Rename EXE Files to Unblock Security Programs

This post was written by admin on April 20, 2009
Posted Under: Free PC Security

If you have a malware problem read this article updated 29 July 2009:
System Security and other Malware Removal

Malware is becoming much more intelligent in the way that it infects users computers. In many cases new rogue programs are downloaded and the Hosts File is hijacked, preventing security programs from running or updating.

Many users then believe that they are infected with the Conficker worm or variants of it. This is not the case.

There are ways to deal with this new threat.

Rename the ‘exe’ files for the security programs. Simply open your Programs Folder, find the application folder, open it and rename the program itself.

For example: Superantispyware -- Right click and select Rename and change the name to something that you will remember. I have made a video tutorial showing how to do this.

The path to rename the files is: Open My Computer then double click the C: drive.

C: > Program Files > SUPERantispyware, open the folder and rename the EXE files ONLY.

C: > Program Files > Malwarebytes Anti-Malware, open the folder and rename the EXE files.

Also clean your Hosts File, download HostsXpert or HostsMan and follow the steps in the video to clean your Hosts and remove all entries to leave a clean Hosts File. Please reboot your PC after this step.

Another useful program which will clean your Hosts and also clean an infected system is Norman Malware Cleaner. This program will kill running processes that are infected, remove infections from disk, reveal and remove rootkits, restore correct registry values, remove references created by malware in hosts file and remove windows firewall rules for malicious programs.

When using Hosts programs it is essential to disable the DNS Client, simply open Admin Tools and open Services. Scroll down to DNS Client and click to highlight, in the left pane Stop the service, and then right click the DNS Client and select ‘Properties’, it is usually set to ‘Automatic’, change this to either ‘Manual’ or ‘Disabled’, click OK and exit Services.

In many cases your security programs will be able to then connect and update.

Once the malware has been removed, if using Spybot or any other Hosts blocking program you will need to immunize again or import Hosts from hpHosts or MVPS

If there is still a problem I have uploaded Superantispyware and Malwarebytes Anti-Malware and the definitions file for each which I will update as often as I can.

SUPERantispyware installer has been renamed fpcs1 and the updated definition files are named fpcs1updates.

Malwarbytes Anti-Malware installer has been renamed fpcs2 and the updated definiton files are named fpcs2updates.

The links are below and the links to SUPERantispyware and Malwarebytes are LIVE download links and are clean from malware or viruses. as are the updated definitions.

HostsXpert
HostsMan
Norman Malware Cleaner

fpcs1 -- Live link for SUPERantispyware Version 4.33.0.10000
fpcs1updates -- Live link for SUPERantispyware definitions
Last updated January 16, 2010 - Database Version 4481.0.0.2299

fpcs2 - Live link for Malwarebytes Anti-Malware Version 1.44
fpcs2updates - Live link for Malwarebytes Anti-Malware definitions
Last updated January 16, 2010 - Definitions Version 1.3181.0.0

XP users copy file to C:/Documents and Settings/All Users/Application Data/Malwarebytes/Malwarebytes’ Anti-Malware

Vista users copy file to C:/Users/All Users/Malwarebytes/Malwarebytes’ Anti-Malware

Windows 7 users copy file to C:/Program Data/Malwarebytes/Malwarebytes’ Anti-Malware