asked on

Remove Virus PWS:Win32/Fareit.gen!C

I'm running Vista on Dell OptiPlex. Microsoft Security Essentials keeps reporting: "Detected threats are being cleaned."

I tried removing all of the Detected Items in the History tab in MSE but they keep coming back.

How do I get rid of this virus?

Any help would be greatly appreciated.

Thanks,
Darin

tailoreddigital

http://blog.teesupport.com/the-helpful-guide-on-how-to-remove-pwswin32fareit-gene-infection-manually-and-thoroughly/

DarinOBrien

ASKER

Step One: I booted into safe mode.

Step Two: I find no files in \system32\ that match [random].exe. All files in system32 look legitimate to me and I find none dated within the last 30 days that would fit the description.

Step Two: Similarly, I find no files as described in the instructions as follows: C:\Users\name\AppData\Local\Temp\[random names].exe.

Step Three: I'm hesitant to delete any of the files I see in the Registry Editor. Many of the entries fit the description [set of random numbers] or [random characters]. At least they look random to me.

Any other suggestions?

thanks,
darin

ASKER CERTIFIED SOLUTION

*** Hopeleonie ***

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

DarinOBrien

ASKER

I ran a full scan with MSE and found nothing and no MSE updates were available.

I ran full scan with Malwarebytes and it found 23 files. I removed them all and the problem apparenty went away.

It's worth noting that none of the malware detected by Malwarebytes specifically referenced Fareit.gen!C.

Thanks much!
darin