Solved

Remove Virus PWS:Win32/Fareit.gen!C

Posted on 2013-06-20
4
975 Views
Last Modified: 2016-11-23
I'm running Vista on Dell OptiPlex.  Microsoft Security Essentials keeps reporting: "Detected threats are being cleaned."

I tried removing all of the Detected Items in the History tab in MSE but they keep coming back.

How do I get rid of this virus?

Any help would be greatly appreciated.

Thanks,
Darin
0
Comment
Question by:DarinOBrien
  • 2
4 Comments
 
LVL 23

Expert Comment

by:tailoreddigital
Comment Utility
0
 

Author Comment

by:DarinOBrien
Comment Utility
Step One: I booted into safe mode.  

Step Two: I find no files in \system32\ that match [random].exe.  All files in system32 look legitimate to me and I find none dated within the last 30 days that would fit the description.

Step Two: Similarly, I find no files as described in the instructions as follows: C:\Users\name\AppData\Local\Temp\[random names].exe.

Step Three: I'm hesitant to delete any of the files I see in the Registry Editor.  Many of the entries fit the description [set of random numbers]  or [random characters].  At least they look random to me.  

Any other suggestions?

thanks,
darin
0
 
LVL 18

Accepted Solution

by:
hopeleonie earned 500 total points
Comment Utility
Did you run a full-system scan with Microsoft Security Essentials?
If no update Microsoft Security Essentials run a full scan and follow a full scan with Malwarebytes.
0
 

Author Closing Comment

by:DarinOBrien
Comment Utility
I ran a full scan with MSE and found nothing and no MSE updates were available.

I ran full scan with Malwarebytes and it found 23 files.  I removed them all and the problem apparenty went away.

It's worth noting that none of the malware detected by Malwarebytes specifically referenced Fareit.gen!C.

Thanks much!
darin
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

The purpose of this Article is to provide information for a newly released variant of malware – with the assumption that many EE Members will have need of the information. According to “Computerworld”, well over one million web sites have been co…
Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now