• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

InfoStealer & PUA Programs

Hello and thank you in advanced to those willing to help me with my issue, I own an Asus X75A 
Processor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz 2.60GHz
System type: 64-bit Operating System, x64-based processor
Windows 8.1
8.00 GB RAM

And have security issues with the programs: PUA.SearchProtect, PUA.Downloader Trojan.Zbot and a couponsupport.exe, Oh! and a Keygen :( 

And Norton only has them as quarantined, or even exluded, it won't allow me to remove them and if I do (which i have with a few) I end up just seeing them again 

what should I do?

Replies

Kudos0

Re: InfoStealer & PUA Programs

I would suggest you sign up at one of the free Malware Removal sites below. Do not try to do anything on your own as it could make things harder for the Malware Removal expert at that site to help you. Choose one and stay there until your system is clean.

http://www.bleepingcomputer.com/
http://www.geekstogo.com/forum/
http://www.cybertechhelp.com/forums/
http://forums.whatthetech.com/

 

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: InfoStealer & PUA Programs

If you are have tried removing them and it is reappearing again and again then we have not found the source file. Please follow following steps as we know the names it will be easier for us:

1.Open your Norton program Security History Section.

2. Check for resolved and unresolved and recent tabs and find the location of files detected as PUA.SearchProtect, PUA.Downloader Trojan.Zbot and a couponsupport.exe, Oh! and a Keygen. If you click on more detail you will come to know about it.

3. Open your Services snap in ( press windows and r key together and type services.msc). Then search for this file name and if it is there then stop and disable those.

4. Try to remove those file from that location found in step 2 and if you are unable to do it then we need to restart the computer in Safe Mode with Networking.

5. Your issue would be resolved.

6. To manually clean your computer and remove all the pup(Potentially unwanted program).

7.Go to uninstall a program in Control panel and remove all the program which you do not want or use and make a note of those which you can not then you need to remove it's files manually to remove it.

8. Open your my computer and then click on view in the top toolbar and then click on option which will appear in the below toolbar in the right hand side and then click on View and then enable show hidden files and folder and uncheck hide protected windows operating system files,Hide empty drives and hide extensions for known file types.

9.This are the how favorite location of any type of infection. $Recycle, c:\programdata,c:\programfiles, c:\programfiles(x86),c:\windows\system32,c:\windows and c:\users\currentusername\appdata and check in all folders in appdata  Remove the unwanted program from this location, our computer will be clean.

10. Just remember before deleting any files if you are unsure about it then right on the file and then click on properties and then click on detail and check for the manufacturer name and digital signature. You will come to know all about that file.

Kudos3 Stats

Re: InfoStealer & PUA Programs

Oh! So, thats it. Then why should there be free dedicated forums online with trained volunteers for helping users' to remove malware?
I strongly suggest TreB  to visit any ONE free malware removal forums recommended by Peter and get the problem sorted out.

Quoting Peter:

http://www.bleepingcomputer.com/ (link is external)
http://www.geekstogo.com/forum/ (link is external)
http://www.cybertechhelp.com/forums/ (link is external)
http://forums.whatthetech.com/ (link is external)

Malware removal is potentially risky undertaking and should be done with assistance.

regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!

This thread is closed from further comment. Please visit the forum to start a new thread.