Question
I use my sisters laptop and she put me on standard user, therefore I am prevented from downloading any spyware removal. I want to remove Antivir Solutions Pro which is a fake spyware removal. I looked up everything and I have no idea how, please help me! My sister won't remove it for me again because this is like the 4th time I got a virus on her laptop.
I use my sisters laptop and she put me on standard user, therefore I am prevented from downloading any spyware removal. I want to remove Antivir Solutions Pro which is a fake spyware removal. I looked up everything and I have no idea how, please help me! My sister won't remove it for me again because this is like the 4th time I got a virus on her laptop.
Answer
That is not possible as far as I know as standard user is a limited account and therefore cannot access the Regedit or Command prompt or even the Safe Mode. Unless you try to find the password. => OK, just download on another computer these and then download these softwares: <= http://www.askvg.com/how-to-reset-recover-forgotten-windows-nt-2000-xp-2003-administrator-password/ Guidelines on how to proceed yourself. (5 ways). http://ophcrack.sourceforge.net/download.php?type=livecd (live CD for Windows XP, and Vista only 415.7 MB). http://ophcrack.sourceforge.net/download.php?type=ophcrack (to create it yourself about 5 MB for Windows 2000, XP, Vista, 7). http://www.loginrecovery.com/ **Once you are on her account (no choice!)** Start>All Programs>Accessories>Notepad>File on menu bar>Open and browse for "C:\Windows\System32\Drivers\ETC\" folder>Click on Hosts file>Open>Modify the file by adding "127.0.0.1 www.blocksite.com" to the bottom of the file on 2 separate lines>Save the file>Exit Notepad. 1) Internet Explorer -> Tools -> Internet Explorer ->Security tab>Click on Restricted Sites icon>Click on Sites>Under 'Add This Website to the Zone', Click on the Google URL >Remove>Close>OK. 2) Firefox: https://addons.mozilla.org/en-US/firefox/addon/3145/developers/roadblock?src=addondetail For more information and other tips, go to https://addons.mozilla.org/en-US/firefox/addon/3145/ (If you have Firefox). 3) Google Chrome: Here is the extension download link, it doesn't work at first but leave it will come afterward. If you have this web browser. https://clients2.google.com/service/update2/crx?response=redirect&x=id%3Ddfjfhdfdeogiplgepcbfjcpiianmeoed%26uc%26lang%3Den-US&prod=chrome&prodversion=4.1.249.1064 a) To block the website go to extensions>Wrench icon>Extensions>Options>Login In (you don't need a password for the first use!)>Type in the website you want to block>Click on Block. b) Now to change the password on the same page>Under Change access password: Current password: leave blank>New password: type in a long and complex password with letters and numbers>Confirm new Password: retype it> (Write down on a paper or whatever your password for future reference, learn it by heart)>Click on Change. 4) http://www.freepcsecurity.co.uk/2010/06/12/defense-center-removal/ Then find the URL address for this fake antivirus if it redirects you then block this webpage. Install MBAM to my Desktop under a false name w1w1w1 so it won't get affected by the spyware>Update>Run Full scan>Delete (infected files are put in Vault/quarantine), you can show them to online forum such as http://www.bleepingcomputer.com%3Eregister/ and register, for free>Forum Support. They'll tell you if you can delete them safely. 5) Get your Computer fully scanned by Spyware Doctor, and then keep the scan log open and check each registry entries to delete them. Got to Start -> Run -> type in regedit -> and check carefully (be very cautious here) and then delete each one. Some Spywares can even disable your antivirus! It happened to me! But I wonder how you can do all that without your sister knowing...
That is not possible as far as I know as standard user is a limited account and therefore cannot access the Regedit or Command prompt or even the Safe Mode. Unless you try to find the password. => OK, just download on another computer these and then download these softwares: <= http://www.askvg.com/how-to-reset-recover-forgotten-windows-nt-2000-xp-2003-administrator-password/ Guidelines on how to proceed yourself. (5 ways). http://ophcrack.sourceforge.net/download.php?type=livecd (live CD for Windows XP, and Vista only 415.7 MB). http://ophcrack.sourceforge.net/download.php?type=ophcrack (to create it yourself about 5 MB for Windows 2000, XP, Vista, 7). http://www.loginrecovery.com/ **Once you are on her account (no choice!)** Start>All Programs>Accessories>Notepad>File on menu bar>Open and browse for "C:\Windows\System32\Drivers\ETC\" folder>Click on Hosts file>Open>Modify the file by adding "127.0.0.1 www.blocksite.com" to the bottom of the file on 2 separate lines>Save the file>Exit Notepad. 1) Internet Explorer -> Tools -> Internet Explorer ->Security tab>Click on Restricted Sites icon>Click on Sites>Under 'Add This Website to the Zone', Click on the Google URL >Remove>Close>OK. 2) Firefox: https://addons.mozilla.org/en-US/firefox/addon/3145/developers/roadblock?src=addondetail For more information and other tips, go to https://addons.mozilla.org/en-US/firefox/addon/3145/ (If you have Firefox). 3) Google Chrome: Here is the extension download link, it doesn't work at first but leave it will come afterward. If you have this web browser. https://clients2.google.com/service/update2/crx?response=redirect&x=id%3Ddfjfhdfdeogiplgepcbfjcpiianmeoed%26uc%26lang%3Den-US&prod=chrome&prodversion=4.1.249.1064 a) To block the website go to extensions>Wrench icon>Extensions>Options>Login In (you don't need a password for the first use!)>Type in the website you want to block>Click on Block. b) Now to change the password on the same page>Under Change access password: Current password: leave blank>New password: type in a long and complex password with letters and numbers>Confirm new Password: retype it> (Write down on a paper or whatever your password for future reference, learn it by heart)>Click on Change. 4) http://www.freepcsecurity.co.uk/2010/06/12/defense-center-removal/ Then find the URL address for this fake antivirus if it redirects you then block this webpage. Install MBAM to my Desktop under a false name w1w1w1 so it won't get affected by the spyware>Update>Run Full scan>Delete (infected files are put in Vault/quarantine), you can show them to online forum such as http://www.bleepingcomputer.com%3Eregister/ and register, for free>Forum Support. They'll tell you if you can delete them safely. 5) Get your Computer fully scanned by Spyware Doctor, and then keep the scan log open and check each registry entries to delete them. Got to Start -> Run -> type in regedit -> and check carefully (be very cautious here) and then delete each one. Some Spywares can even disable your antivirus! It happened to me! But I wonder how you can do all that without your sister knowing...
Leave a reply