How do I remove Win32.Renos for good?

Question

It started as accidentally installing an Adobe Flash HD upgrade that was just ANTIVIRUSXP2008 in disguise, and Spybot and Windows Defender were able to take care of that

However, there's still one program called "Win32/Renos" that will not go away, it keeps disabling my screensaver and wallpaper and sets my clock for military time and redirects my google searches.

Windows Defender keeps saying it's detected then it's successfully removed then when I restart per request of Windows Defender I'm back to square one. It's like Win32/Renos keeps rebuilding, which is probably why they cal, it malware but whatever.

Any real solutions?

Answer 1

Maybe this:

http://www.symantec.com/norton/security_...

d;o)

Answer 2

The easiest way to fix it is using Malwarebyte's Anti-Malware (Download it, update it, do a full scan, and remove everything it finds).

I would also recommend the following programs to make sure that you don't get infected again in the future:

Spybot - Search & Destroy

Avira AntiVir Personal

Spyware Doctor Starter Edition

Answer 3

Windows utilize a restore utility that backs up selected files

automatically to the System volume information /System Restore folder.

This means that an infected file could be stored there as a backup file,

and most anti-virus programs will be unable to delete these files. You

must disable the System Restore Utility to remove the infected files

from the folder if you use another brand of anti-virus.

I would suggest that you get Avast Home Edition version 4,

which is free for personal use.

Avast is a very effective and free anti-virus program because it can do

a boot time scan in safe mode and it will remove the virus on your PC.

Even those viruses that hide inside the system restore folder.

After Avast get rid of the virus, you must enable the advance feature of spybot search and destroy.

Spybot host file locking is a tool which locks the hosts file to prevent unauthorized changes.

Locking the hosts file will prevent most hosts hijackers (even unknown) from doing harm;

Locking the IE settings will prevent other users of your computer to change your preferences.

Hijackers is the reason why you get redirected to other web pages.

Spybot also modifies Internet Explorer to block a lot of the bad stuff known to Spybot.

There is a second layer of protection for IE that blocks anything that should come through by different aspects.

Spybot Resident a tool which check permanently running application to protect your system.

Spybot Resident TeaTimer is a tool which perpetually monitors the processes called/initiated and immediately detects known malicious processes.

It giving you some options how to deal with this process in the future:

You can set TeaTimer to be informed when the process tries to start again automatically kill the process or generally allow the process to run

There is also an option to delete the file associated with this process.

In addition, TeaTimer detects, when something wants to change some critical registry keys. TeaTimer can protect you against such changes again giving you an option: You can either Allow or Deny the change.