BLARGH! My computer has picked up the Rocket Search virus and NOTHING I do will get rid of it! Not Malwarebytes, Not ADWCleaner (which was the recommended program) and not Microsoft Security Essentials! Help! GGAAAGGHHH!!!!
Damn. I'm sorry man. hopefully a passing paizonian will be able to help!
Follow at least the first 5 steps here.
Might help. I'm by no means a malware removal expert, but in my experience, you need to nuke these things, and doing all of this is definitely the nuke option.
what is the rocket search virus (and no, I don't WANT the Rocket search virus, just wondering what it is).
It's not really a virus: it's a search engine thief - forces your browsers to use "Rocket Search" as the default search engine, and also modifies a bunch of shortcuts on your computer so that they trigger search hits, throws ads at you, a bunch of other stuff. It's not particularly nasty in and of itself (won't crash your compy or delete files, or hold your compy hostage), just an absolute beast to get rid of.
Follow at least the first 5 steps here.
Might help. I'm by no means a malware removal expert, but in my experience, you need to nuke these things, and doing all of this is definitely the nuke option.
I've performed these steps twice already. It's still there. I'm so angry I'm getting sick, but that won't help because my toilet is leaking. Also, my Pathfinder shelf collapsed, spilling books everywhere.
Today is not a good day.
|
Cal, have you tried Spybot 2?
Also, are you running these things in safe mode with networking or letting it full boot?
Couple of other tips - you may be able to temporarily disable this crap
- MSCONFIG (in your search)
- Disable anything suspicious in: Services, Startup and Tools
- Reboot in safe mode then try running Spybot 2, Malewarebytes, etc.
Next step would be finding it in the registry and surgically removing it, that's tough but you can disable it if you know what to look for.
It also helps if you have a second pc or laptop so you can dl any apps needed to remove this garbage.
Auxmaulos,
Thanks for the new info. I'll certainly give this stuff a try. I've been running the programs in full boot, by the way.
|
|
Auxmaulos,
Thanks for the new info. I'll certainly give this stuff a try. I've been running the programs in full boot, by the way.
Yeah, you need to get things working in safe mode/minimal load out. It still won't stop this crapware entirely - but it will slow it down (and may prevent it from re-installing itself 500 times).
Let me know how this goes.
Also, what browser are you using (FF, IE, Chrome, etc) - you may be able to disable/neuter most of the negative effects while you get the system cleaned - depending on the browser.
I'm using Chrome, which is the browser it seems to have attacked itself to. So far it hasn't shown up when I open IE.
No. It'll show up that it's been removed there, but when I reopen the browser, boom! There it is. It doesn't show up in virus scans and removal apps anymore, either. But it always appears when I open up Chrome.
|
|
No. It'll show up that it's been removed there, but when I reopen the browser, boom! There it is. It doesn't show up in virus scans and removal apps anymore, either. But it always appears when I open up Chrome.
More than likely, even if you uninstall chrome it may be there on a reinstall.
You could try to backup your favorites - uninstall chrome and maybe use something like crap cleaner or if you can find something better to remove traces of the chrome install from the registry to get a GOOD CLEAN INSTALL OF CHROME. Then reinstall chrome and port over your favorites.
Link for full Chrome removal - manual
Follow all the steps carefully AFTER YOU HAVE ALREADY BACKED UP YOUR FAVORITES AND UNINSTALLED CHROME. The link above is to get rid of traces of Chrome after you have removed it in a conventional way (add/remove programs, uninstall, etc).
I think a full manual removal of chrome might be better than using some software to get rid of it (which always never seems to do the job right).
Most of the above can done by using the Regedit in the search window (when you open Start). Backup or export all your favorites first - and make note of any add-ons, so you can re-download them after you get a clean install of the browser.
These things are really ugly and should be illegal - I put this stuff on par with viruses. I consider it a personal crusade to destroy this kind of malware.
If you want to be a little lazy, you can back up chrome, uninstall it, then try reinstalling it to see if it shows up again (skipping the registry removal steps). The problem with crapware like this is that it tends to make copies of itself in temp folders and folders associated with software that ARE NOT REMOVED after a normal uninstall - so a good clean install is always recommended - but, you might get lucky with an uninstall/reinstall.
Thanks! I'll give it a shot later today when I have time. I'm about to leave to pick someone up at the airport and then I have to prep for tonight's game.
I had to remove this from a user's machine just the other day. Un/reinstalling Chrome and running MWB did nothing, but going into Chrome's extensions and deleting the add-in there after purging the pages to open On Startup seemed to help.
Hmm...I'll try that.
i saved all the files separately from the computer and readjusted the computer to Factory settings
Care to share how someone might invoke this process, and for what operating system you're talking about?
While I'm not aware of any way to "reset" Windows (save by doing a reinstall/reimage or a system restore to a specific point), most web browsers do contain such a function. I've found that if I uninstall WSA Rocket from Control Panel-> Programs & Features, and then reset all of the installed browsers that this does the trick.
IE: Internet Options-> Advanced-> click the "Reset..." button at the bottom.
Chrome: Settings-> Show Advanced Settings-> click "Reset browser settings" at the bottom of the page.
FireFox: Help-> Troubleshooting Information-> click "Reset FireFox"
| 1 person marked this as a favorite. |
i saved all the files separately from the computer and readjusted the computer to Factory settingsCare to share how someone might invoke this process, and for what operating system you're talking about?
While I'm not aware of any way to "reset" Windows (save by doing a reinstall/reimage or a system restore to a specific point), most web browsers do contain such a function. I've found that if I uninstall WSA Rocket from Control Panel-> Programs & Features, and then reset all of the installed browsers that this does the trick.
IE: Internet Options-> Advanced-> click the "Reset..." button at the bottom.
Chrome: Settings-> Show Advanced Settings-> click "Reset browser settings" at the bottom of the page.
FireFox: Help-> Troubleshooting Information-> click "Reset FireFox"
Well, I've given it a shot. It's worked so far. I'm cautiously optimistic! Thanks!
Good grief...that sucks.