FSi football streaming FSi football streaming
FSi football streaming FSi football streaming FSi football streaming FSi football streaming
FSi football streaming
FSi football streaming Download P2P SoftwareFSi ForumsLive Streams and Feedback



Welcome to the FSi Forums forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact contact us.

Reply
  #21  
Old 14-05-2010, 11:13 PM
asdfg asdfg er ikke aktiv
Friend of FSi
 
Join Date: Dec 2006
Location: spain
Posts: 154
vCash: 1524
I've managed to find something called psecurity in the start up list but everytime I disable it and logout/login it reappears again enabled? Is there anyway I can just delete it from the list?
Reply With Quote
  #22  
Old 14-05-2010, 11:35 PM
Begbie's Avatar
Begbie Begbie er ikke aktiv
Chicken in Black
 
Join Date: Jun 2007
Location: Portstewart
Posts: 8,898
vCash: 2145710635
OK. I've posted the instructions here in case you can't get to the page. I've also added all the files in a Zip file. Extract them all.
Quote:

1. Print out these instructions as we may need to close every window that is open later in the fix.

2. It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files requested in this guide on another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive.

3. Before we can do anything we must first end the processes that belong to Personal Security so that it does not interfere with the cleaning procedure. To do this, download the following file to your desktop.

rkill.com Download Link

4. Once it is downloaded, double-click on the rkill.com in order to automatically attempt to stop any processes associated with Personal Security and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by Personal Security when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate Personal Security . So, please try running Rkill until the malware is no longer running. You will then be able to proceed with the rest of the guide. If you continue having problems running rkill.com, you can download iExplore.exe or eXplorer.exe, which are renamed copies of rkill.com, and try them instead.

Do not reboot your computer after running rkill as the malware programs will start again.

5. Now you should download Malwarebytes' Anti-Malware, or MBAM, from the following location and save it to your desktop:

Malwarebytes' Anti-Malware Download Link


6. Once downloaded, close all programs and Windows on your computer, including this one.

7. Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MBAM onto your computer.

8. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware checked. Then click on the Finish button. If MalwareBytes' prompts you to reboot, please do not do so.

9. MBAM will now automatically start and you will see a message stating that you should update the program before performing a scan. As MBAM will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program as shown below.


MalwareBytes Anti-Malware Screen

10. On the Scanner tab, make sure the the Perform full scan option is selected and then click on the Scan button to start scanning your computer for Personal Security related files.

11. MBAM will now start scanning your computer for malware. This process can take quite a while, so we suggest you go and do something else and periodically check on the status of the scan. When MBAM is scanning it will look like the image below.


MalwareBytes Anti-Malware Scanning Screen

12. When the scan is finished a message box will appear as shown in the image below.


MalwareBytes Anti-Malware Scan Finished Screen

You should click on the OK button to close the message box and continue with the Personal Security removal process.

13. You will now be back at the main Scanner screen. At this point you should click on the Show Results button.

14. A screen displaying all the malware that the program found will be shown as seen in the image below. Please note that the infections found may be different than what is shown in the image.


MalwareBytes Scan Results


You should now click on the Remove Selected button to remove all the listed malware. MBAM will now delete all of the files and registry keys and add them to the programs quarantine. When removing the files, MBAM may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot, please allow it to do so. Once your computer has rebooted, and you are logged in, please continue with the rest of the steps.

15. When MBAM has finished removing the malware, it will open the scan log and display it in Notepad. Review the log as desired, and then close the Notepad window.

16. You can now exit the MBAM program.

Your computer should now be free of the Personal Security program.
__________________
Reply With Quote
  #23  
Old 14-05-2010, 11:39 PM
adam_ayres1988's Avatar
adam_ayres1988 adam_ayres1988 er ikke aktiv
Friend of FSi
 
Join Date: Feb 2007
Location: England
Posts: 1,914
vCash: 1000
I've had to do that a couple of times
__________________
Reply With Quote
  #24  
Old 14-05-2010, 11:40 PM
Begbie's Avatar
Begbie Begbie er ikke aktiv
Chicken in Black
 
Join Date: Jun 2007
Location: Portstewart
Posts: 8,898
vCash: 2145710635
My ZIP file won't upload, for some reason. Any joy with the previous post asdfg?
__________________
Reply With Quote
  #25  
Old 15-05-2010, 12:01 AM
asdfg asdfg er ikke aktiv
Friend of FSi
 
Join Date: Dec 2006
Location: spain
Posts: 154
vCash: 1524
I did see this using google, but I didn't know if it would work. It looks like it's going to take ages to run so I could be here all night. I'll let you know later/tomorrow if I get any joy.

P.S. I hate flaming cats!
Reply With Quote
  #26  
Old 15-05-2010, 12:11 AM
Begbie's Avatar
Begbie Begbie er ikke aktiv
Chicken in Black
 
Join Date: Jun 2007
Location: Portstewart
Posts: 8,898
vCash: 2145710635
Quote:
Originally Posted by asdfg View Post
I did see this using google, but I didn't know if it would work. It looks like it's going to take ages to run so I could be here all night. I'll let you know later/tomorrow if I get any joy.
Cheers asdfg. I'm still puzzled why none of the FSi linkfinders got the virus. We've usually been on the pages before we post them. I was definitely on UKTV earlier and didn't get it.

Ps: I've got 2 cats and they told me that they don't like you either. Don't pick on Ayres.
__________________
Reply With Quote
  #27  
Old 15-05-2010, 10:00 AM
gazza's Avatar
gazza gazza er ikke aktiv
Y.N.W.A.
 
Join Date: Oct 2006
Location: Liverpool
Posts: 687
vCash: 39000056
This is from Yahoo answers:

Malwarebytes should be able to remove it completely but you can remove Personal Security manually

1. Kill processes: psecurity.exe

2. Unregister DLLs:
C:\WINDOWS\system32\win32extension.dll

3. Delete registry keys:
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A…
HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58F…
HKEY_CURRENT_USER\Software\Microsoft\W… "PSecurity"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\… Settings\5.0\User Agent\post platform "WinTSI 01.12.2009"

4. Delete files:
c:\Program Files\PSecurity\psecurity.exe
c:\Program Files\Common Files\PSecurityUninstall
c:\Program Files\Common Files\PSecurityUninstall\Uninstall.lnk
c:\WINDOWS\system32\win32extension.dll
c:\Documents and Settings\All Users\Start Menu\PSecurity
c:\Documents and Settings\All Users\Start Menu\PSecurity\Computer Scan.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Help.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Personal Security.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Registration.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Security Center.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Settings.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Update.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PSecurity.lnk
%UserProfile%\Desktop\Personal Security.lnk


5. Delete folders:
c:\Program Files\PSecurity
__________________
Reply With Quote
  #28  
Old 15-05-2010, 03:53 PM
mike81's Avatar
mike81 mike81 er ikke aktiv
ЧЕМПИОНЫ ЕВРОПЫ
 
Join Date: Oct 2005
Posts: 3,342
vCash: 534827
One of many rogue anti-virus infections doing the rounds at the moment.

Boot into safe mode with networking.

Download Malwarebytes: http://www.filehippo.com/download_ma..._anti_malware/

Run quick scan.

Boot back into windows.

Job done.
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +1. The time now is 10:16 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
Forum SEO by Zoints
Copyright FSi - http://www.footballstreaming.info - http://www.fsicrew.info - http://www.fsiteam.info
FSi football streaming FSi football streaming