Cyber Security Center

[tlarkin]

I have a user here at work that loaded Cyber Security Center on their PC thinking it was a legit spyware program. In reality it is malware, and also a downloader. I cannot uninstall this for the life of me.

i removed all registry keys and dll files this piece of crap program puts on your system and every time I try to uninstall it, it asks me to activate the damn thing before i can uninstall it.

All the removal tools for this app that I have found on line are just more the same thing, malware advertising to get rid of it when they just want you to buy their 29 dollar product.

I am about to just wipe the HD and reimage the computer and be done with it, but if anyone has dealt with this before and knows how to fix it. Please let me in on your secret.

Also, I hate Windows.

Just for FYI I have tried these apps to remove it

spybot
avg
avaria
adaware
webroot (spysweeper or whatever it is called)

None of them can remove it. It has embedded itself in the system so deep it doesn't even get detected. Google searches pull up pretty limited information about it as well.

 

[mep916]

Have you tried Malwarebytes?

http://www.malwarebytes.org/mbam.php

 

[tlarkin]

Have you tried Malwarebytes?

http://www.malwarebytes.org/mbam.php

No, but I will give it a shot. So far no one is able to pick it up and some of the sites referring to being able to remove it, are also malware. This is why I can't stand Windows, stupid run everything as root and no self contained apps.

If it were self contained I'd just delete the app and be done with it.

 

[mep916]

I'm not good with malware removal but I know that malwarebytes is fast and catches most of the stuff. Just make sure you check for updates before you run the app.

 

[tlarkin]

I'm not good with malware removal but I know that malwarebytes is fast and catches most of the stuff. Just make sure you check for updates before you run the app.

I gotta run to a meeting for the second half of the day I will give it a shot later or tomorrow.

 

[mep916]

good luck dude. hope you get rid of that crap.

 

[johnb35]

Give combofix a try.

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Reply with the following logs in order of running the program.

Combofix
Malwarebytes
Hijackthis

 

[linkin]

If malwarebytes is a no-go try running it in safemode, without networking.

 

[tlarkin]

I think I fixed it. Did not have enough time to check, but I went in and manually deleted all the binaries then it let me uninstall it with out a license key.

The trick is there are a few hidden files it puts that doesn't let you uninstall it. Once you kill the binaries and then kill the process it can't relaunch itself and it seemed to work.

I just need to see what collateral damage was done if any.

 

[linkin]

Good Job! :good:
See if CCleaner or HiJack This picks anything up.

 

[tlarkin]

The guy took it back and I told him if the problem comes back I will just wipe and reload it at this point. I told him I did not have time to test it and that if the problem still occurred to let me know.

This is one reason why I hate Windows OSes.