Malware

My OS is win 7 prof 64 bit and somehow the following program got onboard : Secure Fast PC Optimizer and it always wants to scan my pc.  I was trying to uninstall it from the control panel but I do not see it listed under Programs, nor can I see a directory in Program Files.  My anti virus, Avast did not seem to catch this program.  How do I get this malware uninstalled and deleted for good from my pc.  Thank u for your advice.
jegajothyretiredAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

aadihCommented:
The best way is to restore your PC to a time before this pest got installed. The preferred approach is to boot up in safe mode with command prompt and type rstrui.exe to restore.

If you cannot do that, please scan your computer with MalwareBytes AntiMalware (free).
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BillDLCommented:
Can you positively identify ALL of the installed programs on your computer?
Start button > Control Panel > Programs >:
"Uninstall a program" option if you are in the default view.
"Programs and Features" option if you are in Classic View.

It's always better to first look and see whether the offending program might be listed there under a different name from how it appears as the running program, but if it is adware or malware it often will deliberately not be listed there.

Are you absolutely sure that the program is actually named "Secure Fast PC Optimizer"?  That is possibly just the wording that appears somewhere in the program window that keeps appearing.  There are loads of similar sounding programs, for example:

http://www.pchealthcure.com/SecurePCOptimizer.php
where you will see that they repeatedly use the words "Secure PC Optimizer" in the description.  That one should appear with that name in the uninstallable programs list though.

Programs like these often install other junk or adware, so even if you found a method to uninstall the one you are seeing, there could be other unwanted programs left.

You could try AdwCleaner downloadable from either bleepingcomputer.com or from the autor's website:
http://www.bleepingcomputer.com/download/adwcleaner/
https://toolslib.net/downloads/viewdownload/1-adwcleaner/
0
aadihCommented:
If the pest's alias is recognized, use Revo Uninstaller (free) to uninstall.
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

web_trackerComputer Service TechnicianCommented:
Two helpful tools that I use to remove applications that do not show their presence in "programs and features" are JRT (junk removal tool) http://www.bleepingcomputer.com/download/junkware-removal-tool/ and adwcleaner http://www.bleepingcomputer.com/download/adwcleaner/
As well I would run malwarebytes.
0
jegajothyretiredAuthor Commented:
Thank u to all the Gurus and Experts for your suggestions and inputs.  I have tried virtually all the suggestions one by one, but nothing has worked to get rid of the Win 32/Caphaw malware, it is still there and it keeps popping up from time to time.  I am now running malwarebytes Chameleon, with a normal scan and also a custom scan, but still it has not been able to detect this malware and remove it.   I have also researched on the internet and tried their suggestions, and still no luck so far.   Please let me know if there is anything else I should be trying.   Thank u for all your suggestions.
0
jegajothyretiredAuthor Commented:
In response to BillDL, I have checked the Control panel, and confirm that the program is not listed in any variations of the name.  I now have Revo Uninstaller, prepared to do a thorough uninstall.  But I have to find the name of the Program first.  I tried looking at the windows explorer and it is not listed anywhere.
0
rindiCommented:
Just as a reminder, you must run malwarebytes with the PC started up in normal mode, and not with it booted in safe mode. Malwarebytes is designed to run in normal mode and a lot of malware can't be found if it is run in safe mode, as the malware has to be active during the scan.
0
aadihCommented:
Please take a look at your browser toolbars and addons. Remove all toolbars and disable addons.

Try also scanning your PC with AdwCleaner:

http://www.bleepingcomputer.com/download/adwcleaner/ >
0
jegajothyretiredAuthor Commented:
in response to aadih (40255928), i followed your advise and did that too, but no luck so far.  thank u for your suggestion.
0
jegajothyretiredAuthor Commented:
In response to rindi,I ran malware in the normal mode but it did not find this particular win32/caphaw malware. Thank u for your suggestion.
0
aadihCommented:
I believe, you are better off saving your important files and data and doing a clean install of Windows 7.

A tutorial here:

http://www.sevenforums.com/tutorials/1649-clean-install-windows-7-a.html >
0
jegajothyretiredAuthor Commented:
thank u for your response Aadih, as I have so much stuff on my pc, it will put me back in terms of productivity for a very long time.  Maybe, I will go in for a Microsoft paid support if my interim efforts fail and also until my pension checks get in.  Thank u again for your suggestions.
0
web_trackerComputer Service TechnicianCommented:
did you use revo uninstaller to unistall Secure Fast PC Optimizer ?  As that was the original name of the program you mentioned in your original post. But if Revo unistaller does not see this application, it may have gone by some other name.
0
jegajothyretiredAuthor Commented:
In response to web tracker, I am afraid the application has gone by another name, and i cannot figure out what it is despite going over many times .  I wonder when the program displays the malware, like in the attached snapshot, is it possible to find out to load the Task Manager to find out what service or process it is running though i could not see what application was running.  Thank u again for your inputs.
win32-caphaw-screen-shot.JPG
0
rindiCommented:
Do you really need all that "stuff" to be productive? I usually find that at least 90% of the installed software isn't really needed. I really only need a handful of software to be actually installed on a PC. For most software there is also a good free alternative within PortableApps. Most of my software I use on Windows PC's are PortableApps. For example there is LibreOffice, a better "Office" than m$ Office, or the "Gimp", a software that can be compared to Photoshop, or the foxit reader, which is better than the adobe reader, and there are many more.

With PortableApps you have the advantage that you can, if you want to, put all those apps on a USB stick, and then you can carry them around and use your favorite apps on any Windows PC that allows you to run things from USB sticks. Another Advantage is that the PortableApps launcher handles all updates, and with it you can also list apps that are available for download, and you don't have to do much installation.

http://portableapps.com
0
jegajothyretiredAuthor Commented:
Thank u everyone for your suggestions.
0
BillDLCommented:
Thank you jegajothy
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.