yes and we started to do a scan. It indicated that it hadn’t been activated yet (or something. I did not realize at that time that it was important to keep notes.) I got suspicious and looked it up on line before doing anything else.

Next I opened task window and shut down the Personal Antivirus application. Then I went into processes and found something called netFilter.exe that was using 50% of the CPU. Looked that up and found out it was a trojan backdoor. Ended the tree for that process and began looking for any files associated with Personal Antivirus or netFilter.exe. Did not find them. However, in the C/windows/system32 directory I found a series of files. Here is a sample:

1a99azdwa5e148.dll
1fbba5dwar9z064.bin
1z15thief6169.cpl
1z24x5y9are73.dll
1z28t59j5a4.ocx
…
2c36zackdoor5059
…
2dc5spywzre9839.dll
…
3edfaddw5rz649.bin

With a little imagination, you can see “adware”, “spyware”, “theif”, “backdoor”, “threat”, “spybot” and other words loosely encrypted throughout the titles. Either that is a sense of humor or it is how these guys distinguish what these various files do.

When I shut down the computer and restarted — A MISTAKE — I could no longer get anything except the Personal AntiVirus screen. Tried to recover but there were no save points for this computer. So, this being a Compaq, I went through the F11 restore process and restored it back to factory settings.

These programs are illegal and my guess is that many people have been victimized. Given that these guys are taking credit card numbers, there must be a record of who they are and who their customers are. Some enterprising computer-savvy attourney should be able to build a pretty good class action suit.

]]>