Recently one of my PC has caught a nasty virus: the middle of the surf beat Antivir alert that a file in the folder "Temporary Internet Files (files that end up in the cache while browsing the PC) has the signature of a Virusses. Well, thought nothing of it (well done, Antivir) refuse access and can continue to surf finish, surf, and lo and behold ...

... My desktop was destroyed! Instead of my desktop picture I had a white background and in the middle of a reference (which was part of the bitmap, which had a surface made encouraging wide) that my computer is infected and that I should "Antivirus XP 2008" installed. And this starts from scratch, an installation dialog of this anti-virus 2008, which had only a single button: "Install now" (not even the x on the top right to close the window).

Ok, am not stupid, and hold the three most famous shot in the Task Manager button and the thing. So, now to my desktop: Right click on the surface for the display properties, and ... what is it? ... Because it was smooth the whole page 'Desktop' and 'screen saver' disappeared from the dialogue. Hmmm, that's crap!

So just google me, what is the point: Google has been remarkably slow, and some of the results from this site looked weird, then I had not even looked yet! In the bottom left corner of the browser was when Googling "wait-analytic checks.google.com" that stood there but not otherwise ..

So what do you do, clear, release the complete battery of anti-Destroy-thingy software that finds itself somewhere on my computer. Let's start with Spybot-Search & Destroy. Since I have not been used, first an update of the malware database seemed reasonable to use it - does not not connect to the server? The stupid virus blocked all calls to pages with anti-malware programs. Gradually it gets real bad ...

What has ultimately helped: some entries I removed by hand, sought to initially file with most recent file date and some of them and can identify and delete. Others could not be deleted because they were being used. Then, if suspicious processes in Task Manager stopped until they could be connected to delete, delete the views of these processes in the Registry.

Spybot-Search & Destroy succeeded then (after I had downloaded a new setup with another computer), get my desktop back in order, but not eliminate the Google hijacking. This became possible with Malwarebytes Anti Virus. Could happen, the whole apparently, I was probably accidentally while Rumkonfigurieren on my router for a certain period of time without a firewall. Well, now everything is back to palletized.

Maybe this experience will help you report if you are also caught. Detailed removal instructions found on the net enough, but I managed with any of them to eliminate everything, only the combination described here helped.

Interesting articles