Removal of Matcash?

At work I am getting several hits an hour with VirusScan On-Access. I have been trying to remove this pest and can't find out how. I find many sites about it but have not found out how to remove it yet.

 

Hi Ron

You have been a member for a while.

So you may have already done this.

Update your virus scanner.

Download install but not run these if you don't already have them:

Best free cleaners:

DCleaner http://www.majorgeeks.com/DCleaner_d4790.html

ATF-Cleaner http://www.atribune.org/content/view/25/2/

CCleaner get the slim version http://www.ccleaner.com/download/builds.aspx

EasyCleaner http://personal.inet.fi/business/toniarts/files/EClea2_0.exe

Dcleaner and ATFClean are purely disk cleaners. CClean also has a registry cleaner (issues), run this also as many times as it takes to come up clean.

EasyClean does it all but stay away from Duplicate file cleaning (especially Windows OS files) unless you are sure of what you are doing.

http://www.xblock.com/download/xclean_micro.exe

The stand alone Mcafee virus cleaner
http://home.hccnet.nl/h.edskes/mirror.htm

If you do not have Adaware and Spybot then get them installed and updated.

After all above is installed and updated boot to safe mode.

Run all the cleaners first because there may be culprits in the temps. This includes the registry (Issues in CCleaner). Additionally when running other scans we will not be scanning possibly thousands of files and hundreds if not thousands of megs of unnessesary files.

Then run:
1. Xclean micro
2. Mcafee
3. SpyBot
4. Adaware
5.Your Virus scanner

Mike

 

Thanks Mike, I just got your message and I had found the culprit about 10 min before. It was this ad-ware program called p2pnetwork.exe. I found it running every time I would boot. So I found the file in /windows/system32 changed the name. Then rebooted and it was gone. It has been deleted since.
Thanks again and Happy New Year!

 

That program usually has other files which come bundled as a group. Depending on what you downloaded usually determines the payload. I'd be surprised if that was the only thing on the system.

Deleting temp files and folders will only get so much and usually not the bulk of whats lurking.

After running the Ad-Aware and Spybot scans, its prudent you run a HJT log file for total piece of mind.