How to remove the Safety Center Virus on Windows Vista when desot.exe kills Malwarebytes each time I run it?

Question

I have Windows Vista and the Safety Center Virus. I have downloaded the Malwarebytes' Anti-Malware. Each time I click on the executable icon, the virus kills the process by invoking something called desot.exe, which kills the process (under explorer.exe in Process Explorer).

desot.exe then disappears so I cannot kill it. The virus also prevents me from running Firefox (my default browser) but not IE. However, I can kill a couple processes in Process Explorer called new.exe and Monitor.exe, and it allows me to start Firefox.

Answer 1

you can delete safety center fraud manually, here's removal instructions: http://www.spywarevoid.com/remove-safety-center-safetycenter-removal-help.html

simply follow the tutorial step by step

Answer 2

You can run antivirus and antispyware programs, but the sad fact is if you have found one virus on your computer, you probably have several. Cleaning the computer now requires you to follow these steps, because modern viruses and spyware entrench themselves in files that your computer needs in order to run:



1. Virus-check your data files (not application files-- you have installer CDs for those).

2. Back up the data files, getting them off your hard drive.

3. Get your original operating system CDs that came with your computer.

4. Boot your computer from the operating system CD.

5. Select the option that erases your hard drive and then reinstall your system software.

6. Turn on your software firewall that came with your operating system.

7. Reconnect to the internet, and download *all* Windows updates, no matter how long it takes.

8. Reinstall your application software, and update the applications as much as you can.

9. Reinstall your data files.

10. Create a limited user account on your system that does *not* have administrator access, and web surf only from this account.



Yes, this is a pain in the butt. No, there is no other way. No, antivirus and antispyware programs cannot fix this problem on its own.



So, what do you do in the future?



1. Never click on links you find in an e-mail.

2. Never open an e-mail attachment, ever.

3. Only download files from a reputable website that you know is on the up-and-up.

4. Never use bit-torrent and other file-sharing programs.

5. Never use an unsolicited drive-checking site.

6. Turn off all java and java scripting by default, and only enable java and java scripting for sites that you know you can trust.

7. Never read an unsolicited e-mail, and delete spam immediately. It is possible to be hacked by reading an e-mail alone.



Please adhere to the 'dont's' I provided above, because you will have to repeat the cleaning steps that I listed first *every time you get infected.* Anti-spyware and anti-virus programs are good to have, but they are a second line of defense. The best way to protect your system is you, and changing your behavior.



Good luck!

Answer 3

This sounds like a job for combo fix.





http://www.bleepingcomputer.com/combofix/how-to-use-combofix



new.exe



This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.



If the description states that it is a piece of malware, you should immediately run an antivirus and antispyware program. If that does not help, feel free to ask us for assistance in the forums.

Click here to Run a scan for related errors



Name: Microsoft Internet

Filename: new.exe

Fix new.exe errors:

Try a Registry Scan

Command: C:\Windows\new.exe



Description: Added by the Troj/Banker-DSL Trojan.

File Location: %WinDir%



Startup Type: This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.

Answer 4

You are infected with spyware if:



* You see too much pop-up advertisements.

* Your browser has toolbars that you haven't installed.

* Your homepage has changed (and you can't change it back).

* Other settings have changed without your permission.

* Your computer is slow.



To get rid of spyware and keep your computer clean you can use an antispyware or even more.

You can download a antispyware software. There are 10 good anti-spywares.

here is the reviews: http://top5antispywarereviews.com/



You can download one and scan your system.

All are safe and can be trusted.

Answer 5

There are other good removers than Malwarebytes.

Try super antispyware or SpywareDoctor

or you can try manual instructions.

Guide and easy tutorial here: http://www.2-viruses.com/remove-safety-center

Answer 6

Try this link..



http://www.spywareremovalblog.com/threat-explorer/remove-safety-center-virus/

Answer 7

Run a scan (preferably AVG, since its free)...You'll never be able to get rid of a virus by closing/deleting the .exe