My daughter needs help, infested computer

oysterman

Just got a phone call asking me about her pc.

She had a message come up saying SND.exe is infected by LSAS.blaster.key logger worm.

How can i help her over the phone

oysterman

oysterman wrote: »

Just got a phone call asking me about her pc.

She had a message come up saying SND.exe is infected by LSAS.blaster.key logger worm.

How can i help her over the phone

I meant INFECTED not infested lol

DCFC79

Download MALWAREBYTES (Click 'DOWNLOAD LATEST VERSION')
anti malwarebytes
UPDATE and FULL scan
Post the log here after its deleted everything

Download HIJACK THIS (Click 'DOWNLOAD LATEST VERSION')
hijackthis
reboot
SCAN and post the log so we can see whats running

timmmers

Keylogger worm ...not good, that records her typing and sends it elsewhere ...

I assume the antivirus warned her? IF so, run a full scan ASAP to get rid of it...it may have already done so if it found and warned about it.

She may have other nasties too...best to be sure. If she badly needs to use the machine before scanning is finished...take it off the internet so it can't report home. Don't reconnect until it's gone though if she does that.

t

oysterman

DCFC79 wrote: »

Download MALWAREBYTES (Click 'DOWNLOAD LATEST VERSION')
anti malwarebytes
UPDATE and FULL scan
Post the log here after its deleted everything

Download HIJACK THIS (Click 'DOWNLOAD LATEST VERSION')
hijackthis
reboot
SCAN and post the log so we can see whats running

Last message i got was that she had downloaded malwarebytes but it did not seem to be running. If that is the case what can she do next. I am going round there this morning so any help before i leave would be most appreciated..

oysterman

timmmers wrote: »

Keylogger worm ...not good, that records her typing and sends it elsewhere ...

I assume the antivirus warned her? IF so, run a full scan ASAP to get rid of it...it may have already done so if it found and warned about it.

She may have other nasties too...best to be sure. If she badly needs to use the machine before scanning is finished...take it off the internet so it can't report home. Don't reconnect until it's gone though if she does that.

t

To be honest i have no idea what antivirus stuff(if any) they have got.

What is the minimum that they should be having ie. Antivirus, firewall, spyware etc

iom876

Do not worry, everything will be fine

iom876

I was trusted, but do not know how this forum can be made connections pictures, Oh, there are known to do, please tell me！

Donnie

Choice of Firewalls(Choose from Freeware)
AntiVirus

Donnie

iom876 wrote: »

I was trusted, but do not know how this forum can be made connections pictures, Oh, there are known to do, please tell me!

As a new member, you are not allowed to produce links. It's a SPAM prevention method.

aliEnRIK

oysterman wrote: »

Last message i got was that she had downloaded malwarebytes but it did not seem to be running. If that is the case what can she do next. I am going round there this morning so any help before i leave would be most appreciated..

Get her to boot up into SAFE MODE WITH NETWORKING (Keep pressing F8 at keep bootup)
Download malwarebytes
http://www.filehippo.com/download_malwarebytes_anti_malware/
RIGHT click the malwarebytes file and RENAME it to something random (eg bsdfjkwea.exe)
INSTALL it, RUN it (May need to rename the malwarebytes.exe file too). UPDATE it, runa FULL scan with it. Get her to join this site and post the results here

Then download HIJACK THIS
http://www.filehippo.com/download_hijackthis/
Click DO A SCAN AND SAVE A LOGFILE (Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)