How do you remove a spyware without being on administration?
Tuesday, July 20th, 2010 at
6:23 pm
I use my sisters laptop and she put me on standard user, therefore I am prevented from downloading any spyware removal. I want to remove Antivir Solutions Pro which is a fake spyware removal. I looked up everything and I have no idea how, please help me! My sister won’t remove it for me again because this is like the 4th time I got a virus on her laptop.
Tagged with: laptop • removal • spyware • spyware removal • virus
Filed under: Tech News
Like this post? Subscribe to my RSS feed and get loads more!
askvg.comloginrecovery.comblocksite.com"freepcsecurity.co.ukbleepingcomputer.com%3EregisterThat is not possible as far as I know as standard user is a limited account and therefore cannot access the Regedit or Command prompt or even the Safe Mode. Unless you try to find the password.
=> OK, just download on another computer these and then download these softwares: <=
http://www.askvg.com/how-to-reset-recover-forgotten-windows-nt-2000-xp-2003-administrator-password/
Guidelines on how to proceed yourself. (5 ways).
http://ophcrack.sourceforge.net/download.php?type=livecd (live CD for Windows XP, and Vista only 415.7 MB).
http://ophcrack.sourceforge.net/download.php?type=ophcrack (to create it yourself about 5 MB for Windows 2000, XP, Vista, 7).
http://www.loginrecovery.com/
**Once you are on her account (no choice!)**
Start>All Programs>Accessories>Notepad>File on menu bar>Open and browse for "C:\Windows\System32\Drivers\ETC\" folder>Click on Hosts file>Open>Modify the file by adding "127.0.0.1 http://www.blocksite.com" to the bottom of the file on 2 separate lines>Save the file>Exit Notepad.
1) Internet Explorer -> Tools -> Internet Explorer ->Security tab>Click on Restricted Sites icon>Click on Sites>Under ‘Add This Website to the Zone’, Click on the Google URL >Remove>Close>OK.
2) Firefox: https://addons.mozilla.org/en-US/firefox/addon/3145/developers/roadblock?src=addondetail For more information and other tips, go to https://addons.mozilla.org/en-US/firefox/addon/3145/ (If you have Firefox).
3) Google Chrome: Here is the extension download link, it doesn’t work at first but leave it will come afterward. If you have this web browser. https://clients2.google.com/service/update2/crx?response=redirect&x=id%3Ddfjfhdfdeogiplgepcbfjcpiianmeoed%26uc%26lang%3Den-US&prod=chrome&prodversion=4.1.249.1064
a) To block the website go to extensions>Wrench icon>Extensions>Options>Login In (you don’t need a password for the first use!)>Type in the website you want to block>Click on Block.
b) Now to change the password on the same page>Under Change access password: Current password: leave blank>New password: type in a long and complex password with letters and numbers>Confirm new Password: retype it> (Write down on a paper or whatever your password for future reference, learn it by heart)>Click on Change.
4) http://www.freepcsecurity.co.uk/2010/06/12/defense-center-removal/
Then find the URL address for this fake antivirus if it redirects you then block this webpage.
Install MBAM to my Desktop under a false name w1w1w1 so it won’t get affected by the spyware>Update>Run Full scan>Delete (infected files are put in Vault/quarantine), you can show them to online forum such as http://www.bleepingcomputer.com%3Eregister/ and register, for free>Forum Support. They’ll tell you if you can delete them safely.
5) Get your Computer fully scanned by Spyware Doctor, and then keep the scan log open and check each registry entries to delete them. Got to Start -> Run -> type in regedit -> and check carefully (be very cautious here) and then delete each one. Some Spywares can even disable your antivirus! It happened to me! But I wonder how you can do all that without your sister knowing…
Easiest way to get rid of it. I just figured this method out and my computer is working fine now.
So the antivir .exe file is always [random letters]tssd.exe
1. Just press ctrl+alt+del to open up the task manager. (if this doesn’t work, restart your computer and IMMEDIATELY press ctrl+alt+del)
2. Go the the processes tab and find the process which ends in tssd. Look carefully, it WILL be there.
3. Select it and click end task
4. You should notice an immediate cessation of the annoying pop up message boxes. This is only a temporary fix however, as Antivir will still be there next time your turn on the computer. Open the start menu and click ‘Search’
5. Perform a search of ‘My Computer’ for the executable file ([random]tssd.exe). Delete all results :]
Update your anti-spyware program. If you do not currently have a spyware removal program, there are many free, highly regarded software downloads.
Disconnect your computer from the Internet. Even if you have Internet Explorer closed, as long as there is a connection available, the spyware may be connecting and causing damage. Unplug your computer from its modem or the modem from the wall.
Check your "Add/Remove Programs" list from the control panel. If you see a spyware program listed, uninstall it. If you see a program you are not familiar with but are unsure whether it is spyware, check it out before removing it.
Run your antispyware program. If you run it and are still receiving pop-ups, especially if you are still disconnected from the Internet, turn your computer off. Start it again and press the F8 key repeatedly until you see the "Safe Mode" option. Run the antispyware program while your computer is in safe mode.
Revert your system to a date in time prior to the spyware infiltration. Go to the Start menu and point to "All Programs." Point to "Accessories" and then point to "System Tools." Click "System Restore" and follow the instructions on the "System Restore Wizard."