XPost: alt.windows-xp   
      
   On Fri, 30 Sep 2011 19:25:27 +0200, "Lynsey Doyle"   
    wrote:   
      
   >   
   > a écrit dans le message de groupe de discussion :   
   >t0lb87d736v7sl18oap024e5v0tnlkjfpc@4ax.com...   
   >> On Thu, 29 Sep 2011 23:48:39 +0200, "Lynsey Doyle"   
   >>  wrote:   
   >>   
   >>>   
   >>> a écrit dans le message de groupe de discussion :   
   >>>ofh98752jdp0vjgnk4dre78a50p6b2vtcu@4ax.com...   
   >>>>  I need some serious help here with malware (?).   
   >>>> (an XP Pro machine with all updates)   
   >>>>   I downloaded a piece of software billed as   
   >>>> a system cleaner (registry, files, and privacy   
   >>>> info) -- Comodo System Cleaner. It has been a nightmare   
   >>>> It seemed to work fine but having other problems, I decided   
   >>>> to remove it. I looked in Control Panel/Add,Remove Programs   
   >>>> and clicked to uninstall it --- the screen went to the green screen   
   >>>> that appears just before desktop icons are set up. And nothing   
   >>>> was uninstalled. I tried to drag it to the recycle bin but it   
   >>>> wouldn't drag. Having a partitioned hard drive, I emptied one   
   >>>> partition and dragged it to that partition. It simply copied   
   >>>> itself and left a copy then in two partitions! I tried to format   
   >>>> the partition which contained only it, but format couldn't   
   >>>> run for that partition!   
   >>>>  I did a registry search ans eliminated all references to it.   
   >>>> Then I could delete the software ( the findable parts).   
   >>>>  But now, it shows up by name in MSConfig services and I can't   
   >>>> get rid of it. I "disable" it there but to apply I have to reboot   
   >>>> and it's back again! And I can't make MSConfig do a "normal"   
   >>>> startup. I check it as normal, have to reboot to apply, and I back   
   >>>> again to where I was!!   
   >>>>   Any helpful ideas would be greatly appreciated.   
   >>>   
   >>>"A little knowledge is a dangerous thing"   
   >>>   
   >>>Download and run Malware Bytes. Download and run Glary utilities.   
   >>>>>   
   >>>Comodo System Cleaner isn't malware. Go to Administrative tools in the   
   >>>Control Panel, then Services and disactivate the Comodo services   
   >>>there.   
   >>>have a look in the Start/startup menu too, if it's there delete it.   
   >>   
   >>  Did that many times --- must reboot to effect the change and it   
   >> resets task manager with reboot!   
   >>   
   >>   
   >> Read my detailed account elsewhere --- unbelievable effort to get rid   
   >> of it!! That's malware! Wouldn't uninstall, kept reloading itself in   
   >> into task manager, and on ann on. Also has an associated program   
   >> "Cleaner Validator" that is aa serious RAM and CPU hog (many times   
   >> using 98% of CPU for extended periods!   
   >   
   >Well run the programmes I suggested, particularly Malwarebytes (it takes   
   >a little while to check everything) then the other two to clean up any   
   >traces. You might like to run Hijack this too and uncheck anything   
   >Comodo as well as any entries marked 'file missing'. Make sure it's   
   >HijackThis from Trend Micro, there are a lot of fakes around   
      
    I finally got it!!! Did a "search" for "csc" ---of course found   
   dozens of things --- many Microsoft created.   
    But, found about half a dozen in the download folder   
   that had no apparent "ownership" but one had the CSC logo   
   and two or three were executable. I trash canned this group   
   angain changed taskmmanager. The reboot kept the changes in rtask   
   manager and Comodo no longer showed up there . Then I cleaned the   
   regsitry of comodo references, was able to "remove" the program.   
     A reboot again and all was clean and Comodo washistory!   
   What a nightmare!   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)