How to Delete a Macro Computer Virus

A macro virus is a computer virus that "infects" a Microsoft Word or similar application and causes a sequence of actions to be performed automatically when the application is started or something else triggers it.

Macro viruses tend to be surprising but relatively harmless. A typical effect is the undesired insertion of some comic text at certain points when writing a line. A macro virus is often spread as an e-mail virus

Read More

How to remove Windows Problems Remover

How to remove Windows Problems Remover

Windows Problems Remover is a dangerous cyber threat which will try to mislead you by its friendly name and trustworthy looking messages.Instead of being ripped off, you should remove Windows Problems Remover just like you have been recommended to eliminate Windows Health Center, Windows Antispyware Solution or Windows Risk Eliminator. All these programs mentioned belong to the same malwares’ family and apply the same penetration methods based on Trojans and browser hijacking. You can avoid Windows Problems Remover if you have the ‘full’ version of reliable anti-spyware which provides a real time protection.

As soon as Windows Problems Remover virus manages to enter your system, it stars applying malicious tactics that is expected to make you think that your PC is highly infected. First of all, malware will be set to start as soon as you reboot your computer and additionally will begin its interruptions reporting virus. While the program is running it will also display fake security alerts that are further used to scare you into thinking that your computer has a serious problem. Some of these alerts include:

System Security Warning

Attempt to modify register key entries is detected. Register entries analysis is recommended.

System component corrupted!

System reboot error has occurred due to lsass.exe system process failure.

This may be caused by severe malware infections.

Automatic restore of lsass.exe backup copy completed.

The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Warning!

Name: firefox.exe

Name: c:\program files\firefox\firefox.exe

Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

Removal Instructions

1. Stop these Windows Problems Remover processes

[random].exe

2. Remove these Windows Problems Remover Registry Entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = '%UserProfile%\Application Data\<random>.exe'

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'

3. Remove these Windows Problems Remover files:

%UserProfile%\Application Data\[random].exe

Read More

How to Remove a Virus With Fdisk

The hard drive of a computer is usually divided into partitions. These partitions contain information specific to the functionality of the computer. One such partition is the master boot record (MBR). This partition contains the boot instructions for the computer and is an important section of the hard drive.

Unfortunately, some viruses can specifically target and infect the MBR of a computer. These viruses, however, can be removed by using the FDISK command if your Windows operating system is an earlier version, such as Windows 95, 98 and ME.

Instructions

1. Create a boot-disk from a computer that is not infected by a virus. The computer must run the same version of the Windows operating system as the infected computer.
   
2. Insert an empty diskette into the computer that is not infected. Click "Start," then "Control Panel" and select "Add/Remove Programs." Click "Startup Disk," then "Create Disk." The system will turn the empty diskette into a boot disk.
   
3. Insert the new boot diskette into the computer with the virus infection. Restart the computer.Type "FDISK/MBR" at the "A:" prompt. The "FDISK/MBR" command will remove the virus from the hard drive.

Read More