TomsGuide.com: Over 800,000 questions and answers to address all your high-tech questions. Sign up now! Its free!

Remove Personal Antivirus

Forum Applications : Security, Utilities, Anti-Malware - Remove Personal Antivirus


Page:    Previous 1 2 Next Bottom Search this thread
Word :    Username :           
 

Ok, my dad the careless computer user decided to install something called Personal Antivirus. Turned out it was some sort of malware designed to hijack his PC (judging from the pop-ups that continually show on his computer).

Now I know there are solutions out there, but I'm looking for a one-click/one-run solution that I can just shoot to my dad for him to run. The last thing I want to do is dictate obviously hard-to-understand instructions over the phone—or take the long roadtrip to his house. Appreciate any help peeps.

Register or log in to remove.
- 2 +

"Personal Antispyware" is classified as rogue antispyware. It installs itself onto the system and produces fake scan results to scare the unsuspecting into paying for it.

Malwarebytes' Anti-Malware has Personal Antivirus malware definition files. This means that this application should be able to remove the rogue antispyware from the infected system.

Download link: http://download.bleepingcomputer.c [...] -setup.exe

Download the file to the desktop. Once downloaded double click mbam-setup.exe and install it.

When the install is complete it will prompt you to update then run a scan. It is important that the program updates before the scan is run.

Perform the complete scan and remove everything it finds.

This should hopefully repair your dads computer.

Malwarebytes' Anti-Malware is good to keep on the system and run periodically.

If your dad is looking for free antivirus programs there are a few good ones (for personal home use) to choose from. If he already has one that he no longer wants or that has expired he must remove it first.

Avast: http://www.avast.com/eng/download-avast-home.html
AVG: http://free.avg.com/download?prd=afe
Avira AntiVir: http://www.free-av.com/

Be sure to only select one Antivirus program to install

Reply to btk1w1

Thanks for this man! I actually sent your post to my dad, and he was able to understand them. Consider his Personal "Antivirus" program fixed! :)

Also, to minimize the chance of this happening again, I'm planning to buy him some AV software. AVG's paid version sounds good to me, but I've been hearing good things about Norton 2009. What do you think?

Reply to Kandybar_86
- 0 +

Apologies for my delayed response.

There are many that say you get what you pay for, and others (such as myself) that have full confidence in the free alternatives on offer.

If you were to ask me what the best paid for AV software is I could only tell you from what I read, and not from personal experience.

I have read very good reviews in regards to the latest release of Nortons AV software, apparently it is now much less resource hungry and has an improved detection and removal rate.

AVG appears to be one of the most popular AV programs though and user experiences are good.

Other helpers here may be able to offer more detailed advice for you.

Reply to btk1w1

:bounce: This afternoon on June 11, 2009 an uninvited Personal Antivirus program came to bluff me about my pc infected with hundreds of Trojan Virus and Worms. It asked me to buy their software to erase such Trojan Virus and Worms and it meant that I would have to disclose my credit card identity to pay for it, right? My McAfee Total Protection which I bought from my pc store in person last year to be installed in my pc had quarantined several Trojans and I was asked to remove the generic fakealerts created by the same Personal Antivirus program when I clicked on Restore stated in my McAfee Total Protection navigation column. You'd see Personal Antivirus is created by a group of hackers who is well-versed in software programming and they are out to scam everyone they could lay hand on. Please report such problem to all bloggers worldwide that such an old method of scam has emerged again and they'd always change name to avoid detection. They are the devils and they are the angels as well. Do not reveal your credit or debit card numbers to such scammers. Do not log onto other sites to look for a purchase of Trojan Removal Tools at all. Just follow my instructions first. Please inform all your banks to freeze your account for a time being without further delay if you did a mistake. It may be difficult to check where they hide their illegal program in our registry. I managed to remove their scammers' program by clicking on "Start" at the task bar to look for "Help and Support” and clicked “Undo changes to your computer with System Restore" to do time-travelling back one day when I failed to find anything in the "Control Panel" to check for Personal Antivirus icon possibly being downloaded inside "Add or Remove Programs". It was unlikely inside there because I didn't download such program at all. Please change all passwords of your Google, Yahoo, MSN and many others once you have successfully removed such scam by my suggestion of "System Restore". To prevent inconsiderate intrusion again, please enable firewall when you switch off your computer. Do not worry about your business website as the datacenter of your hosting company is protecting your online business data all the time. Be wary of more such future scams. Please spread the news to others as I did for you. You’d see, such scammers have ready Customer Support Specialist to take advantage of loophole of the International Law concerning internet matter. I threatened their “support team” and they emailed to me very soon but I had restored my system earlier back to normal. Don’t be so kind to such rude internet marketers at all. They’re simply hypocrites! They are disturbing our peace and our business with too much climbing over our heads. If they have shops selling Personal Antivirus Software, must they resort to such filthy act to create so much nonsense to tarnish the image of their own lucrative business? Believe it or not, I suspect many other software companies are willing to help you remove Personal Antivirus are themselves behind all these business tricks. Just be careful!!! :whistle:

They sent me an email finally when I threatened them with something but Anna Hamilton is a fake, see below:
[#218770] Re: Personal Antivirus product inquiry
Dear customer,
Thank you for contacting Customer Support Center.
Please follow my instructions to uninstall Personal Antivirus
1.Open My computer, choose Disk C;
2.Find C:\Program Files\Common Files\Uninstall\PAV\Uninstall.lnk
3.Run the Uninstall file.
4.Reboot your computer.
There are other options to find the uninstall file:-paste the following string to Windows Explorer address bar and execute it (Press Enter key):
C:\Program Files\Common Files\Uninstall\PAV\Uninstall.lnk
or
Start->Run->C:\Program Files\Common Files\Uninstall\PAV\Uninstall.lnk
After that our product will be removed.
If you have any questions concerning our software, please contact our Customer Support Service.

Anna Hamilton :non:
Customer Support Specialist
(Where is her company’s address for contact?) :hello:

:whistle: :fou: :kaola:

Reply to James_38
- 0 +

You should download automatic Personal antivirus remover from this website: http://www.2-spyware.com/remove-an [...] -2009.html as you want one-click solution. There's also a manual removal guide, but it can be quite complicated for inexperienced users.

Reply to mikeb36
- 0 +

btk1w1

I also was attacked by Personal av. I rarely respond to forums, but I felt the need to THANK YOU for your advice. I tried the link in the email I received from the very "helpful person" that did not work!!! (see below).
I downloaded the link you posted: http://download.bleepingcomputer.c [...] -setup.exe Ran it and deleted as stated, rebooted my computer and YEA-pav is gone. So simple, almost scary!!
I don't claim to be a computer expert, but I been using one long enough to realize if something can't be removed with a few clicks, there has got to have a caught behind it. I have also used several different types of spyware programs, and never have any of them been as irritating as this was. Spent more time clicking the pop-ups then I did surfing!!!
Again, thank you for the info.


dateTue, Jul 14, 2009 at 5:51 AM
subject[#256158] Re: Personal Antivirus product inquiry
mailed-byglobalmailsupport.com

Thank you for contacting Customer Support Center.
Please follow my instructions to uninstall Personal Antivirus:
Paste the following string to Windows Explorer address bar and execute it (Press Enter key):
C:\Program Files\Common Files\Uninstall\PersonalAV\Uninstall.lnk
or
C:\Program Files\Common Files\Uninstall\PAV\Uninstall.lnk
After that our product will be removed.
If you have any questions concerning our software, please contact our Customer Support Service.

-----------------
Kate Connor
Antivirus Customer Support Specialist

Note that there is no info on how to contact Customer support service. The only way to contact them by phone, which was not mentioned in the email-is to purchase their product.

Reply to jlw1707

you are badass!! i got rid of that damn personal av lol thank you sooo muck!!!!!!!!!!
:bounce:
thanks a ton!! you rock!! lol
thanks again :DDDD

Reply to leticialuna
- 0 +

see my post on av2009 if you continue to have problems.

Reply to montyuk
- 0 +

btk1w1 wrote :

"Personal Antispyware" is classified as rogue antispyware. It installs itself onto the system and produces fake scan results to scare the unsuspecting into paying for it.

Malwarebytes' Anti-Malware has Personal Antivirus malware definition files. This means that this application should be able to remove the rogue antispyware from the infected system.

Download link: http://download.bleepingcomputer.c [...] -setup.exe

Download the file to the desktop. Once downloaded double click mbam-setup.exe and install it.

When the install is complete it will prompt you to update then run a scan. It is important that the program updates before the scan is run.

Perform the complete scan and remove everything it finds.

This should hopefully repair your dads computer.

Malwarebytes' Anti-Malware is good to keep on the system and run periodically.

If your dad is looking for free antivirus programs there are a few good ones (for personal home use) to choose from. If he already has one that he no longer wants or that has expired he must remove it first.

Avast: http://www.avast.com/eng/download-avast-home.html
AVG: http://free.avg.com/download?prd=afe
Avira AntiVir: http://www.free-av.com/

Be sure to only select one Antivirus program to install


:pt1cable: :D :) :bounce: .
Thank you ever so much for your post!!
Amen!! You are #1 in my book!!


Message edited by chaki on 07-22-2009 at 08:48:15 PM
Reply to chaki
- 0 +

btk1w1 wrote :

"Personal Antispyware" is classified as rogue antispyware. It installs itself onto the system and produces fake scan results to scare the unsuspecting into paying for it.

Malwarebytes' Anti-Malware has Personal Antivirus malware definition files. This means that this application should be able to remove the rogue antispyware from the infected system.

Download link: http://download.bleepingcomputer.c [...] -setup.exe

Download the file to the desktop. Once downloaded double click mbam-setup.exe and install it.

When the install is complete it will prompt you to update then run a scan. It is important that the program updates before the scan is run.

Perform the complete scan and remove everything it finds.

This should hopefully repair your dads computer.

Malwarebytes' Anti-Malware is good to keep on the system and run periodically.

If your dad is looking for free antivirus programs there are a few good ones (for personal home use) to choose from. If he already has one that he no longer wants or that has expired he must remove it first.

Avast: http://www.avast.com/eng/download-avast-home.html
AVG: http://free.avg.com/download?prd=afe
Avira AntiVir: http://www.free-av.com/

Be sure to only select one Antivirus program to install


Your reply works great!! Thanks!! :hello: :bounce:

Reply to chaki
- 0 +

:bounce: That was amazing how quick I got rid of that awful Personal AV!! I couldn't do anything with that thing poppin' up every 2 seconds! Thanks for the advice everybody!! :hello:


Message edited by chaki on 07-22-2009 at 08:25:34 PM
Reply to chaki
- 0 +

Help!!!!! I'm trying to get rid of Personal Avtivirus, but cannot find it in my prorams/ Any suggestions?

Reply to patwise
- 0 +

patwise wrote :

Help!!!!! I'm trying to get rid of Personal Avtivirus, but cannot find it in my prorams/ Any suggestions?


:hello: Read this it does the job!!
btk1w1 wrote :


"Personal Antispyware" is classified as rogue antispyware. It installs itself onto the system and produces fake scan results to scare the unsuspecting into paying for it.

Malwarebytes' Anti-Malware has Personal Antivirus malware definition files. This means that this application should be able to remove the rogue antispyware from the infected system.

Download link: http://download.bleepingcomputer.c [...] -setup.exe

Download the file to the desktop. Once downloaded double click mbam-setup.exe and install it.

When the install is complete it will prompt you to update then run a scan. It is important that the program updates before the scan is run.

Perform the complete scan and remove everything it finds.

This should hopefully repair your dads computer.

Malwarebytes' Anti-Malware is good to keep on the system and run periodically.

If your dad is looking for free antivirus programs there are a few good ones (for personal home use) to choose from. If he already has one that he no longer wants or that has expired he must remove it first.

Avast: http://www.avast.com/eng/download-avast-home.html
AVG: http://free.avg.com/download?prd=afe
Avira AntiVir: http://www.free-av.com/

Be sure to only select one Antivirus program to install


:wahoo:

Reply to chaki

I am trying to access the site posted in order to remove the personal antivirus but it is always coming up as address error or can't find the page... Its like it didn't exist.. do you know why its saying that ? :??:

Reply to blaiseeloy
- 1 +

If you click on the link in chakis last post it won't work because it has been truncated.

Here is the full link:

http://download.bleepingcomputer.c [...] -setup.exe

Reply to btk1w1

i had the same problem with personal av i did a system restore and it disappered

Reply to warlock_43

That you may be lucky is all that means. If your system hadnt set any restore points by the time it was out of your system, then it may well be gone, but if your system did, as they do automatically, then its still there, and resides in sys restore


Message edited by jaydeejohn on 07-29-2009 at 12:58:29 PM
------------------------------ I went drifting, thru the capitols of tin, where men cant walk and cant freely talk, and sons turn their fathers in
Reply to jaydeejohn

I had the same problem yesterday,I got spybot installed it did destroy the darn personal av. good luck

Reply to Anonymous

My son has the same problem! I just tried to fix it with the posted instructions, the problem is, he turned off the computer (after I told him not to). I tried to reboot in safe mode and all I get is a black screen after it looks like it is opening Windows. Any other advice from here? Thanks in advance.

Reply to newmex_rain

Did you wait for awhile? Safe mode can be slow due to using Micro softs slow drivers

------------------------------ I went drifting, thru the capitols of tin, where men cant walk and cant freely talk, and sons turn their fathers in
Reply to jaydeejohn
- 0 +

I'm assuming you are using the F8 key during startup to try to boot into safe mode.

If you are, when you are presented with the options that has safe mode, try using the option " Last Known Good Configuration" instead.

It appears the improper shutdown may have corrupted the startup process.

Reply to btk1w1

Yes, I used F8 during the startup process. I will try the "last known good configuration" option. I let the computer sit with a black screen for 30 minutes after I tried to restart it and it still never did anything. How long should I have let it sit?

Reply to newmex_rain

Its fine. Id just wait a minute or two, three at most, depending on whats inside . It comes up slower than normal, and I wanted to make sure. Yes, last known is the best shot from here

------------------------------ I went drifting, thru the capitols of tin, where men cant walk and cant freely talk, and sons turn their fathers in
Reply to jaydeejohn
- 0 +

Hi!

Many thanks to you! I was really desperate that I can not uninstall Personal AV, but following your advice I could do it in 5 minutes.


btk1w1 wrote :

"Personal Antispyware" is classified as rogue antispyware. It installs itself onto the system and produces fake scan results to scare the unsuspecting into paying for it.

Malwarebytes' Anti-Malware has Personal Antivirus malware definition files. This means that this application should be able to remove the rogue antispyware from the infected system.

Download link: http://download.bleepingcomputer.c [...] -setup.exe

Download the file to the desktop. Once downloaded double click mbam-setup.exe and install it.

When the install is complete it will prompt you to update then run a scan. It is important that the program updates before the scan is run.

Perform the complete scan and remove everything it finds.

This should hopefully repair your dads computer.

Malwarebytes' Anti-Malware is good to keep on the system and run periodically.

If your dad is looking for free antivirus programs there are a few good ones (for personal home use) to choose from. If he already has one that he no longer wants or that has expired he must remove it first.

Avast: http://www.avast.com/eng/download-avast-home.html
AVG: http://free.avg.com/download?prd=afe
Avira AntiVir: http://www.free-av.com/

Be sure to only select one Antivirus program to install


Reply to Dormaya

Yeah,So that
stupid PersonalAV
popped up and was
like you have a lot
of viruses and it
wouldnt stop popping
up.Then it wouldnt let
me uninstall it.So I
googled how to...and
this popped up and its
running as i type.Yay.
Thank you!!
I can't like tell
you how happy I am that
its gone!
Oh,and whoever invinted
the stupid PersonalAV,
You need to go die!!jk
You just need to get punched
in the face and your
mom needs to reteach you how
to be kind to others!!
But yeah,Im glad that now I
can uninstall it!

Reply to Anonymous

Hi guys, so yeh i had this personal security *** pop up so i followed the instructions and installed http://download.bleepingcomputer.c [...] -setup.exe , i went to scan and started the scan but after 3-5secs it closes down automatically and stops scanning, i tried repeatedly to do the scan but it still doesnt work.
Any help or advice much appreciated. :wahoo:

Reply to Anonymous

Me too! any help would be great! I open up the program to start the scan and in like 3 sec it's gone and scanning stopped??

Reply to Anonymous
- 0 +

Looks like "Personal Antivirus" has been modified since this thread was started to overcome MBAM removing it.

Have you both tried running the scan in safe mode?

How to boot PC into "Safe mode":
http://www.pchell.com/support/safemode.shtml

Please note: DO NOT use the MSCONFIG method to boot into Safe mode.
ONLY use the F8 method to boot into safe mode.

Using MSCONFIG to boot into Safe mode when removing malicious software can result in boot-loop, and may need to be resolved by reinstalling the operating system.

Reply to btk1w1

I am in the process of trying to remove it from another computer in the office, but remember to keep running the kill process, as this personal security does weasel its way back into the system after just once or twice in hitting the kill process. My first run through of the bleeping computer solution has been a failure, as the personal security virus is still there.

Keep a tab on the task manager as well (Ctrl+Alt+Del) as the you sort by name and it will pop back in there, which is how I was able to keep malbytes to keep running, though I believe that is the reason why it did not completely remove.

Reply to rustedwalleye

avira free antivirus is the best of the free ones!

Reply to area51reopened

when i downloaded http://download.bleepingcomputer.c [...] -setup.exe the same thing happened to me when i did the quick scan it would close after about 3 seconds so i tried to do it in safe mode but

when i try to run Malwarebyte's Anti-Malware a message pops up saying "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."

Reply to csnyder5
- 0 +

People have reported having success at removing rogues with Revo Uninstaller's "Hunter Mode".

Although an unorthodox method, it is likely to work as the software (malware) writers wouldn't consider that a third party uninstall utility would be used for removal.

Download Revo Uninstaller (Freeware):

http://www.revouninstaller.com/

Start the program and click on the hunter mode button. The program will disappear, but there will be a floating blue bullseye at the top right of the page.

Next navigate to a personal antivirus folder / file, a few have been listed below:

c:\Program Files\Personal Antivirus\PerAvir.exe
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus
c:\Program Files\Personal Antivirus
%UserProfile%\Application Data\Personal Antivirus


Now drag and drop the Revo bullseye onto the top of the folder / file.

There are a list of options that appear:

Uninstall – start the uninstall module of the application
Stop Auto Starting – disable the application from auto start when Windows start
Kill – Stop the application
Kill and Delete – stop and delete the application useful if the application is not installable
Open Containing Folder - Open a new instance of windows explorer and explore the directory, where the application is located
Search at Google for - Use it to search with Google for the application name, file name or the company name - producer of selected application. This command will open your default web browser and load the result of current search in the Google web site
Properties - Show application's executable file's properties
Cancel – Cancel the operation

With the "Kill" option followed by the "Uninstall" there is a good chance that the program may be stopped long enough to follow up with Malwarebytes AnitMalware and SUPERAntiSpyware and make the final blow.

I have put the full list of associated files and folders as provided by Bleeping Computer because this malware appears to prevent others from reaching the site.

c:\Documents and Settings\All Users\Desktop\Personal Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus
%UserProfile%\Application Data\Personal Antivirus\settings.ini
%UserProfile%\Application Data\Personal Antivirus\uill.ini
%UserProfile%\Application Data\Personal Antivirus\unins000.exe
%UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus\db
%UserProfile%\Application Data\Personal Antivirus\db\config.cfg
%UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
%UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
c:\Program Files\Personal Antivirus
c:\Program Files\Personal Antivirus\activate.ico
c:\Program Files\Personal Antivirus\Explorer.ico
c:\Program Files\Personal Antivirus\PerAvir.exe
c:\Program Files\Personal Antivirus\unins000.dat
c:\Program Files\Personal Antivirus\uninstall.ico
c:\Program Files\Personal Antivirus\working.log
c:\Program Files\Personal Antivirus\db
c:\Program Files\Personal Antivirus\db\DBInfo.ver
c:\Program Files\Personal Antivirus\db\ia080614.db
c:\Program Files\Personal Antivirus\db\ia080618x.db
c:\Program Files\Personal Antivirus\Languages
c:\Program Files\Personal Antivirus\Languages\IAEs.lng
c:\Program Files\Personal Antivirus\Languages\IAFr.lng
c:\Program Files\Personal Antivirus\Languages\IAGer.lng
c:\Program Files\Personal Antivirus\Languages\IAIt.lng
c:\WINDOWS\system32\log.txt
%UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

Reply to btk1w1

hey i am having trouble deleting that damn personal security antivirsus software from my laptop because everything time i try to click on the link you provided to delete it my internet explorer freezes and it gives me a message that says my internet explorer has suddenly stop working and it ask you to click on close program. is there anything else i can do?

Reply to Anonymous
- 0 +

The malware is trying to stop you accessing the software.

There are alternative download locations but chances are these are probably black-listed by the malware also.

Here are other alternative download locations:

http://www.malwarebytes.org/mbam.php
http://download.cnet.com/Malwareby [...] 04572.html
http://majorgeeks.com/Malwarebytes [...] d5756.html
http://www.filehippo.com/download_ [...] i_malware/

If you have trouble downloading the software still, trying downloading, installing, updating and running the scan while in "safe mode with networking".

To boot into "Safe mode with networking":

1. Restart your pc

2. As soon as the pc fully shuts down and you hear it booting back up again start tapping the F8 key in one second intervals.

3. If successful you will have a screen that is black with white text. Arrow down to "Safe mode with networking" and hit enter.

4. If unsuccessful or you hear a continuous beeping sound try again and slightly slow down the tapping of the F8 key.

5. When you have successfully booted the pc into safe mode you will see a black screen with white text rolling up it. This is normal. When the operating system has loaded everything will look cartoonish. This is normal.

6. To exit "Safe mode..." simply reboot your pc.

Note: Never boot your pc into "Safe mode..." using the msconfig method when dealing with malware as this can cause boot loop and the only way to fix is often an operating system reinstall.

Reply to btk1w1

it seems this little bugger is getting cleverer and cleverer, it now recognises malwarebytes and its download locations.
to get round it do this.

search the net with EXPLORER not internet explorer or firefox.

1 explore your computeer then type in top bar www.malwarebytes.org to get the download

2 when you find the file (free download) on malwarebytes.org when you save it to your computer save it as a DIFFERENT
filename otherwise it wont install

3 once installed goto program files and find malwarebytes folder then find malwarebytes.exe and rename that to say malware.exe make sure you can see the file extension if you cant just change the name but dont add the .exe
then double click on the file to run it then get it to do a scan and it will delete the personal security suite virus.

i would love to know how these hackers who built this can remain anonymous and get paid and theres no trail to them

Alan _F

Reply to squarebanana

Stick to the simple instructions listed over here http://removeit.info/remove-person [...] tispyware/ .
This will walk you all the way through Personal Security rogue antispyware removal.
Best of luck!

Reply to JeremiahWoods

yeh that does look easier than what i said

NOT

Reply to squarebanana

http://img.tomshardware.com/forum/ [...] thanks....
thanks a lot.......
i m a bad user of internet...
whatever i see in computer anything free i download it without affecting it will helpful 2 me or not .....

Reply to chaitali

I have the same type of mal-ware, called "Personal Security" virus. Right after clicking it from Add/Remove Programs in Control Panel, it begins to spread and dominates whole system. It won't let me to start anything including import from USB mem. While I am googling it, there are many possible ways to remove it, but most of them are a bit long procedure. So, I decided to do <System Restore> from <Safe Mode> logging in as <Administrator>. Fortunately, it was working in this case. After system restore, I ran 2 system care applications such as <Advanced System Care> <CCleaner> and <Belarc Advisor> <HijackThis> for checking the status of system and to find out if such mal-ware still running. They found none. So this is another alternative to cure this disease.

Reply to Anonymous

I have cleaned this from several friends computers and one thing I do not see mentioned here is Windows Process Explorer http://technet.microsoft.com/en-us [...] 96653.aspx

This does the same thing as rkill, which is blocked by the latest version of Personal Security(Jan 2010). Procexp is also blocked BUT you can rename it to "winlogon" and then run it and PAV does not block it, allowing you to kill the PS processes (just look at the icon of the process) and then can run malwarebytes to clean the system.

Reply to dnasmith

I have tried every single suggestion posted on this page and not a single one has worked in removing this stupid program. I can't even get the downloaded removing programs to open up, it gives me my popup asking if I want to open it and I click yes and it does nothing.
It's driving me insane.
Are there any more suggestions that might work before I kill the makers of this program?

Reply to Anonymous
- 0 +

dnasmith wrote :

I have cleaned this from several friends computers and one thing I do not see mentioned here is Windows Process Explorer http://technet.microsoft.com/en-us [...] 96653.aspx

This does the same thing as rkill, which is blocked by the latest version of Personal Security(Jan 2010). Procexp is also blocked BUT you can rename it to "winlogon" and then run it and PAV does not block it, allowing you to kill the PS processes (just look at the icon of the process) and then can run malwarebytes to clean the system.



Another vote for Process Explorer. Between that and Autoruns it's a good place to start. Then clean up with Malwarebytes.

Reply to perth

i waz wonderin duz this method cost money because i am only 13 and i already hve avast which hasnt picked up anything. but the personal security is really anoying me but if it costs 4 this do u no any other method of removing
it



Reply to Anonymous

btk1w1 wrote :

People have reported having success at removing rogues with Revo Uninstaller's "Hunter Mode".

Although an unorthodox method, it is likely to work as the software (malware) writers wouldn't consider that a third party uninstall utility would be used for removal.

Download Revo Uninstaller (Freeware):

http://www.revouninstaller.com/

Start the program and click on the hunter mode button. The program will disappear, but there will be a floating blue bullseye at the top right of the page.

Next navigate to a personal antivirus folder / file, a few have been listed below:

c:\Program Files\Personal Antivirus\PerAvir.exe
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus
c:\Program Files\Personal Antivirus
%UserProfile%\Application Data\Personal Antivirus


Now drag and drop the Revo bullseye onto the top of the folder / file.

There are a list of options that appear:

Uninstall – start the uninstall module of the application
Stop Auto Starting – disable the application from auto start when Windows start
Kill – Stop the application
Kill and Delete – stop and delete the application useful if the application is not installable
Open Containing Folder - Open a new instance of windows explorer and explore the directory, where the application is located
Search at Google for - Use it to search with Google for the application name, file name or the company name - producer of selected application. This command will open your default web browser and load the result of current search in the Google web site
Properties - Show application's executable file's properties
Cancel – Cancel the operation

With the "Kill" option followed by the "Uninstall" there is a good chance that the program may be stopped long enough to follow up with Malwarebytes AnitMalware and SUPERAntiSpyware and make the final blow.

I have put the full list of associated files and folders as provided by Bleeping Computer because this malware appears to prevent others from reaching the site.

c:\Documents and Settings\All Users\Desktop\Personal Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus
%UserProfile%\Application Data\Personal Antivirus\settings.ini
%UserProfile%\Application Data\Personal Antivirus\uill.ini
%UserProfile%\Application Data\Personal Antivirus\unins000.exe
%UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus\db
%UserProfile%\Application Data\Personal Antivirus\db\config.cfg
%UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
%UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
c:\Program Files\Personal Antivirus
c:\Program Files\Personal Antivirus\activate.ico
c:\Program Files\Personal Antivirus\Explorer.ico
c:\Program Files\Personal Antivirus\PerAvir.exe
c:\Program Files\Personal Antivirus\unins000.dat
c:\Program Files\Personal Antivirus\uninstall.ico
c:\Program Files\Personal Antivirus\working.log
c:\Program Files\Personal Antivirus\db
c:\Program Files\Personal Antivirus\db\DBInfo.ver
c:\Program Files\Personal Antivirus\db\ia080614.db
c:\Program Files\Personal Antivirus\db\ia080618x.db
c:\Program Files\Personal Antivirus\Languages
c:\Program Files\Personal Antivirus\Languages\IAEs.lng
c:\Program Files\Personal Antivirus\Languages\IAFr.lng
c:\Program Files\Personal Antivirus\Languages\IAGer.lng
c:\Program Files\Personal Antivirus\Languages\IAIt.lng
c:\WINDOWS\system32\log.txt
%UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe



Please listen to these instructions - they worked!! We could not boot into Safe Mode because it continuously rebooted. It also blocked Malwarebytes, Task Manager, Control Panel, MSCONFIG - anything we tried it blocked the processes. This person CLEARLY knows what they are talking about and saved us a reload.

I joined just to say that. THANK YOU!!!

Reply to rouschkateer
- 0 +

dnasmith's method worked perfectly for me!!! March 4th, 2010. None of the other methods work. This is great, a ton of computers at my university have this awful program on it and I finally found an easy fix !!!! THANK YOUU

Reply to sopedog

James_38 wrote :

:bounce: This afternoon on June 11, 2009 an uninvited Personal Antivirus program came to bluff me about my pc infected with hundreds of Trojan Virus and Worms. It asked me to buy their software to erase such Trojan Virus and Worms and it meant that I would have to disclose my credit card identity to pay for it, right? My McAfee Total Protection which I bought from my pc store in person last year to be installed in my pc had quarantined several Trojans and I was asked to remove the generic fakealerts created by the same Personal Antivirus program when I clicked on Restore stated in my McAfee Total Protection navigation column. You'd see Personal Antivirus is created by a group of hackers who is well-versed in software programming and they are out to scam everyone they could lay hand on. Please report such problem to all bloggers worldwide that such an old method of scam has emerged again and they'd always change name to avoid detection. They are the devils and they are the angels as well. Do not reveal your credit or debit card numbers to such scammers. Do not log onto other sites to look for a purchase of Trojan Removal Tools at all. Just follow my instructions first. Please inform all your banks to freeze your account for a time being without further delay if you did a mistake. It may be difficult to check where they hide their illegal program in our registry. I managed to remove their scammers' program by clicking on "Start" at the task bar to look for "Help and Support” and clicked “Undo changes to your computer with System Restore" to do time-travelling back one day when I failed to find anything in the "Control Panel" to check for Personal Antivirus icon possibly being downloaded inside "Add or Remove Programs". It was unlikely inside there because I didn't download such program at all. Please change all passwords of your Google, Yahoo, MSN and many others once you have successfully removed such scam by my suggestion of "System Restore". To prevent inconsiderate intrusion again, please enable firewall when you switch off your computer. Do not worry about your business website as the datacenter of your hosting company is protecting your online business data all the time. Be wary of more such future scams. Please spread the news to others as I did for you. You’d see, such scammers have ready Customer Support Specialist to take advantage of loophole of the International Law concerning internet matter. I threatened their “support team” and they emailed to me very soon but I had restored my system earlier back to normal. Don’t be so kind to such rude internet marketers at all. They’re simply hypocrites! They are disturbing our peace and our business with too much climbing over our heads. If they have shops selling Personal Antivirus Software, must they resort to such filthy act to create so much nonsense to tarnish the image of their own lucrative business? Believe it or not, I suspect many other software companies are willing to help you remove Personal Antivirus are themselves behind all these business tricks. Just be careful!!! :whistle:

They sent me an email finally when I threatened them with something but Anna Hamilton is a fake, see below:
[#218770] Re: Personal Antivirus product inquiry
Dear customer,
Thank you for contacting Customer Support Center.
Please follow my instructions to uninstall Personal Antivirus
1.Open My computer, choose Disk C;
2.Find C:\Program Files\Common Files\Uninstall\PAV\Uninstall.lnk
3.Run the Uninstall file.
4.Reboot your computer.
There are other options to find the uninstall file:-paste the following string to Windows Explorer address bar and execute it (Press Enter key):
C:\Program Files\Common Files\Uninstall\PAV\Uninstall.lnk
or
Start->Run->C:\Program Files\Common Files\Uninstall\PAV\Uninstall.lnk
After that our product will be removed.
If you have any questions concerning our software, please contact our Customer Support Service.

Anna Hamilton :non:
Customer Support Specialist
(Where is her company’s address for contact?) :hello:

:whistle: :fou: :kaola:


Reply to Anonymous

Hi James_38,
i am praveen from india.

Really really thank full to you, Because i stuck with personal security anti mal-ware from 2 days, it will stop all the processes in laptop.No one application also not opened and installed .
i search for " How to uninstall Personal security ". But it shows a lot of process.
No i got that path
( C:\Program Files\Common Files\Uninstall\PAV\Uninstall.lnk )
by visiting your review on your problem.

Once again Thank you very much. I appreciate you.Thank you very much.
If you want to reply me My mail id is " cherrysmooth@ymail.com "

Reply to Anonymous

Anonymous wrote :

Hi James_38,
i am praveen from india.

Really really thank full to you, Because i stuck with personal security anti mal-ware from 2 days, it will stop all the processes in laptop.No one application also not opened and installed .
i search for " How to uninstall Personal security ". But it shows a lot of process.
No i got that path
( C:\Program Files\Common Files\Uninstall\PAV\Uninstall.lnk )
by visiting your review on your problem.

Once again Thank you very much. I appreciate you.Thank you very much.
If you want to reply me My mail id is " cherrysmooth@ymail.com "




READ and FOLLOW the instructions above. It works!

Reply to rouschkateer
Previous
1 2
TomsGuide.com: Over 800,000 questions and answers to address all your high-tech questions. Sign up now! Its free!
Tom's Guide > Forum > Applications > Security, Utilities, Anti-Malware > Remove Personal Antivirus
Go to:

There are 16 identified and unidentified users. To see the list of identified users, Click here.