How to remove Rootkit.Boot.Pihar.C

by Andy Raff on December 27, 2012

Rootkit.Boot.Pihar.C Information
Rootkit.Boot.Pihar.C Description, Symptoms and Distribution Tactics

Manual Rootkit.Boot.Pihar.C Removal Steps

Automatic Rootkit.Boot.Pihar.C Help
Rootkit.Boot.Pihar.C Remover Live Help

Rootkit.Boot.Pihar.C Screenshot

Rootkit.Boot.Pihar.C Screenshot

Rootkit.Boot.Pihar.C Removal Steps

Follow steps closely:

Step 1: Write down our Support number and keep it in a safe place. This is just a precaution if you need help during one of the steps. We are here to help remove Rootkit.Boot.Pihar.C if you need it. Rootkit.Boot.Pihar.C Removal Hotline: 888.847.4130

Step 2: Completely turn off the Rootkit.Boot.Pihar.C infected computer.

Step 3: Before your turn the computer back on, please locate the F8 button on your keyboard. F8 is traditionally positioned on the top row of the keyboard. Be ready to tap F8 immediately on step 4.

F8

Step 4: Now power ON the computer and press F8 until the WINDOWS ADVANCED OPTIONS MENU appears.

Step 5: When the WINDOWS ADVANCED OPTIONS MENU shows up, click down the menu using the direction keys on the board and highlight SAFE MODE WITH NETWORKING. Press ENTER on the keyboard.

Safe

Step 6: After Step 5, the PC will start up in Safe Mode. Your icons and the display will appear abnormal. This is normal and not caused by the infection.

Automatic Rootkit.Boot.Pihar.C Help
Rootkit.Boot.Pihar.C Remover Live Help

Step 7: It is important to check if Rootkit.Boot.Pihar.C has altered your computer’s proxy settings. Infections like Rootkit.Boot.Pihar.C can modify your default browser settings. Move to the next step to check the settings.

Step 8: On the Keyboard press and hold the WINDOWS KEY.

Windows

Step 9: While holding down the WINDOWS key now press the R key. The RUN BOX will now appear.

Windows

Step 10: In the RUN BOX, enter iexplore.exe. Click OK.

Run

Step 11: Internet Explorer will now start. On the top navigation click TOOLS. Under the sub-menu of TOOLS click INTERNET OPTIONS.

Tools

Step 12: Select the CONNECTIONS tab in the INTERNET OPTIONS dialog box.

Internet

Step 13: Locate and click the LAN SETTINGS option.

Internet

Step 14: If there is a check-mark in the box named “Use a proxy server for your LAN”, under the PROXY SERVER section, then click to uncheck the box. If there is not a checkmark located in the box then you can move on to step 15.

Proxy

Need Help? Please call the Rootkit.Boot.Pihar.C Removal Hotline toll-free at 888.847.4130

Step 15: To close the LOCAL AREA NETWORK box click the OK button.

Step 16: Now Select the OK button to close the INTERNET OPTIONS box.

Step 17: We now need to run Rkill. Rkill is property of Bleepingcomputer.com. Rkill will try to disarm Rootkit.Boot.Pihar.C. Rootkit.Boot.Pihar.C is armed with the ability to block and stop any processes from running such as removal tools. We need to disarm and bypass this so we can continue with the steps. It is important to note that Rkill does not extract Rootkit.Boot.Pihar.C. It is equally important to note that should not reboot your computer after running Rkill. Rootkit.Boot.Pihar.C will simply restart if rebooted. We now need to bring up the RUN BOX. Hold down the WINDOWS key and press the R key.

Windows

Step 18: In the RUN BOX, type “iexplore.exe http://www.malwareexperts.com/rkill”. Then click OK.

Run

Step 19: The download security box with Rkill will appear, choose SAVE and select the desktop.

Run

Step 20: Once the Rkill download is complete, close out the DOWNLOAD COMPLETE box.

Step 21: Go to your DESKTOP and locate the Rkill.exe icon on your desktop.

Step 22: Double-click the Rkill icon and run Rkill.exe. Rkill will flash a black MS DOS box and attempt to paralyze Rootkit.Boot.Pihar.C.

Rkill

Step 23: Rkill will generate a Notepad file with information on what it found. You can close that log and go to the next step.

Step 24: Now the computer is prepared to install Malwarebytes. Malwarebytes is a very popular Malware removal application. To install Malwarebytes, we need to bring up the RUN BOX again.

Step 25: On the Keyboard press and hold the WINDOWS KEY and the R key simultaneously. The RUN BOX will appear again.

Windows

Step 26: In the RUN BOX type “iexplore http://www.malwareexperts.com/malware-remover/” and press OK.

Malwarebytes

Step 27: The download security box with Malwarebytes will appear. The options to RUN, SAVE or CANCEL will show. Select SAVE and then choose to save the file to the desktop.

Malwarebytes

Step 28: Go to your DESKTOP and locate the Malwarebytes icon on your desktop.

Step 29: Double-click the Malwarebytes icon.

Malwarebytes

Step 30: Select RUN on the Malwarebytes install box.

Malwarebytes

Step 31: After that, the SELECT SETUP LANGUAGE box will appear. Select your native language and press OK. English will be in used in the graphics example.

Malwarebytes

Step 32: The Malwarebytes SETUP WIZARD will show. Choose NEXT to continue.

Malwarebytes

Step 33: Next screen to show is the LICENSE AGREEMENT. Accept the agreement and choose NEXT.

Malwarebytes

Step 34: The BASIC INFORMATION screen is shown. Click NEXT.

Malwarebytes

Step 35: The SELECT DESTINATION LOCATION screen will appear. Choose the location you wish to have Malwarebytes install the required files. The default location shown is the normal, recommended location. Click NEXT.

Malwarebytes

Step 36: The next screen is just the SELECT START MENU FOLDER which tells the program where to place the shortcut to the application. Click NEXT.

Malwarebytes

Step 37: If you want a Desktop Icon and/or Quick Launch icon then opt-in to the corresponding check boxes on the SELECT ADDITIONAL TASKS box. Click NEXT.

Malwarebytes

Step 38: Now the READY TO INSTALL screen will show. Click INSTALL to start the installation process.

Malwarebytes

Step 39: The final screen with the pre-checked UPDATE and LAUNCH Malwarebytes will appear. Click FINISH.

Malwarebytes

Step 40: Malwarebytes will download the latest updates and show a success box. Click OK.

Step 41: The main interface of Malwarebytes with the Scanner tab will launch. Make sure PERFORM FULL SCAN is selected.

Malwarebytes

Step 42: Next step is to launch the full scan. Click SCAN to start the scan.

Malwarebytes

Step 43: A box will popup with the local drives, choose the local drives to scan and click SCAN.

Malwarebytes

Step 44: The scanner will begin. Be patient as the scan is very thorough searching for all the remnants of Rootkit.Boot.Pihar.C.

Step 45: Once the scan is finished, a message box saying the scan is complete will appear. Click OK to close the box.

Step 46: After closing the box, click SHOW RESULTS.

Malwarebytes

Step 47: Once the results show, select REMOVE SELECTED to remove all the Malware found by Malwarebytes including Rootkit.Boot.Pihar.C. Malwarebytes will also delete all of the files and registry keys affiliated with Rootkit.Boot.Pihar.C and add them to the quarantine.

Malwarebytes

Step 48: Malwarebytes may need to reboot the system to complete the removal of Rootkit.Boot.Pihar.C. Please allow the PC to reboot if Malwarebytes asks for it.

Step 49: After the reboot is complete and the system is relaunched, please follow the on-screen instructions and continue the removal process.

Step 50: A Notepad log will be created by Malwarebytes. Close the log once reviewed.

Malwarebytes

Step 51: Once Malwarebytes has completed the removal process and has removed all the traces of Rootkit.Boot.Pihar.C, your computer should be 100% clean from Rootkit.Boot.Pihar.C.

Next page:
CLICK HERE TO CONTINUE CLEAN-UP STEPS…

About the author

Starbucks Junkie, Malware Fighter. Find me via Contact Form on this site or on my Google+ page.

Previous post:

Next post: