[Pirate07]

How to completely remove PC Anti-Spyware 2010

Ok before I get started a little background info on what I did here. I installed Windows XP inside a virtual pc (so this was done on a clean install of Windows) and then went and download PC Anti-Spyware 2010 so I could get infected and make this tutorial for everyone. Ok so lets get started.

These first couple of screenshots is what this virus was doing to the pc and telling me that I had many infections (even though I know I had zero infections).

This is a pic of the virus wanting me to buy the full version of this "program", this is a scam so do not register or give any of your personal information out. Otherwise you will have more problems than just an infected PC.


Another pic of it telling me that I was infected with a worm. One thing about his program is that it's very redundant, it will give you popup after popup saying that your computer is infected and you should buy their software.


This virus will also disable your Security Center and tell you that you do not have Anti-Virus installed.



Ok if you have this virus and you go to C:\Program Files\PC_AntiSpyware 2010 and double click on the folder you will have all this junk inside.


Ok now we know what it looks like and what it does. So how do you get rid of it? It is actually very easy and can be done with one program Malwarebytes. Download Malwarebytes Free Edition from here > http://download.cnet...4-10804572.html During the installation of Malwarebytes just accept all the defaults, such as installation location, if you want desktop icons of not, you can clean all of this up later on. The most important thing is, you get this program installed, updated, and running. At the end of the installation make sure that update Malwarebytes and run Malwarebytes check boxes are checked and click finish.


Malwarebytes will now update its virus definitions and to the latest version if needed, then the program will run. Make sure your on the scanner tab and Preform a Quick Scan is selected, then click the scan button.


The scan should only take a couple of minutes, so be patient. Once the scan is finished you will get a window that looks like this. Click on the "show results" button.


On the scan results windows make sure that there are green check marks in the boxes beside all of the infections, and click the "remove selected" button.


Once Malwarebytes removes the infections you will get a scan log with information in it similar to this:

Quote

C:\Program Files\PC_Antispyware2010\data (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\Microsoft.VC80.CRT (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Documents and Settings\Josh\Start Menu\Programs\PC_Antispyware2010 (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.

Files Infected:
C:\Program Files\PC_Antispyware2010\PC_Antispyware2010.exe (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\htmlayout.dll (Rogue.AntiVirusPro2009) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\_scui.cpl (Rogue.HomeAntiVirus) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\AVEngn.dll (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\PC_Antispyware2010.cfg (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\pthreadVC2.dll (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\Uninstall.exe (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\wscui.cpl (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\data\daily.cvd (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\Microsoft.VC80.CRT\msvcm80.dll (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\Microsoft.VC80.CRT\msvcp80.dll (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Program Files\PC_Antispyware2010\Microsoft.VC80.CRT\msvcr80.dll (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Documents and Settings\Josh\Start Menu\Programs\PC_Antispyware2010\PC_Antispyware2010.lnk (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Documents and Settings\Josh\Start Menu\Programs\PC_Antispyware2010\Uninstall.lnk (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Documents and Settings\Josh\Application Data\Microsoft\Internet Explorer\Quick Launch\PC_Antispyware2010.lnk (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
C:\Documents and Settings\Josh\Local Settings\Temporary Internet Files\raqasem.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Note: Not every infection will be removed until you restart your PC. Once your PC is booted back up, run a full scan with Malwarebytes instead of a quick scan. This will ensure that there are no left over infections on your PC.

Well thats it PC Antispyware 2010 is now completely removed from your computer. Next time be more careful what you download.

Thanks for reading!!

Special Thanks to NOOP for providing me with the link to this virus so I could make this removal guide!!

[noop]

Great guide Pirate07!!! This will definitely help many users!

Thanks for the tutorial!
-noop

[madmatt2006]

Awesome and easy to follow excellent job Pirate07!

[noop]

Updated the pictures! For guests, hang in there, I am trying to update the pictures so you can see them too.

[Pirate07]

sweet noop looks nice. like i said photoshop is not my thing, so now i know go to for advice

[noop]

Fixed images, everyone should be able to see the tutorial now