A client called me today saying that a computer I had recently removed the Personal Security Virus from now appeared to have another virus. I was surprised by this since I had left Microsoft Security Essentials installed and active. My first thought was that he must have disabled the virus software however when I started looking at the laptop this was not the case. Below I describe steps I took to resolve the issue that were unsuccessful in remove the Trojan:Win32/Dursg.C as well as what I finally did that resolved the issue.
A client of mine called me in a panic yesterday because a laptop he uses for work got infected with the Personal Security virus. Personal Security is a nasty virus, also sometimes called antispyware or malware, that takes over your computer and attempts to get you to purchase the software. The virus actually makes the end user think that it is legit software and they are only doing you a favor by protecting your computer however this is not the case. Below I describe things that the virus will do to blend in to Windows as well as a method I have discovered as one of the easier ways to remove it.
The HEUR:trojan.win32.generic is a nasty virus that is typically accompanied by a root-kit that can cause you to loose everything on your hard drive. Kaspersky is not capable of removing this virus so instead you need to download and run Avast to get the job done. Follow the directions below to remove this trojan virus and any others that accompany it.
- Download and Install Avast: Visit the Avast web site http://www.avast.com and download the Professional addition that will give you a 60 day trial. Once downloaded run through the installer.
- Disable System Restore: Right click “My Computer” and select properties from the drop down menu. Click on the “System Restore” tab and check the “Turn Off System Restore”. Click the Apply button at the bottom of the configuration window followed by the OK button.