Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

EFIX MALWARE

Posted on 2014-02-21
9
Medium Priority
?
502 Views
Last Modified: 2014-02-24
Hi,
I recently download Efix software (utility to clean Windows) and now I don't know how to get rid of this sh...garbage.
Periodically a window open asking to upgrade to the payed version. Unsinstall this software is not enough. It acts like a malware. I tried without success Malwarebytes and Bitdefender internet security. Niet.

I read a few tricks online but it is so complicated that I gave up.

Somoday at Experts exchanga has an Idea?

Regards
Marcheblanc
0
Comment
Question by:Marcheblanc
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 4

Expert Comment

by:Jeffery Hayes
ID: 39877777
What I would do is first remove and uninstall as noted.

Open Msconfig and see what files are set to launch on Start up.

Then run Malwarebytes and restart.

If that doesn't work just follow these steps.

http://malwaretips.com/blogs/efix-pro-virus-removal/ 

The steps are a bit long but it's a sure fire way to get rid of the Malware.
0
 

Author Comment

by:Marcheblanc
ID: 39877809
Hi Jeffrey Hayes,
Are you sure that AdwCleaner, Junkware Removal Tool, HitmanPro are all SAFE. I read somewhere that, for exemple, ADWCLEANER is not quite safe.

If you are certain, I will to what you suggest.

thanks.

Marcheblanc
0
 
LVL 11

Expert Comment

by:David Kroll
ID: 39877866
You can use CCleaner and run a registry scan to get rid of anything left behind.
0
[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

 
LVL 4

Accepted Solution

by:
Jeffery Hayes earned 750 total points
ID: 39877870
Yes probably on Cnet.

http://download.cnet.com/AdwCleaner/3000-7786_4-75851221.html 

Just make sure you don't install the Cnet installer.
0
 
LVL 30

Assisted Solution

by:Thomas Zucker-Scharff
Thomas Zucker-Scharff earned 750 total points
ID: 39878018
Did you try running RogueKiller and then without rebooting running MBAM?  If that didn't work try one of the utilities from this site

http://securityxploded.com/

I particularly like SpyBHORemover - it gets rid of all Browser Helper Objects (BHOs)

SpyDLLRemover is pretty good too.

Check out all the tools on the site for windows malware removal:

http://securityxploded.com/anti-spyware-tools.php
0
 

Author Closing Comment

by:Marcheblanc
ID: 39883065
Hi,
I did certain things that Jeffrey and Thomas suggest and use regedit to delete every instance of EFIX directly in the register and it seems that everything is fine now. I say "it seems" because this kind of rogue sometimes come back after a few days.

Thanks,
Marcheblanc
0
 
LVL 30

Expert Comment

by:Thomas Zucker-Scharff
ID: 39883092
Marcheblanc,

Have you run any antirootkit software on the machine?  Be careful with these on 64 bit machines.

http://www.experts-exchange.com/Software/Anti-Virus/A_2245-Anti-rootkit-software.html
0
 

Author Comment

by:Marcheblanc
ID: 39883114
Hi Thomas,
The question is:

 "is Efix Pro" a Rootkit?
0
 
LVL 30

Expert Comment

by:Thomas Zucker-Scharff
ID: 39883167
Not one I had heard of.  But you may want to read this discussion about it:

http://www.pccaretips.com/forum/viewtopic.php?f=2&t=327724

Check out the second comment especially.  It may not be a rootkit, but it seems to be more malicious than your average malware.  I would use CCleaner and continue to do MBAM scans on a daily basis for the next week or so.  

I always suggest getting additional layers of security.  For instance, MBAM Pro works alongside most antimalware apps.  Winpatrol Plus is also a great addition.  Everyone should be using an alternate hosts file (the one from MVPS is excellent).
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

1. Start | Settings | Printers and Faxes. 2. Go to the File Menu. 3. Select Server Properties. 4. Select the Drivers tab. 5. Select the printer you need information about. 6. Once again select Properties. You should get a list of the files requ…
A while back when OPSMGR 2012 was released we were very excited about getting it into our environment and upgrading our 2007 implementation,  we started our planning and we then proceeded with our implementation. All went as planned & our system …
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…
Suggested Courses

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question