Help...Trying to remove system too 2011 and my task manager is not coming up with oHaKo00902.exe. Is there another one I should be looking for?

The process that is known by the name "oHaKo00902.exe" in the removal process is just a placeholder, I believe. The process is a random string of 10 to 12 numbers and letters. Am I right, techs?

Thank you,I'll try it.

YOU ARE THE **** MAN!

Thank you
This S#$@ kind of freaked me out

This really worked for me-- the random code of 10 was hard to find, and in the end I felt like a cia agent or something knocking it out.

Right now Im still in step 3. TCF knocked out the extra stuff, but first with Malware and now with AVG I still haven't found the bug.

After reading through here, thats means I'm ok from I can guess? Is it possible that TCF just knocked it out?

Odd all I had to do was restart Windows, Go into safe mode and perform a system restore.

I checked my system and found no lingering rogue files from the virus.

ThomasEnwood wrote:This really worked for me-- the random code of 10 was hard to find, and in the end I felt like a cia agent or something knocking it out.

Right now Im still in step 3. TCF knocked out the extra stuff, but first with Malware and now with AVG I still haven't found the bug.

After reading through here, thats means I'm ok from I can guess? Is it possible that TCF just knocked it out?

Oh. Well, apparently my malware was out of date. I'm clean now after two final sweeps. It found it and destroyed it. Again, thanks so much!!!

I'm so glad I found this help. I lucked out and was able to get into Task Manager after 5 tries and stop the process. The file was named oiIoHin5200.exe. I found it close to the top of the processes window, if that helps. However, when I tried to download TFC, my AV software gave me all kinds of warning screens. I was a little leery of downloading it, so I went to the Malwarebytes site and found they had a similar removal technique using just their software. I followed their process and it found the malware file and was able to delete. While waiting for Malwarebytes to finish, I checked on my other computer and found out that getting the AV Warning screen happens quite often because OldTimer is always updating TFC. So, I downloaded it after all. When Malwarebytes completed, I opted not to reboot at that time and ran TFC, then rebooted after that completed. My system is working great now. Thank you so much for getting me on the right track.

rubixcube32 wrote:It took me a couple of tries to find the process and shut it off before it activated. However, the random process name you described was not the one I found. I am assuming that the random process name has or can change. Mine was something like "pkni06301.exe" (I might be missing a digit in there). It was the one process that didn't seem familiar to me. Once I end that process, the rougue software did not activate and I was able to do the TFC scan and then run Malware-Bytes. So, thanks. And for anyone that is having trouble, from my experience, the random process name could change.

For those of us that do not know which process' should be running on our pc's can you give me either a site that I can go to for a list of the ones for windows seven or give me a list of them?

KHarris wrote: For those of us that do not know which process' should be running on our pc's can you give me either a site that I can go to for a list of the ones for windows seven or give me a list of them?

I'm not Joe Techie, and I had the same question. It looked to me that most of the regular processes were almost always all alpha characters and they had logical names that I could read. What I noticed about all of the "bad processes" names are that they all have 3-4 numeric characters before the ".exe" extension, and the rest of the 6-8 characters are really random, upper/lower case, nonsense. I also found the process appear close to the top of the process list, so you might want to look there. I think the worst that can happen if you choose the wrong one is that you might have to do a power off reboot. You're only temporarily stopping a process, not permanently deleting it from the system. The process you chose in error should restart upon a reboot. Someone with more technical expertise may want to validate my hypothesis. Good luck... this does work.

I registered on this forum only to say that i saved my comp from that S#$@ system tool by using their instructions! I want to say THANK YOU!!!!!!!!

I didnt realize this was a scam until after I supposedly paid 19.95 then come to find a charge of 99.00 from this company called Marketing Soft Solutions, can you tell me what I need to do? I also need to follow the directions of removing this as well, correct?

Yes you need to begin the removal process in order to rid your machine of the rogue antivirus.
You need to also take care of the bogus charges on your bank card, dispute the charges. Call your bank ASAP you could also ask them to change your credit card/bank card number, you may already be at risk for having this information stolen and more bogus charges pending.

To Report CyberCrime

The Federal Trade Commision:
http://www.ftc.gov/bcp/index.shtml

Internet Crime Complaint Center:
http://www.ic3.gov/default.aspx

FBI - Cyber Crime:
http://www.fbi.gov/about-us/investigate/cyber/cyber

Interpol:
http://www.interpol.int/Public/contact.asp

Thanks!!

are the programs compatable with avg antivirus? the malware and TFC

i am on safe mode with netoworking trying to take off system tool, i got a fake email claiming a fedex "parcel" is going to arrive at my address in 7 days, it also came with a read me and i have yahoo so it scans the attachment before the download and thats how i got it. i have norton and i have done a full scan and i have deleted all the found threats and system tool is still there. also system tool is not in my programs list, it just comes up when i start my computer. and is malware-bytes free or does it just scan and you have to purchase it after. i have seen many other websites with similar steps like these but all the different malware removal programs require a purchase. please help(: soon