Very poorly PC, help needed with virus removal

EverDecreasingCircles

PC started to play up last night. We started getting fake virus alerts, then it opened IE and displayed a !!!!!! site (17 Y/O DS thought it was very amusing).

Last night it wouldn't let me do anything, access internet, run Antivir, so I had to just turn it off. This morning I've managed a restore to yesterday but proplem's still there.

I've started an Antivir scan but the screen has 4 fake alert messages on it that I can't get rid of and looks like it's opening the !!!!!! site again :mad:

Any advice please?

EDC

alanwjones

Can you do a hijack this scan and copy the result and post it on this thread
http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

EverDecreasingCircles

alanwjones wrote: »

Can you do a hijack this scan and copy the result and post it on this thread
http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

No, it won't let me access the website.

EDC

busenbust

You said you did a system restore. In safe mode? If not, I would try a restore in safe mode to an even earlier date (last wk or wk before that). And I would seriously ditch IE and move to Firefox. Is your current anti-virus automatically updating?

EverDecreasingCircles

I'm not very computer literate, I think I did it in safe mode. I pressed F10 on setup and went via that route but it started up Windows before opening the restore option. I don't know if there's another way?

EDC

busenbust

To get into the Windows 2000 / XP Safe mode, as the computer is booting press and hold your "F8 Key" which should bring up the "Windows Advanced Options Menu" as shown below. Use the arrow keys to move to "Safe Mode" and press your Enter key.

aliEnRIK

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Post the log COMPLETE here AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click DO A SCAN AND SAVE A LOGFILE (Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)


Keep pressing F8 to get into SAFE MODE WITH NETWORKING if you cant download them

EverDecreasingCircles

Got into safe mode.

I've now got to a screen that says

Microsoft Wiondows XP Recovery Console

The Recovery Console provides system repair and recovery functionality.

Type EXIT to quit the Recovery Console and restart the computer.

1: C:\WINDOWS
2: \MiniNT
3: \1386

Which Windows installation would you like to log onto
<To cancel, press ENTER>?

I typed 1 and it now says underneath
C:\WINDOWS

but nothing else happens What should I do now?

EDC

aliEnRIK

EverDecreasingCircles wrote: »

Got into safe mode.

I've now got to a screen that says

Microsoft Wiondows XP Recovery Console

The Recovery Console provides system repair and recovery functionality.

Type EXIT to quit the Recovery Console and restart the computer.

1: C:\WINDOWS
2: \MiniNT
3: \1386

Which Windows installation would you like to log onto
<To cancel, press ENTER>?

I typed 1 and it now says underneath
C:\WINDOWS

but nothing else happens What should I do now?

EDC

Thats not the safe mode screen

This is safe mode ~


Maybe your computers diff to the norm? In which case try F2, F12 and F10

EverDecreasingCircles

I went through the safe mode screen to get to the one I'm on now.

Trying again now and it's asking which operating sytem to start - Windows XP or Windows Recovery Console.

EDC

aliEnRIK

Erm

Ive never encountered that through safe mode before

Select XP then (That 'should' boot into safe mode)