How to Remove BlockScanner | Removal Guide
BlockScanner looks very much like it’s sibling blockwatcher and indeed these two rogue antivirus applications come from the same prolific family (wini). This family includes numerous other rogue antivirus appications such as… Softbarrier (softbarrier removal) and many others have looked the same… Shieldsafeness (see the shieldsafeness removal guide) as well as… SoftStronghold (softstronghold removal guide) and succeeds the following variants in this prolific family…. Softveteran (see the softveteran removal guide) but…. SoftCop (see the SoftCop removal guide.) But, the line goes much further back…. Softsoldier (How to remove SoftSoldier), ( TrustFighter TrustFighter Removal Guide, TrustSoldier removal guide and the following others… SafeFighter (Safefighter Removal), TrustCop (TrustCop Removal Guide), SecureWarrior (SecureWarrior Removal), SecurityFighter (SecurityFighter Removal), SecuritySoldier (SecuritySoldier Removal). Believe it or not, that’s just a sampling of the last months worth of variations. (And I may have missed a few.) These rogues install via trojan horse activity, popup warnings and threats claiming that your system is at risk from multiple files it claims to find. They (of course) want you to purchase for full “protection” from all these threats. Read on for how to remove blockscanner.
First you will want to attempt an uninstall of blockscanner through the control panel and the add/remove programs dialog. Even if this works well, proceed to download and scan your computer with malwarebytes antimalware and a reputable antivirus application such as AVG or Avira, etc…. To go ahead with a manual removal, download malwarebytes antimalware from the virus removal toolkit page (and optionally download process explorer.)
If you are unable to install and run malwarebytes initially, the following tricks may help. 1) reboot into safe mode and try running the installer within safe mode, then update and run a full scan. 2) rename the installer file from mbam-setup.exe to something else…. zeta.exe 3) follow with the manual removal steps listed below and retry the install of malwarebytes after you have killed off the running processes associated with blockscanner.
You will likely want to block the following web site:
blockscanner.com
The following processes are associated with blockscanner and should be killed off using the task manager. If you are unable to launch the task manager try copying and pasting the program file for it (taskmgr.exe) to a new file name…. elmo.exe and then try running it, or you can alternatively use process explorer to find and kill off the following processes:
vwc4.tmp.exe
111249acztool1ef5.exe
1649zt5oj447.exe
BlockScanner.exe
uninstall.exe
Some of the above may contain strings that are randomly created and are unique from one install of blockscanner to another. Use the information of files to delete below (and the locations for these files) to figure out the naming on your system and locate any suspicious processes and kill those off that may match the patterns given above.
The following dlls should be unregistered and deleted:
16624s5y1z9.dll
(again – some randomization may have been used on the filenames – use the further information below and what you find on your system for thorough removal.)
The following files and folders should be deleted for a manual removal of blockscanner:
%docs%\All Users\Desktop\BlockScanner.lnk
%docs%\All Users\Start Menu\Programs\BlockScanner\1 BlockScanner.lnk
%docs%\All Users\Start Menu\Programs\BlockScanner\2 Homepage.lnk
%docs%\All Users\Start Menu\Programs\BlockScanner\3 Uninstall.lnk
%docs%\All Users\Start Menu\Programs\BlockScanner
%progfiles%\BlockScanner Software\BlockScanner\BlockScanner.exe
%progfiles%\BlockScanner Software\BlockScanner\uninstall.exe
%progfiles%\BlockScanner Software
%progfiles%\BlockScanner Software\BlockScanner
%tmp%\vwc4.tmp.exe
%win%\1037not-a-zir9s795.cpl
%win%\10517z9rm7e.cpl
%win%\system32\16624s5y1z9.dll
%win%\111249acztool1ef5.exe
%win%\system32\1649zt5oj447.exe
%win%\system32\164z7spamb95755.bin
Even after successfully removing all of the files listed above it would be a good idea to make sure you have completed your removal of blockscanner by installing and running malwarebytes antimalware as well as a reputable antivirus (AVG/Avira/online trendmicro scan/etc.) At this point your removal of BLockscanner should be complete.