Can't Remove This Program

[applesseed]

Unbeknownst to my parent that it's a spyware, now I can't even remove it. If I go to the Add/Remove Program and select the program to remove, this is what you'll see:

GPCasino.JPG

Where's the fvck is the Continue button? I tried clicking on the Continue link - it's not clickable. No where is clickable except the minimize button and the close button.

I get the same screen when I go under Start > Programs > select Golden Palace Casino > Uninstall


I ran the latest update...

Spyware Blaster 3.3
Spybot Search & Destroy 1.3
Ad-aware SE Personal

I also followed the removal instructions from Symantec and McAfee web sites. They all don't work.


Last but not least I went into Safe Mode and tried removing the program as well - can't do.

However, when I point to Start > Programs > Golden Palace Casino executible, it says that it's nowhere to be found. Now I thought that once you remove something, even the icons disappear? I'm tempted to delete the folder in the Start menu but how about the list in the Add/Remove?

Please advise. Thanks!

 

[rise]

bump for ya

just a shot, but can you find the folder and delete it and then run ccleaner?

 

[mechBgon]

1) install Microsoft AntiSpyware Beta, update it, and run an exhaustive scan with it. While it's doing that...

2) ...prepare to follow the instructions in this text file. Also download a 30-day trial of Kaspersky Antivirus Personal 5 and WinSockFix.

3) after your AntiSpyware Beta scan, make sure it marks Remove for all the stuff it found, and have it remove it.

4) disable System Restore.

5) Reboot into Safe Mode. Open Task Manager and try to kill off every running process except Explorer.exe. Now run the McAfee command-line scanner as directed, in Safe Mode.

6) Reboot into Normal Mode, uninstall their old antivirus software, install Kaspersky's trialware, go to its Settings tab, and set the real-time and on-access scanners to Maximum. Also click Configure Updater and set it to "From Internet, extended databases," then right-click the tray icon and run an update.

7) Reboot into Safe Mode again and have Kaspersky hammer out a scan.

8) Notice that in McAfee's description, this thing lives in C:\Casino and it makes a file called C:\Setup.exe. Find each of these while in Safe Mode, right-click them, go to the Security tab, and remove all permissions to them, period. If the file and the folder don't exist, create them and then deny all permissions (you can make a New Text Document.txt and rename it to Setup.exe to create this little obstacle :evil: ). Unable to enter the directory or make a file named Setup.exe will help thwart the return of the badware. Don't let antispyware apps delete these dummy items.


Let us know how it turns out If tearing out the malware results in loss of browsing, run WinSockFix.