Advice needed on security/virus.

alisont

We use Norton on our main PC. We get it included as part of our BT broadband package - something my Dad agreed with BT.

Today whilst I was out Dad says he had been checking his hotmail and was looking at an email off a car dealer (hes looking for a new car) this email asked him to enter his details as in email address for further offers - he did then it asked for a password so he closed the page as thought this was dodgy!

So later on Dad says he had been getting messages about major virus infections and trojans/worms Ive seen these pop ups and it was saying Windows internet Explorer - your computer remains infected with viruses and said to click to remove all. As far as I know Dad did not click on this. It did not look right to me - I was worried that if clicked this could let the virus in?

Friends said to run and download Malwarebytes this found 775 infected files:eek: I also seemed to lose our Norton but have realised that the subscription ran out today I think.

Am trying to decide if I should renew the Norton - says £54.99! Or go for a free one, Ive got a free one on my netbook seems fine.

Dad had also gone straight to check his online banking so he has rung his bank and nothing has gone out all seems ok and the bank are aware of things.

Im not very security minded on the computer and not very good at sorting things so any advice as to 1. What happened today and 2. What is best option with the security would be gratefully recieved!

Ive not really got a clue as to what is going on with our computer - Norton did a full scan last night and picked up nothing but this Malwarebytes found 775 infected files? Does not seem right to me!

Thanks for reading and thanks in advance for any comments!

Browntoa

its a false warning

please post the malwarebytes log file for me to read

start malwarebytes again and then click on the Logs tab , then double click on the log file and it will open it in Notepad. Click on Edit at the top , then Select All , then Copy. come back here and click on reply then right click on the reply box and click on paste

you may need to break the file into smaller chunks to post it all

once we have this clean the one of the free antivirus like Avast will do fine (after Nortons is removed). I think BT have swapped to Mcafee as their free antivirus now, do not pay for Nortons !!

All you'll need is your BT Yahoo! email address (e.g. [EMAIL="yourname@btinternet.com"]yourname@btinternet.com[/EMAIL]) and password.

https://www.securedownload.bt.com/BTGuard/Guard?beanName=OnlineCustomer&block=online&authenticationRequired=true

ckerrd

No need to renew Norton

Go to the stickies on the Techie forum lots of useful stuff there

EDIT - even better have Browntoa help you

alisont

Thanks am trying to post it here but Its massive and keep losing my place trying to copy bits of it and preview says its too big a post. Will keep trying!

alisont

Hope that was what I needed to post on here! Massive amount of text I think Il have to remove it after you have seen it, cant take up all that space!

alisont

Il have to work out the password for the computer as it was set up in Mums name with her bt address but Im not sure we have the password - have had many problems in the past with BT and passwords!

Browntoa

well forget the BT one and go with Avast (once we have the PC clean )

http://download.cnet.com/Avast-Home-Edition-Free-Antivirus/3000-2239_4-10019223.html

you need to follow this to finish the clean up

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

looks complicated but trust me I've done it loads of times and its easy once you start

Browntoa

this tool will remove all traces of Nortons before you install avast

http://majorgeeks.com/downloadget.php?id=4749&file=15&evp=242a1882161556089131482b8e4a8e42

but wait until we give you the "all clear" before running it and installing Avast...

we also need to do some windows updates but again we will advise you how to do that when you are clean

alisont

Thank you Il have a good go but am not very good at things like this!

So what do I need to do first to start off?

I was not sure what all the results meant that I copied in!

Can I delete my posts later with all the text in?

Browntoa

yes , I wanted to see the type of infection you have so they can be deleted

you need to follow this to continue the clean up

http://www.bleepingcomputer.com/comb...o-use-combofix

its step by step with pictures, easy to follow

alisont

Just wondering as Im not very confident doing all this would it be better for me to ask a friend at work to get her hubby to pop over as he fixes computers and will be better than me! I dont want to get in a muddle!

Or is it something I need to sort now before I use the computer to buy online etc...?