Comments on: Cyber Protection Center http://www.im-infected.com/rogue/cyber-protection-center.html Need Virus Removal Help? Tue, 07 Feb 2012 23:06:02 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: PATRICK BRYANS http://www.im-infected.com/rogue/cyber-protection-center.html#comment-358 PATRICK BRYANS Tue, 03 Nov 2009 18:20:21 +0000 http://www.im-infected.com/?p=1561#comment-358 The following fixed the problem on my PC. Download The Avenger by Swandog46 from hxxp://swandog46.geekstogo.com/avenger2/download.php [*]Unzip/extract it to a folder on your desktop. [*]Double click on avenger.exe to run The Avenger. [*]Click OK. [*]Make sure that the box next to Scan for rootkits has a tick in it and that the box next to Automatically disable any rootkits found does not have a tick in it. [*]Copy all of the text in between the dashed lines, but excluding the dashed lines by highlighting it and then pressing Ctrl+C. ------------------------------------------ Files to delete: C:\Program Files\CS\cs.exe C:\WINDOWS\VDM1EF.tmp C:\WINDOWS\VDM36.tmp C:\WINDOWS\VDM18C.tmp C:\WINDOWS\VDM16B.tmp C:\WINDOWS\VDM155.tmp C:\WINDOWS\VDM6C2.tmp C:\WINDOWS\VDM195.tmp C:\WINDOWS\VDM87.tmp C:\WINDOWS\VDM22.tmp C:\WINDOWS\VDM438.tmp C:\WINDOWS\VDM395.tmp C:\WINDOWS\VDM108.tmp C:\WINDOWS\VDMAC.tmp C:\WINDOWS\VDM97.tmp C:\WINDOWS\VDM43.tmp C:\WINDOWS\VDM300.tmp C:\WINDOWS\VDM2AB.tmp C:\WINDOWS\VDM2AA.tmp C:\WINDOWS\VDM1DD.tmp C:\WINDOWS\VDM133.tmp C:\WINDOWS\VDMB6.tmp C:\WINDOWS\VDM9B.tmp C:\WINDOWS\VDM42.tmp C:\WINDOWS\VDM86F.tmp C:\WINDOWS\VDM854.tmp C:\WINDOWS\VDM838.tmp C:\WINDOWS\VDM7F0.tmp C:\WINDOWS\VDM795.tmp C:\WINDOWS\VDM44C.tmp C:\WINDOWS\VDM350.tmp C:\WINDOWS\VDMF3.tmp ------------------------------------------ [*]In the avenger window, click the Paste Script from Clipboard, button. [*]Click the Execute button. [*]You will be asked "Are you sure you want to execute the current script" [*]Click Yes. [*]You will now be asked First step completed --- The Avenger has been successfully set up to run on next boot. Reboot now?. [*]Click Yes. [*]Your PC will now be rebooted. [*]Note: If the above script contains Drivers to delete: or Drivers to disable:, then The Avenger will require two reboots to complete its operation. [*]If that is the case, it will force a BSOD on the first reboot. This is normal & expected behavior. [*]After your PC has completed the necessary reboots, a log should automatically open. If it does not automatically open, then the log can be found at %systemdrive%\avenger.txt (typically C:\avenger.txt). [*]Please attach this scan log. Even if you experience errors with the program, please check for the log in the above mentioned location. The following fixed the problem on my PC.

Download The Avenger by Swandog46 from hxxp://swandog46.geekstogo.com/avenger2/download.php

[*]Unzip/extract it to a folder on your desktop.
[*]Double click on avenger.exe to run The Avenger.
[*]Click OK.
[*]Make sure that the box next to Scan for rootkits has a tick in it and that the box next to Automatically disable any rootkits found does not have a tick in it.
[*]Copy all of the text in between the dashed lines, but excluding the dashed lines by highlighting it and then pressing Ctrl+C.
——————————————
Files to delete:
C:\Program Files\CS\cs.exe
C:\WINDOWS\VDM1EF.tmp
C:\WINDOWS\VDM36.tmp
C:\WINDOWS\VDM18C.tmp
C:\WINDOWS\VDM16B.tmp
C:\WINDOWS\VDM155.tmp
C:\WINDOWS\VDM6C2.tmp
C:\WINDOWS\VDM195.tmp
C:\WINDOWS\VDM87.tmp
C:\WINDOWS\VDM22.tmp
C:\WINDOWS\VDM438.tmp
C:\WINDOWS\VDM395.tmp
C:\WINDOWS\VDM108.tmp
C:\WINDOWS\VDMAC.tmp
C:\WINDOWS\VDM97.tmp
C:\WINDOWS\VDM43.tmp
C:\WINDOWS\VDM300.tmp
C:\WINDOWS\VDM2AB.tmp
C:\WINDOWS\VDM2AA.tmp
C:\WINDOWS\VDM1DD.tmp
C:\WINDOWS\VDM133.tmp
C:\WINDOWS\VDMB6.tmp
C:\WINDOWS\VDM9B.tmp
C:\WINDOWS\VDM42.tmp
C:\WINDOWS\VDM86F.tmp
C:\WINDOWS\VDM854.tmp
C:\WINDOWS\VDM838.tmp
C:\WINDOWS\VDM7F0.tmp
C:\WINDOWS\VDM795.tmp
C:\WINDOWS\VDM44C.tmp
C:\WINDOWS\VDM350.tmp
C:\WINDOWS\VDMF3.tmp
——————————————
[*]In the avenger window, click the Paste Script from Clipboard, button.
[*]Click the Execute button.
[*]You will be asked “Are you sure you want to execute the current script”
[*]Click Yes.
[*]You will now be asked First step completed — The Avenger has been successfully set up to run on next boot. Reboot now?.
[*]Click Yes.
[*]Your PC will now be rebooted.
[*]Note: If the above script contains Drivers to delete: or Drivers to disable:, then The Avenger will require two reboots to complete its operation.
[*]If that is the case, it will force a BSOD on the first reboot. This is normal & expected behavior.
[*]After your PC has completed the necessary reboots, a log should automatically open. If it does not automatically open, then the log can be found at %systemdrive%\avenger.txt (typically C:\avenger.txt).
[*]Please attach this scan log. Even if you experience errors with the program, please check for the log in the above mentioned location.

]]> By: Peter http://www.im-infected.com/rogue/cyber-protection-center.html#comment-336 Peter Thu, 29 Oct 2009 14:39:57 +0000 http://www.im-infected.com/?p=1561#comment-336 Malwarebytes’ detected a worm but I still cannot reboot into Windows other than safe mode. Also cannot connect to web pages. Any suggestions. Malwarebytes’ detected a worm but I still cannot reboot into Windows other than safe mode. Also cannot connect to web pages. Any suggestions.

]]> By: andybuzz http://www.im-infected.com/rogue/cyber-protection-center.html#comment-287 andybuzz Fri, 16 Oct 2009 01:06:35 +0000 http://www.im-infected.com/?p=1561#comment-287 It remains in your computer doing the same thing. Though your credit card will be charge. It remains in your computer doing the same thing. Though your credit card will be charge.

]]> By: Brian http://www.im-infected.com/rogue/cyber-protection-center.html#comment-286 Brian Fri, 16 Oct 2009 00:10:58 +0000 http://www.im-infected.com/?p=1561#comment-286 What happens if you ordered the cyber security with a credit card believing that it was real? What happens if you ordered the cyber security with a credit card believing that it was real?

]]>