How to remove Adware.PurityScan ??

Hi,
I got a laptop (Dell Inspiron 6000), which came heavily infected with viruses. Everything has been cleaned up. I used Symantec AV (Enterprise version) with the latest signatures, Spybot and Adaware. I scanned the computer maybe 25 times, and all is gone, except the very stubborn 'Adware.Purityscan', which comes up every time after AV Scan. (to be exact, it shows as: 'Adware.Purityscan | Action - Cleaned | Count - 2 | Filename - regsvr32.exe).
I followed all the instructions I could find on the net, with checking the registry (nothing found there), and suspected files (nothing found).
I appreciate your advice.
Thank you!
FrossardAsked:
Who is Participating?
 
IndiGenusConnect With a Mentor Commented:
Also, with PurityScan you will usually see files with ?'s in them. ie.

C:\WINDOWS\system32\d?xplore.exe
C:\WINDOWS\System32\??xplore.exe
C:\WINDOWS\System32\M?config.exe
 
The file with the question marks in it will have the same name as a legitimate file. So you need to be careful when removing them. Combofix will "unearth" these files and deal with Pscan, and a lot of other nasties if still present.

Download and Run ComboFix (by sUBs)

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Disconnect from the Internet, than disable your Anti-virus and any real-time Anti-spyware monitors that are running.
Then double click Combofix.exe & follow the prompts.
When finished, it will produce a log for you. Upload that log in your next reply with a new HijackThis log. Upload to the following link and post the link to it back here.

http://www.ee-stuff.com

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall.
Note 2: Remember to re-enable your Anti-virus and Anti-spyware before reconnecting to the Internet.
0
 
TolomirAdministratorCommented:
Well you can always go with www.superantispyware.com

the free scanner + malware remover should be able to remove that malware.
0
 
TolomirAdministratorCommented:
http://www.superantispyware.com/definition/purityscan/

PURITYSCAN.EXE Application/Process Description
Below is a description of PURITYSCAN.EXE. This application may not be safe to have on your computer. If this application is running on your computer, it is advised that you scan your computer for both viruses and spyware/adware immediately.

Summary of PURITYSCAN.EXE
Adware.ClickSpring/PuritySCAN.Process
      
Company Information
Clickspring, LLC
www.purityscan.com
      
Description of PURITYSCAN.EXE
Scans a user's hard drive for pornographic files. Serves advertisements and may slow system performance. May install eZula.

Adware applications, toolbars and browser extensions may serve advertisements even while you are not surfing the Internet.

This application may serve various types of advertising, not limited to pop-up ads.
      
Threat Level (1-10) 10
      
Processes PURITYSCAN.EXE


---
Tolomir
0
Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

 
rpggamergirlCommented:
SUPERAntispyware and or Combofix should remove it. You can also use the website's uninstaller(works always)

Sometimes Purityscan/clickspring are listed in add/remove programs.

Please check Add/Remove programs and uninstall any apps by OIN
Oin
Yazzle by Oin
Purityscan by Oin
Snowballwars by Oin
Cowabanga by OIN
or anything similar with Oin in it
If you do not see any icon for "OIN" or "(program) by OIN" in Add/Remove Programs, please download their stand-alone uninstaller.
http://www.outerinfo.com/OiUninstaller.exe.
0
 
FrossardAuthor Commented:
"If you do not see any icon for "OIN" or "(program) by OIN" in Add/Remove Programs, please download their stand-alone uninstaller.
http://www.outerinfo.com/OiUninstaller.exe."
I tried that - didn't work.

Now, I'm getting ComboFix. Hopefully it will do something meaningful. (I don't get it why 'the best antivirus software' - as Symantec claims to be - can't remove this pest.)
0
 
rpggamergirlCommented:
hmm.... their uninstaller no longer works??? thanks for that info.
well, combofix should.....and any bad files that combofix does not remove can be removed using CFScript.

>>(I don't get it why 'the best antivirus software' - as Symantec claims to be - can't remove this pest.)<<
most antivirus can't handle malware not just Symantec, I guess because they're designed to remove mainly viruses.
0
 
FrossardAuthor Commented:
ComboFix worked! Thanks for the tip.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.