Hijacked

notakid

Hi my daughters computer seems to have a very nasty virus. I've tried system restore but it seems it won't let me restore the settings before the virus was downloaded.

Also it won't let me switch on automatic updates from microsoft and it keeps turning off the firewall.

I've run adware, spybot and AVG but none of them can seem to spot it.
It keeps trying to get me to download spyware to resolve the problem. Page after page after page. Is there any thing I can use to deal with this?
It keeps taking me to a page pcvirusremover2008.com and my computer keeps saying there is a Trojanspy.Win32. Keylogger. There are plenty more too, but the computer keeps freezing cos of all the windows which appear.

aliEnRIK

Try MALWAREBYTES
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
UPDATE and QUICK SCAN

If it wont work then try scanning in SAFE MODE

Reluctant_spender

As above has suggested;

Malware Bytes

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Make sure you are connected to the Internet.
• Double-click on mbam-setup.exe to install the application.
• When the installation begins, follow the prompts and do not make any changes to default settings.
• When installation has finished, make sure you leave both of these checked:
  • Update Malwarebytes' Anti-Malware
  • Launch Malwarebytes' Anti-Malware
• Then click Finish.
• MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
• On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
• If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
• The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
• When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
• Click OK to close the message box and continue with the removal process.
• Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
• Make sure that everything is checked, and click Remove Selected.
• When removal is completed, a log report will open in Notepad.
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the contents of that report in your next reply and exit MBAM.

Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes, they may alert you after scanning with MBAM. Please permit the program to allow the changes.

notakid

how do I put her computer in safe mode. It seems to have hijacked the pop up menu as well. I can't find run anyway or my computer/my settings.

Reluctant_spender

Booting into Safe Mode

Reboot into Safe Mode by continuously tapping the F8 key as soon as the computer begins to boot. A menu should come up where you will be given the option to enter Safe Mode.

Browntoa

just go for the malwarebytes option, ignore the other option

jjscotman

If you are a relative computer newbie (like me !!) the best advice I can give is to post your query in the Hijack This forum.

Hijack This is part of Trend Micro, a very well known and respected computer security outfit.

One of the experts from Hijack This will walk you thru the actions necessary to identify and implement solution(s) to your problem.

The Hijack This forum is here:

http://www.techsupportforum.com/security-center/hijackthis-log-help/

In the long run I think this will prove the safest and best course of action.

Space_Cowby

Hijack this is very good and lots of forums offer support like https://www.webuser.co.uk

notakid

Hi and thanks to everyone!

After much difficulty and swearing I managed to run Malwarebytes


(It was a wonderful virus infected everything!)

I tried to post the log but it wouldn't let me kept saying too many characters!

Reluctant_spender

Can you post it in sections?

Reluctant_spender

The other option you have is run an online scan with Kaspersky. The advantage this one has over others is that is does not delete which is good if your not sure what's what.

Please do a scan with Kaspersky Online Scanner

Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

Click on the Accept button and install any components it needs.

• The program will install and then begin downloading the latest definition files.
• After the files have been downloaded on the left side of the page in the Scan section select My Computer
• This will start the program and scan your system.
• The scan will take a while, so be patient and let it run.
• Once the scan is complete, click on View scan report
• Now, click on the Save Report as button.
• Save the file to your desktop.
• Copy and paste that information in your next post.