Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: RPC Virus Virus

07 Apr 2011   #1

Windows 7 Ultimate x32
 
 
PC Tools Firewall Plus--Help!

In my pc's device manager under "network Adapters" i see "PC Tools Driver #6"...ok I remember I installed PC Tools Firewall Plus months ago..and It might have been installed then....it also has a tiny yellow exclamation mark over...useless stuff...so i decide to uninstall it..
So, I click uninstall and the device manager page refreshes but OMG! it's still there
I tried many times but that ugly thing is still there...
Can anyone help?


My System SpecsSystem Spec
.

07 Apr 2011   #2

Windows 7 Ultimate x32
 
 
RPC Virus Virus

The action center keeps on saying "Remove the RPC Virus Virus"..
Anyone knows how to remove it??
I'm using MSE and Malwarebytes Anti Malware and both found nothing!
My System SpecsSystem Spec
07 Apr 2011   #3

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Quote:
The RPC Virus (aka Remote Procedure Call Virus) is also known as MSBlast or the Blaster Virus, is a malicious worm that spreads by infecting vulnerable computers. If your computer has been infected, you may experience frequent system crashes or be completely unable to access any website. Remove the virus using an updated spyware removal tool immediately.
Quote:
What is RPC Virus – Fake Alert?

RPC Virus is a fake alert message coming from a rogue security program that will mislead its victim from buying the licensed version of the software. The fake alert messages will be shown as:
Remove the RPC Virus virus
Windows has detected RPC Virus, a known computer virus on your computer. RPC Virus has caused your computer to stop working properly.
Remove the RPC Virus virus from your computer
This problem was caused by RPC Virus, a known computer virus.
To prevent this problem from occurring again, install and run an up-to-date antivirus and antispyware program on your computer.
RPC Virus or MSBlast Removal Instructions

Suggest you run these tools, do a full system scan after following the removal instructions. If you cannot do this in regular mode, then run in safe mode:

http://www.microsoft.com/security/pc...e-removal.aspx

http://security.symantec.com/nbrt/npe.asp?lcid=1033
My System SpecsSystem Spec
.


07 Apr 2011   #4

Windows 7 Ultimate x32
 
 

Actually neither the process nor the registry key was found in my PC...any gusses??
My System SpecsSystem Spec
07 Apr 2011   #5

Windows 7 Ultimate 64 bit
 
 

Malwarebytes' Anti-Malware should pick that baddie up. Try updating MBAM then do a Full Scan. Post the resulting log here, please.
My System SpecsSystem Spec
07 Apr 2011   #6

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Quote   Quote: Originally Posted by akshaybz View Post
Actually neither the process nor the registry key was found in my PC...any gusses??
After you do the full malwarebytes scan as suggested by Carolyn, if nothing shows, run the Malicious software removal tool and then the Norton Power Eraser (full system scan)

Quote:
These RPC Virus files can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, RPC Virus might create a file like
%PROGRAM_FILES%\RPC Virus\RPC Virus.exe. Locate and remove these files.
You may wish to consider running the Malwarebytes & Malicious software removal tool while disconnected from the net.

The Power Eraser will need a net connection to function properly
My System SpecsSystem Spec
07 Apr 2011   #7

Windows 7 Ultimate x32
 
 

MBAM cleaned this:
Code:
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\TJHTHX1O7X (Trojan.FakeAlert) -> Quarantined and deleted successfully.
Also here is screenshot of my task manager which are suspicious:
My System SpecsSystem Spec
07 Apr 2011   #8

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Good, glad it's apparently sorted.

Now it's a good idea to run a full system scan with MSE, Malwarebytes and the Malicious Software tool just to be sure it's out of the system & there are no leftovers. Run these scans disconnected from the net so that it can't "call for help".

That's just to be sure it's gone, I know this can take a little bit, but why take chances on it coming back?
My System SpecsSystem Spec
07 Apr 2011   #9

Windows 7 Ultimate 64 bit
 
 

Those are legit processes in the screenshot

for example, see HERE
My System SpecsSystem Spec
07 Apr 2011   #10

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Yeah, don't delete anything that "looks suspicious", let the scanners decided that. If you remove the wrong thing, you could end up crippling your PC.

After Mbam cleaned the file out, did the warnings disappear?
My System SpecsSystem Spec
Reply

 RPC Virus Virus




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 10:51 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33