Help with Sisters Computer 'under attack?'

angelcake

Hi, I have just gone onto my sisters computer and all this stuff has come up, she has norton 360 and McAfee ...not sure about the setup altogether as I was only coming on to show her some pics!

the web adress came up as onlinesecurityscanv11 ... something like that and the message is this:

Your Computer is Infected!
Threats and actions:
NameRisk levelDateFiles infectedStateEmail-Worm.Win32.NetCritical11.18.200835Waiting removalEmail-Worm.Win32.MydCritical11.18.200835Waiting removalWin 32:Delf-XQCritical11.18.200835Waiting removal
Description:
This program is potentially dangerous for your system. Trojan-Downloader stealing passwords, credit cards and other personal information from your computer.

Advice:
You need to remove this threat as soon as possible!

Please can you advise what we need to do. thank you

espresso

angelcake wrote: »

Hi, I have just gone onto my sisters computer and all this stuff has come up, she has norton 360 and McAfee ...

Only one of these should be running, so one of them needs to be removed.

fwor

If you put the name of the supposed infection into Google, the first hit you get says this:

"Email-Worm.Win32.Net is a threat detected by a “My Computer Online Scan,” a fake security scanner website that pose as a Windows Explorer and deceive computer users of its scary alert messages."

You should follow the malware removal advice in the sticky post at the top of the Techie section, though if you Google a bit more you may find a more specific procedure (I always find the Malwarebytes process rather intimidating...)

macman

Once you've cleaned the infection, get rid of both McAfee and Norton 360 and install a decent AV-Kaspersky or Avira are recommended.

angelcake

ok thank you for your replies we will look into it a little further. thanks again

andy2004

download malwarebytes antispyware (free) version 1.40 released. install, update, and run a scan, post log on here.
download hijackthis, run a scan + log post here.

you can download both from https://www.filehippo.com