Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

PC Tech Hotline: can't uninstall


  • This topic is locked This topic is locked
2 replies to this topic

#1 physicsdude

physicsdude

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:01 PM

Posted 22 March 2014 - 01:28 PM

Hi. I have PC Tech Hotline and PC Speed Fix on my computer. I have already ran AdwClean several times, disabled the programs on startup, and disabled the services. This has stopped some of the irritation. I have not done anything at this point to disable anything the software may have done to my browsers.

 

The programs do not show up in the add-remove utility. Revo doesn't find them, and in hunter mode it says that it can't do anything because there is no installation package associated with them.

 

Note that most the files in "" date from feb 12, 2014, and some are from Mar. 19m 2014. I didn't notice the software's effects until last night or so.

 

I have run FRST to scan my computer a few times (couldn't figure out what was going on the first couple of times), and have both a FRST.txt file and an Addition.txt file.

 

Within the 'Addition.txt' file are the lines:

 

PC Fix Speed 1.2.0.42 (x32 Version: 1.2.0.42 - Crawler, LLC) Hidden
PC Tech Hotline (x32 Version: 3.0.0.4 - Crawler, LLC) Hidden

 

In the FRST file there is the line (under services whitelisted)

 

S4 PCTechHotlineSvc; C:\Program Files (x86)\PCTechHotline\PCTechHotlineSvc.exe [701800 2014-02-13] (Crawler, LLC)

 

These lines all appear sequentially under "one month created files and folders":
 

2014-03-19 17:00 - 2014-03-19 17:00 - 00000000 ____D () C:\Users\Mattadmin\AppData\Roaming\PC Tech Hotline
2014-03-19 16:59 - 2014-03-19 16:59 - 00001063 _____ () C:\Users\Public\Desktop\PC Tech Hotline.lnk
2014-03-19 16:59 - 2014-03-19 16:59 - 00000959 _____ () C:\Users\Public\Desktop\Optimize Your PC.lnk
2014-03-19 16:59 - 2014-03-19 16:59 - 00000000 ____D () C:\Program Files (x86)\PCTechHotline
2014-03-19 06:07 - 2014-03-19 06:09 - 00000000 ____D () C:\Users\Lindaw W Wiser Mommy\AppData\Local\{A0D30268-4E26-468A-9E6A-9A2A25D4732A}
2014-03-18 17:13 - 2014-03-18 17:13 - 00000000 ____D () C:\Users\Lindaw W Wiser Mommy\AppData\Local\{4CD43D82-AEDF-4544-93CC-A3033EA72D22}

 

This appears in the list of "one month modified files and folders"2014-03-19 16:59 - 2014-03-19 16:59 - 00001063 _____ () C:\Users\Public\Desktop\PC Tech Hotline.lnk
2014-03-19 16:59 - 2014-03-19 16:59 - 00000959 _____ () C:\Users\Public\Desktop\Optimize Your PC.lnk
2014-03-19 16:59 - 2014-03-19 16:59 - 00000000 ____D () C:\Program Files (x86)\PCTechHotline

Please help.

 

I have not attached files yet because I think I read somewhere that you prefer people to wait to do so until asked.

 

thanks

Matt Brown


 

 



BC AdBot (Login to Remove)

 


#2 Noviciate

Noviciate

  • Malware Response Team
  • 5,277 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Numpty HQ
  • Local time:05:01 AM

Posted 22 March 2014 - 03:20 PM

Good evening. :)

Please go here, follow step six, and then post accordingly into this thread.


So long, and thanks for all the fish.

 

 


#3 Noviciate

Noviciate

  • Malware Response Team
  • 5,277 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Numpty HQ
  • Local time:05:01 AM

Posted 27 March 2014 - 02:15 PM

Helpers are limited in the number of logs they can take by the time they have available and having threads sit idle means that somebody else who could be being helped has to wait.
Given that there has been no response for at least five days, and I have no way of knowing when there will be one, this thread is now closed.

 


So long, and thanks for all the fish.

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users