Main site > MoneySavingExpert.com Forums > Household & Travel > Techie Stuff > help please police central e-crime unit virus rem... (Page 1)

IMPORTANT! This is MoneySavingExpert's open forum - anyone can post

Please exercise caution & report any spam, illegal, offensive, racist, libellous post to forumteam@moneysavingexpert.com

  • Be nice to all MoneySavers
  • All the best tips go in the MoneySavingExpert weekly email

    Plus all the new guides, deals & loopholes

  • No spam/referral links
or Login with Facebook
help please police central e-crime unit virus removal
Closed Thread
Views: 5,876
Thread Tools Search this Thread Display Modes
# 1
xxdeebeexx
Old 18-04-2012, 8:09 PM
Serious MoneySaving Fan
 
Join Date: Aug 2006
Posts: 1,829
Default help please police central e-crime unit virus removal

Hi a friend has asked me to help remove police central e-crime unit virus from their sons netbook. There was no antivirus so I have installed malwarebytes and have tried to instal AVG and Antivir but it won't let me. I can get it running in safety mode but that's about it.

Malwarebytes finds a trojan...deletes it and when it's scanned again it finds another one. It has been scanned 4 times each time there is no improvement.

tia

dx
xxdeebeexx is offline
Report Post
# 2
rmg1
Old 18-04-2012, 8:24 PM
Fantastically Fervent MoneySaving Super Fan
 
Join Date: Feb 2007
Posts: 2,650
Default

From what I've seen on here, Malwarebytes does it's best work in normal mode.
Will it run like that?
Flagellation, necrophilia and bestiality - Am I flogging a dead horse?

Any posts are my opinion and only that. Please read at your own risk.
rmg1 is online now
Report Post
The Following User Says Thank You to rmg1 For This Useful Post: Show me >>
# 3
xxdeebeexx
Old 18-04-2012, 8:26 PM
Serious MoneySaving Fan
 
Join Date: Aug 2006
Posts: 1,829
Default

Quote:
Originally Posted by rmg1 View Post
From what I've seen on here, Malwarebytes does it's best work in normal mode.
Will it run like that?
No, as soon as it boots up the screen freezes with the warning.

dx
xxdeebeexx is offline
Report Post
# 4
rmg1
Old 18-04-2012, 8:27 PM
Fantastically Fervent MoneySaving Super Fan
 
Join Date: Feb 2007
Posts: 2,650
Default

Then I'm sorry to say this is above my level of expertise and I'd better leave it to one of the more experienced bods on here.
Flagellation, necrophilia and bestiality - Am I flogging a dead horse?

Any posts are my opinion and only that. Please read at your own risk.
rmg1 is online now
Report Post
# 5
xxdeebeexx
Old 18-04-2012, 8:30 PM
Serious MoneySaving Fan
 
Join Date: Aug 2006
Posts: 1,829
Default

Quote:
Originally Posted by rmg1 View Post
Then I'm sorry to say this is above my level of expertise and I'd better leave it to one of the more experienced bods on here.
you and me both!

Gosh DH offered my services to his friend... I think he wanted me out of the way so that he could have a quiet evening watching the football!

dx
xxdeebeexx is offline
Report Post
# 6
rmg1
Old 18-04-2012, 8:31 PM
Fantastically Fervent MoneySaving Super Fan
 
Join Date: Feb 2007
Posts: 2,650
Default

Just to get ready, can you post the Malwarebytes log?
Flagellation, necrophilia and bestiality - Am I flogging a dead horse?

Any posts are my opinion and only that. Please read at your own risk.
rmg1 is online now
Report Post
# 7
john1
Old 18-04-2012, 8:40 PM
MoneySaving Stalwart
 
Join Date: Feb 2004
Posts: 319
Default

This may help http://support.microsoft.com/kb/129972



And try the following Note you need to download on none infected computer initially to copy program


Install Windows Defender Offline Beta

Windows Defender Offline Beta is a malware tool desgined to remove hard to eliminate viruses that start before Windows boots. To use Windows Defender Offline Beta, follow the steps below:

On a non-infected computer, visit: http://windows.microsoft.com/en-US/w...fender-offline

Click Download the 32 bit version or Download the 64 bit version depending on which version of Windows you are running. If you're unsure of which version of Windows you are running, visit: http://windows.microsoft.com/en-US/w...t-32-or-64-bit

When prompted, click Save As. Save the file to a removable media source, such as a DVD, CD, or USB drive.

On the infected computer, insert the DVD, CD, or USB drive and restart the computer.

When prompted, press the key to choose boot options, such as F12, F5, or F8, depending on your BIOS.

Use the arrow key to scroll to the drive containg the Windows Defender Offline Beta file. The computer will start Windows Defender Offline Beta, which will immediatley start scanning for malware.
john1 is offline
Report Post
The Following User Says Thank You to john1 For This Useful Post: Show me >>
# 8
xxdeebeexx
Old 18-04-2012, 8:44 PM
Serious MoneySaving Fan
 
Join Date: Aug 2006
Posts: 1,829
Default

Quote:
Originally Posted by rmg1 View Post
Just to get ready, can you post the Malwarebytes log?
I would have to save to a memory stick, I think, an post on my computer

I am doing a 5th scan now and will see what happens.
I am scanning in safe mode though ?

dx
xxdeebeexx is offline
Report Post
# 9
dogmaryxx
Old 18-04-2012, 8:53 PM
Serious MoneySaving Fan
 
Join Date: Mar 2009
Location: Little England beyond Wales
Posts: 1,985
Default

Found this solution

  1. Use another PC to connect the Internet and download Combofix.(Blue Download Button)
  2. Take the USB flash drive/memory stick and transfer your program there.
  3. Reboot your infected PC and start pressing F8 as soon as machine becomes active.
  4. Choose ‘Safe mode with command prompt’.
  5. Stick the USB flash drive with Combofix into your infected machine and launch.Wait until it finishes.
  6. Reboot PC, update anti-virus program you regularly use and scan your PC
dogmaryxx is offline
Report Post
The Following User Says Thank You to dogmaryxx For This Useful Post: Show me >>
# 10
xxdeebeexx
Old 18-04-2012, 10:09 PM
Serious MoneySaving Fan
 
Join Date: Aug 2006
Posts: 1,829
Default !!

Quote:
Originally Posted by dogmaryxx View Post
Found this solution

  1. Use another PC to connect the Internet and download Combofix.(Blue Download Button)
  2. Take the USB flash drive/memory stick and transfer your program there.
  3. Reboot your infected PC and start pressing F8 as soon as machine becomes active.
  4. Choose ‘Safe mode with command prompt’.
  5. Stick the USB flash drive with Combofix into your infected machine and launch.Wait until it finishes.
  6. Reboot PC, update anti-virus program you regularly use and scan your PC
Thanks. This did the trick!!


dx
xxdeebeexx is offline
Report Post
# 11
waddler_8
Old 18-04-2012, 10:33 PM
Fantastically Fervent MoneySaving Super Fan
 
Join Date: Jul 2011
Posts: 3,563
Default

Post the combofix log found at the root of the system drive - usually C:\combofix.txt
waddler_8 is offline
Report Post
Closed Thread

Bookmarks
 
 




Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

 Forum Jump  

Contact Us - MoneySavingExpert.com - Archive - Privacy Statement - Top

Powered by vBulletin® Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.

All times are GMT +1. The time now is 12:16 PM.

 Forum Jump  

Free MoneySaving Email

Top deals: Week of 27 August 2014

Get all this & more in MoneySavingExpert's weekly email full of guides, vouchers and Deals

GET THIS FREE WEEKLY EMAIL Full of deals, guides & it's spam free

Latest News & Blogs

Martin's Twitter Feed

profile

Cheap Travel Money

Find the best online rate for holiday cash with MSE's TravelMoneyMax.

Find the best online rate for your holiday cash with MoneySavingExpert's TravelMoneyMax.

TuneChecker Top Albums

  • ED SHEERANX (DELUXE EDITION)
  • VARIOUS ARTISTSNOW THAT'S WHAT I CALL MUSIC! 88
  • SAM SMITHIN THE LONELY HOUR (DELUXE EDITION)

MSE's Twitter Feed

profile
Always remember anyone can post on the MSE forums, so it can be very different from our opinion.
We use Skimlinks and other affiliated links in some of our boards, for some of our users.