Trojan Virus Help Please

Make_do_and_mend

My daughter was doing a search this afternoon and when she clicked on something we got loads of alerts asking us to take action immediately as there was a suspected virus etc.

We didn't click on the fix as we were unsure if we should trust it - we did a full scan with Kaspersky and it said there was a Trojan virus and we should action it immediately, it asked us to restart and then it would disinfect and remove the virus.

Couldn't shut down at first as box kept disappearing, but used CTRL ALT DEL and managed to do it this way. Restarted and virus still there - it doesn't seem to have fix so I made sure our microsoft updates were all up to date. Still no joy.

The virus is Trojan Downloader.JS. fraudload.j

my husband needs his laptop for work and is not pleased - is the virus serious and do you think it can be fixed. will take it to a shop but really worried it is damaged beyond repair - sorry if this is basic knowledge - can anyone help or advise?
Thanks in advance

Donnie

Download, install, update and run a Full Scan with Malwarebytes' AntiMalware.

When completed, Remove Selected and then Reboot.

BritRael

Although I cannot find any specific info on this trojan, this is info (from www.viruslist.com) on the type that you have:-

"This Trojan downloads other programs via the Internet and launches them on the victim machine without the user’s knowledge or consent. The Trojan components vary in size from 7 to 19KB. It is written in JavaScript."

I've not used Kaspersky, but run it again and re-try to remove it. Also get antimalware as suggested above. There is also a very good free virus scanner at www.avast.com. Get it, and run it.

Needless to say, while you are infected, minimise your internet use, and do not use internet banking etc. or save any passwords on this pc.

Good luck

[Deleted User]

Download, update then scan with Malwarebytes first: http://dw.com.com/redir?edId=3&siteId=4&oId=3000-8022_4-10804572&ontId=8022_4&spi=7b3e98daf390ca082fb36b632ae5216b&lop=link&ltype=dl_dlnow&pid=11080953&mfgId=6290020&merId=6290020&pguid=ouLqtAoPjAIAAEUK1jcAAADK&destUrl=http%3A%2F%2Fdownload.cnet.com%2F3001-8022_4-10804572.html%3Fspi%3D7b3e98daf390ca082fb36b632ae5216b%26part%3Ddl-10804572
Download, update then scan with Superantispyware secondly: http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
Install any available security updates from Windows updates: http://windowsupdate.microsoft.com/
Update then scan again with Kaspersky. If it still finds it but can't remove it then consider uninstalling Kaspersky and installing Avira: http://download.cnet.com/Avira-AntiVir-Personal-Free-Antivirus/3000-2239_4-10322935.html?part=dl-10322935&subj=dl&!!!!!button&cdlPid=11012914

Make_do_and_mend

Thanks for your advise - one question - can it still get stored passwords while switched off - sorry for asking what is probably a basic question.

BritRael

Make_do_and_mend wrote: »

Thanks for your advise - one question - can it still get stored passwords while switched off - sorry for asking what is probably a basic question.

No, it cannot. Also, not while disconnected from the internet.

Unfortunately you cannot illiminate internet use completely (you need to get the recommended software for a start ), but the less time spent online the less chance there is of damage. Fix it, and check that you've fixed it, before relaxing.

Good luck.

andy2004

please post the malwarebytes scan log, here aswell after scanning.
Also an Hijackthis log file http://www.bleepingcomputer.com/files/hijackthis.php download freely from here.

KxMx

Sorry if i'm hijacking, but I too have had problems with trojans, so downloaded the Malwarebytes and am doing the quick scan now (been going an hour though!)
Do I treat the Malware like the anti-virus and do daily scans? And will the malware prevent the trojans latching on in the first place?

Donnie

KxMx wrote: »

Sorry if i'm hijacking, but I too have had problems with trojans, so downloaded the Malwarebytes and am doing the quick scan now (been going an hour though!)
Do I treat the Malware like the anti-virus and do daily scans? And will the malware prevent the trojans latching on in the first place?

An hour? Something wrong there. Keep going anyway.

Only the paid for version of MA will give you protection against installation.

Once your machine is clean, for protection, install Spybot Search & Destroy, together with it's Tea Timer. Also utilise it's Immunize function.

andy2004

donnie that would depend on if he clicked quick scan or full scan, full scan always takes longer than a quick, especially as its looking at every file on the drive. and if he TURNED OFF / Disabled his antivirus before scanning with it, leaving it turned on would/could quadruple or more the scanning time..

just testing, 5min 16sec quick scan. 28min full,

KxMx

Thanks for your help, think it's taking so long as I didn't know to delete the temporary internet files first, and is quick scan.