MacroVirus also called Macro Virus malware is a program designed to deceive its victims with fake alerts and warning messages that will arise on every part of the computer – desktop, taskbar, and boot-up even displays a wallpaper. MacroVirus will disguise as real anti-virus software trying to win users trust by advises given to remove threats. Unknown to user, these prompts may only lead them to an online payment processing websites where a purchase of MacroVirus rogue program will take place. Using Credit card or any other online payment option will be force as the only given solution to clean computers from threats and viruses.
By giving your credit card account, there is no guarantee that computer will be free from any threats. Moreover, attacker may record your account and use it illegally. Some victims also suffered from identity theft after giving full information to this fraud web site. Never use your credit card or any online payment account with unsafe online deals.
This tactics have been around for quite some time so wise users can easily identify that this activities were fraudulent and coming from a cyber-criminals that wanted to earn profit with ease. MacroVirus must not be purchase. A presence of it should be removed as soon as possible with real anti-malware programs. You can download tools from the Internet free of charge.
What are the Symptoms of MacroVirus Infection?
It will modify Windows Registry and add the following entries:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run “MacroVirus”
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Uninstall\MacroVirus_is1
- HKEY_CURRENT_USER\Software\MacroVirus\MacroVirus\RegInfo
- HKEY_CURRENT_USER\Software\MacroVirus\MacroVirus\Settings
- HKEY_CURRENT_USER\Software\MacroVirus
- HKEY_CURRENT_USER\Software\MacroVirus\MacroVirus
Macro Virus threat will drop the following malicious files:
- %ProgramFiles%\MacroVirus\bz2.pyd
- %ProgramFiles%\MacroVirus\Launcher.exe
- %ProgramFiles%\MacroVirus\MacroVirus.exe
- %ProgramFiles%\MacroVirus\MacroVirus.url
- %ProgramFiles%\MacroVirus\mav.db
- %ProgramFiles%\MacroVirus\mav.db.version
- %ProgramFiles%\MacroVirus\mavapi.pyd
- %ProgramFiles%\MacroVirus\msvcp71.dll
- %ProgramFiles%\MacroVirus\msvcr71.dll
- %ProgramFiles%\MacroVirus\python24.dll
%ProgramFiles%\MacroVirus\python24.zip - %ProgramFiles%\MacroVirus\sqlite3.dll
- %ProgramFiles%\MacroVirus\unicodedata.pyd
- %ProgramFiles%\MacroVirus\unins000.dat
- %ProgramFiles%\MacroVirus\unins000.exe
- %ProgramFiles%\MacroVirus\zlib.pyd
- %ProgramFiles%\MacroVirus\_sqlite.pyd
- %ProgramFiles%\MacroVirus\_tst.pyd
- %AppData%\MacroVirus\Settings\CustomScan.stg
- %AppData%\MacroVirus\Settings\IgnoreList.stg
- %AppData%\MacroVirus\Settings\ScanInfo.stg
- %AppData%\MacroVirus\Settings\SelectedFolders.stg
- %AppData%\MacroVirus\Settings\Settings.stg
- %CommonPrograms%\MacroVirus\MacroVirus on the Web.lnk
- %CommonPrograms%\MacroVirus\MacroVirus.lnk
- %CommonPrograms%\MacroVirus\Uninstall MacroVirus.lnk
- %DesktopDir%\MacroVirus.lnk
- %Windir%\Tasks\MacroVirus Scheduled Scan.job
How to Remove MacroVirus Manually
1. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode
2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
– Click Start > Run
– Type in the field, regedit
– Navigate and look for the registry entries mentioned above and delete if necessary
3. Delete malicious files that the threat added:
– Base on the given location above, browse and delete the file
– If no location is given, click Start>Search> and search for the files.
– If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.
4. Scan computer with Antivirus Program
– Update antivirus program
– Scan computer and delete all detected threats.
How to Easily Remove MacroVirus
1. Download and run removal tool from this link to remove the computer threat.
