One on One Computer Consultants
SysProtect, WinAntiVirus, WinFixer, DiskCleaner Removal

These programs are Spyware and sometimes referred to as "Scareware". Once a computer is “infected” the programs will generate pop-up windows or dialog boxes with exaggerated claims of viruses or spyware presence. The point of these fictitious messages is to persuade the user to go to software manufacturer’s web site and purchase a removal program.

A minor "infection" might be eliminated by running a simple removal tool like "VundoFix.exe" or "SysProtect Remover.exe". These tools and more helpful information are available at "http://www.atribune.org/".

For more serious infections, including "browser hijacking" (your Internet Home Page changes unexpectedly), you'll have to download the following tools and use the instructions below:

HiJackThis

KillBox

SpyCatcher - Express

Backup your data and create a System Restore point before deleting any files.

Install all 3 programs and restart your computer. "SpyCatcher - Express" will notify you when the culprit file attempts to change your Internet Home Page. Make a note of the file name. (Note: it will probably have a DLL extension).

Run the "HiJackThis" program and remove all references to that file name.

Do a search of your hard drive and make a note of the file location.

Run the "KillBox" program and use the "Standard File Kill" option to remove the culprit.

Restart you computer and run the "HiJackThis" program again to check for a return of the culprit.

If it has returned, you should restart your computer in "Safe Mode" and repeat the procedure.

<Back to One on One Home Page Page>