**DO NOT CALL THE NUMBER**
Typically they call this program a "Drive By" program, in other words, you clicked on something you shouldn't have and it downloaded a PUP (Potentially Unwanted Program)...
Typically it masks itself with a program that says, "Your Drivers are out of Date" click here to update, or "Your System is infected" click here for a free scan...
It's completely innocent sometimes when people click on these windows, either thinking that if they click the "X" it will close, but instead installs or thinking that they're system is infected...
There is no close on a program like that, it's always open and install :-D...
First of all you need to see how badly you are infected so first check for two things:
1. Press Windows + E
1a. Now type %appdata% and let it search...if you find "event monitor" delete it.
2. Now Press Windows + R
2a. Now type Regedit and go to HKEY_CURRENT_USER_Wow6432Node and look for "Event Monitor...delete it...
Now if you have event monitor as deep as the registry we recommend reinstalling because it's too late at this point.
If you had a good malware program it would have stopped it from getting this far and the only program you would have needed is the Junkware Removal Tool from Malwarebytes...
It's free and easy to use, just download to desktop, run, hit enter and let it do its thing.
We now recommend using your CCleaner and doing a Cleaner and a Registry cleaner after Junkware finishes...
Kaspersky stopped this program from going too far into the computer so it was a real easy clean up for us...
We have told this user that we don't like being a reactive user anymore and that it's best to be a proactive user, that way you prevent silly things like this from happening...
We do recommend changing your passwords whenever your system gets compromised, NO EXCEPTIONS!!!
Make sure you aren't using the same password on all your sites...
Make sure you have a good Malware program on your system and at this point Kaspersky is still #1...
Webroot has clicked up a notch in Q2 results, but we aren't completely impressed with that and are starting to wonder what is going on over there...
Happy Computing...
No comments:
Post a Comment