1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

[Solved] Guruaid

Discussion in 'Windows 7' started by madgewildfire, Jul 27, 2015.

  1. madgewildfire

    madgewildfire Registered Members

    Joined:
    Apr 17, 2010
    Messages:
    20
    Location:
    UK
    Operating System:
    Windows Vista Enterprise
    I have a laptop and a desktop ( both Windows 7) and early this month after downloading Windows updates I found that if I used OneDrive on my desktop the work wasn't updating on OneDrive on my laptop. I contacted a number that was on Google which gave the impression it was Microsoft Support. It wasn't, it was a company called Guruaid. They did fix the problem but it took a mighty long time. I discovered after that there is now an icon for something called WYVAL and it is listed on my start menu and on my hard disc. What is this and how can I get rid of it?
    I am a bit paranoid re my computers so, I have changed all my banking passwords etc.
    Is Guruaid a bonafide company. It has some good reviews but it also has some really bad ones.
     
  2. allheart55 (Cindy E)

    allheart55 (Cindy E) Administrator Administrator

    Joined:
    Jun 11, 2009
    Messages:
    10,414
    Location:
    Pennsylvania
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    ASUS M4A77TD AM3 AMD 770 ATX AMD
    CPU:
    AMD Phenom II X6 1090T-Thuban 3.2GHz
    Memory:
    Crucial-DDR3 SDRAM 1333-8GB
    Hard Drive:
    WD Caviar Black SE HDD 640 GB - WD Caviar Black SE HDD 500 GB
    Graphics Card:
    Sapphire Radeon HD-7870 2GB
    Power Supply:
    CORSAIR CMPSU-750W
    I can't even access the Guruaid web site. Eset Nod 32 is blocking it as unsafe.

    Seeing as how they connected with you remotely, did they ask your permission and did they charge you a fee?
     
  3. madgewildfire

    madgewildfire Registered Members

    Joined:
    Apr 17, 2010
    Messages:
    20
    Location:
    UK
    Operating System:
    Windows Vista Enterprise
    Yes. They did ask my permission and they did charge a fee. I have got rid of WYVAL on my start menu by right clicking it but it is still sitting on my hard disc. When I first left clicked on it on the start menu it said it had expired but I would like to know what it is. The computer is working okay and I have done scans with Malwarebytes and Kaspersky Internet Security and they have found no threats. I have never before given anyone control of my computer but I did at first think this was Microsoft support.
     
  4. DSTM (Dougie)

    DSTM (Dougie) Registered Members

    Joined:
    May 3, 2009
    Messages:
    8,270
    Location:
    SYDNEY AUSTRALIA
    Operating System:
    Windows 7
    Hi Madge
    I suggest you seek the help of our Malware Specialist to get rid of Guruaid completely.
    This is the prep guide for malware removal for you to follow. Looks complicated but simple really.
    I have emailed our Malware specialist for you. His name is Starbuck.

    http://computerhelpforums.com/threa...-help-winxp-vista-win7-win8-and-win8-1.41927/

    This is what I have read about Guruaid.

    "GuruAid.com is a determined as a tricky browser hijacker which can hijack a targeted web browser and redirect it to unwanted and advertising websites. Although GuruAid.com looks like a normal search engine site, GuruAid.com search results typically are irrelevant, malicious or are sorted according to profitability for GuruAid.com’s maintainers. Once activated, GuruAid.com is able to modify your web browser settings, block the Internet connection, change your homepage and redirect to sites like GuruAid.com."
     
    Last edited: Jul 28, 2015
  5. IceMan37

    IceMan37 Banned

    Joined:
    Apr 24, 2014
    Messages:
    1,079
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    MSI Z87M-G43
    CPU:
    I5 4690k @ 4.6
    Memory:
    16GB Hyper X 1866
    Hard Drive:
    1TB WD_Blue | 240Gb Sandosk SSD
    Graphics Card:
    eVGA GTX 970 FTW
    Power Supply:
    750W Tt
    If he can't get to you let me know I will help you.
     
  6. DSTM (Dougie)

    DSTM (Dougie) Registered Members

    Joined:
    May 3, 2009
    Messages:
    8,270
    Location:
    SYDNEY AUSTRALIA
    Operating System:
    Windows 7
    Hi Madge.
    Been in touch with Starbuck and he said by the time you post the set of FRST reports he will be available to assist you.
    Thanks for your offer to help, ChronoGeek.:)
     
  7. madgewildfire

    madgewildfire Registered Members

    Joined:
    Apr 17, 2010
    Messages:
    20
    Location:
    UK
    Operating System:
    Windows Vista Enterprise
    Oh my goodness! I am a technophobe and 80 years old so all this about FRST seems very complicated to me. It says to install Malwarebytes but I already have that on my computer and have run a scan which said there were 5 threats which I clicked for it to quarantine. I also ran a Kasperski scan which said there were no threats. As I have a laptop, a desktop; both Windows 7 and a Surface RT with with Windows 8, I am not using my laptop except to run the scans. I simply don't feel secure using it, although it seems to be working okay. I have changed all of my important passwords; especially banking etc but no longer use the laptop for any of that.
     
  8. starbuck

    starbuck Administrator - Malware Removal Specialist Administrator

    Joined:
    Sep 26, 2009
    Messages:
    3,825
    Location:
    Midlands, UK
    Operating System:
    Windows 10
    CPU:
    AMD Athlon II x2 250 Processor 3.00GHz
    Memory:
    8gb DDR3
    Hard Drive:
    500gb SATA
    Graphics Card:
    ASUS GeForce GTX 960 2gb
    Power Supply:
    650w PowerCool X-Viper
    Hi Madge.

    That's fine, don't worry about MBAM for now.
    We can check the quarantine folder later.

    For now all you need to run is the FRST program in step 2 here:
    http://www.computerhelpforums.com/t...-help-winxp-vista-win7-win8-and-win8-1.41927/

    It will produce 2 reports, please add both reports to a reply here if necessary..... I can move the posts to the correct forum for you.
     
  9. madgewildfire

    madgewildfire Registered Members

    Joined:
    Apr 17, 2010
    Messages:
    20
    Location:
    UK
    Operating System:
    Windows Vista Enterprise
    Thank you very much to Dougie and Starbucks. I have had a lucky break as my friend's son is an IT and he has made everything okay. Thanks again though.
     
  10. starbuck

    starbuck Administrator - Malware Removal Specialist Administrator

    Joined:
    Sep 26, 2009
    Messages:
    3,825
    Location:
    Midlands, UK
    Operating System:
    Windows 10
    CPU:
    AMD Athlon II x2 250 Processor 3.00GHz
    Memory:
    8gb DDR3
    Hard Drive:
    500gb SATA
    Graphics Card:
    ASUS GeForce GTX 960 2gb
    Power Supply:
    650w PowerCool X-Viper
    Thanks for letting us know that the problem has been solved. :)
     

Share This Page