bibo_boy

After little Bibo used the home PC, he seems to have loaded "Personal Anti-Virus" onto it!!!!

Now I can't use Google as it redirects or blocks everything!

BRI4N

I'm no expert, but have you tried to remove the offending program in "add/remove programs"?

Or maybe disable it in the settings.

WRX_Dazza

bibo download malwarebytes anti-malware application. and run it (the basic version is free) uninstalling it will NOT help.

let me know if you have issues !!

Dazza

bibo_boy

Tried that mate and the .exe file wouldn't run... I've deleted the Personal Antivirus Application folder and tried again...

Now the PAV app doesn't load but Malwarebytes still wont load

duSTI

Try running this from Trends website: Trend Micro HouseCall - Free Online Virus and Spyware Scan - Trend Micro UK

Also go 'Start' 'Run' and type 'msconfig' and hit enter. Under 'startup' there will be various commands ticked. You should untick anything that looks like it is related to the personal anti-virus problem you have.

Then reboot.

I would also try running malware bytes as Dazza recommended.

J

Ms Gooner 1

Kids + Computers = Massive headache. On several occasions my "little darlings" have managed to turn the whole system upside down - someone told me it had something to do with the graphix card - they manage to do it in 20 seconds and it takes me over 2 hours to fathom turning it round again (its quite a clever trick if it wasn't to bloody inconvienient).

Hope you get it sorted (have you tried system restore to previous day?)

WRX_Dazza

ian, do a ctrl-alt-del, and look for any pav files running under processes first!!!

it should work mate, did one last week, but cant remember exactly.. i'll have a quick look hold on

WRX_Dazza

from memory, i think the spyware processes are:-

peravir.exe
and iv.exe

and these registry keys need removing:-
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Personal Antivirus_is1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_ITGRDENGINE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ITGrdEngine
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “Personal Antivirus”

back up the registry first, by clicking start / run and the regedit in the open box
then click on file / export and save the .reg file somewhere

then drill down each of the above file paths, until you find the entries. if you dont feel safe doing this, get someone else to do it (that you can blame later!!!)

remember, you are only deleting the final bit of each path above, just the item listed in bold above!!, right click it and select delete key each time.

good luck

Dazza

bibo_boy

Cheers Mate, I'll give it a go....

Supercue

iTrader: (1)

Bibo Im in Rettendon all this week, if you havnt got it sorted and need someone to pop round pm me

bibo_boy

Cheers for the offer Supercue

And cheers Dazza...

Gave up and reloaded Windows.....

Supercue

iTrader: (1)

No worries you're welcome, glad you you got it sorted