DriveCleaner - why?

andyrules

Help

I'm getting a message each time I start up warning me that i've got a 'violation history' and I should buy DriveCleaner to erase evidence of the adult sites I've visited! But I've not been there - honest!, so why has this just started? I use AVG and Spybot, so is it possibly a virus?

Cheers

Jzpop

See the links below for an explanation and removal instructions -

http://www.bleepingcomputer.com/forums/topic71782.html

http://www.symantec.com/security_response/writeup.jsp?docid=2006-062217-0726-99&tabid=3

I can't believe AVG would let this through - consider paying for NOD32 as an antivirus program

Little_John

AVG doesnt pick it up becasue it isnt a virus. it is spyware/adware.

as for paying for NOD32 possibly not the best advise I wouldnt really like to advise an antivirus package at the moment they all have their failings CMI labs asap seems the best of a bad bunch at the moment pretty uncluttered and doesn't affect performance to much

gremlin666_2

NOD32 is the best antivirus ive ever used and it doesn't slow your PC down like so many others do.

andyrules

zpop

i'm having trouble with this, it's not in 'add/remove' as indicated that it might not be, and when I went further into the instructions it recommended an advanced user to perform - deffo not me!! Can anyone give me some simple instructions on removing it, or should I take it in somewhere?
Thanks

Donnie

Little_John wrote: »

AVG doesnt pick it up becasue it isnt a virus. it is spyware/adware.

as for paying for NOD32 possibly not the best advise I wouldnt really like to advise an antivirus package at the moment they all have their failings CMI labs asap seems the best of a bad bunch at the moment pretty uncluttered and doesn't affect performance to much

"CMI labs asap"??

Does you mean Kaspersky? http://www.kaspersky.com/

C-MI Labs Plc is an "intelligent security distributor". They don't produce anything at all.

Browntoa

Tools needed for this fix:

• Vundo Fix

1. double-clickVundoFix.exeto run it.
2. Click the Scan for Vundo button.
3. Once it's done scanning, click the Remove Vundo button.
4. You will now receive a prompt asking if you want to remove the files, click the YES button. Once you click yes, your desktop will go blank as it starts removing Vundo.
5. When completed, it will prompt that it will shutdown your computer, click the OK button.
6. When the computer has shutdown, turn your computer back on.

Browntoa

I'd then follow posts 1 to 4 of this thread

http://forums.moneysavingexpert.com/showthread.html?t=133269

as these types of infection install other stuff once they are on your PC.

if you still have problems then at the end of post 4 it tells you how to produce and post a hijackthis log for me to look at

andyrules

Cheers for that Browntoa, super clear instructions, printed off and followed. After the scan, desktop didn't go blank nor did I get a prompt to close down, so I did anyway. drivecleaner is still there though, and looking at the sticky don't think I'm techie enough to follow. What exactly is this drivecleaner, and where is it likely to have come from?

Browntoa

it's a false bit of software that "finds" faults and then gets you to buy the software to fix it (the faults don't exist !!) installed via possibly a pop up, maybe via filesharing networks

you have Spybot, so click on it and make sure you do all the updates and then download this as well

http://www.ewido.net/en/download/



then boot into safe mode as it tells you below

http://www.pchell.com/support/safemode.shtml

and run both in safe mode and let them delete all they find and then reboot

andyrules

browntoa, I've downloaded the avg and rebooted in safemode but cant open the avg or spybot. should I have run these before going into safemode? You must think I'm a real thickie! obviously i'm out of safemode now!