42 trojan threats??/please help!!

davb

katie1 wrote: »

The same happened to me last sunday . i couldnt do ANYTHING , it wouldnt let me get into my add/remove programmes to try and remove it . A neighbour came and messed about with my p.c for ages . Then it let me run spybot and i removed a load of things . It still isnt running 100% my p.c keep turning it self off any ideas what that could be ???

Sounds familiar.
Your best bet is follow the instructions from aliEnRIK in post #4 of this thread, although you may be better starting another thread with the results to avoid confusion.

davb

Sunshine12 wrote: »

Thank you so much everyone, particularly davb and RIK. Ill do as you state above and post what comes up (might wait until tomorrow before I do it, think I might get myself in a tizzy again!) Was in a right panic earlier!!! Cheers again. Am gobsmacked at how helpful everyone has been. Really appreciate it.

Glad it's working again, these things can be quite scary if you haven't seen them before.

aliEnRIK

Please run COMBOFIX
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Shut down your anti virus
Follow the simple instructions it gives
Post the COMPLETE log it creates here (Split into sections if need be)

If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download

aliEnRIK

katie1 wrote: »

The same happened to me last sunday . i couldnt do ANYTHING , it wouldnt let me get into my add/remove programmes to try and remove it . A neighbour came and messed about with my p.c for ages . Then it let me run spybot and i removed a load of things . It still isnt running 100% my p.c keep turning it self off any ideas what that could be ???

Follow my instructions as per post #4 and post the results IN A NEW THREAD

Sunshine12

aliEnRIK wrote: »

Please run COMBOFIX
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Shut down your anti virus
Follow the simple instructions it gives
Post the COMPLETE log it creates here (Split into sections if need be)

If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download

Hi RIK
do I do this after what davb said or before? Also, I dont know how to shut down my antivirus.......feeling particularly inadequate/clueless today! x:(

aliEnRIK

Sunshine12 wrote: »

Hi RIK
do I do this after what davb said or before? Also, I dont know how to shut down my antivirus.......feeling particularly inadequate/clueless today! x:(

MCAFEE removal tool would certainly be a good idea

The rest is upto you, run a FULL scan with malwarebytes in NORMAL mode then combofix or jump straight to combofix

Sunshine12

Was doing full scan with that malware thing and then the screen went bright blue and said something about a crashdump then it started up again and for about half an hour said something about trying to restore files. Im running the malware thing again but not sure if its going to work or not. Was over an hour into it then just froze for some reason. Shall perceivere. Re the mcafee thing, it still scans my computer regularly (or at least I get a screen coming up saying it is....should I still uninstall it?)

davb

I think the McAfee stuff thats left is not the full thing - but even if it was, two AV programs can be bad news, so I would definitely get rid.

If you get another blue screen, it may be best to run Combofix as Rik suggested. You can disable AVG resident shield and rootkit by opening AVG, opening the relevant items, and unticking the box.

Sunshine12

Hi
It went blue again last night when trying to run malware thing and i cant switch off the AVG thing as it doesnt have any boxes to untick..... its acting very strangely now. can i run the combofix with AVG stuff still on? Thanks

davb

If you can't find how to turn off AVG, it may be easier to uninstall it - you need to upgrade from AVG 8 anyway.
You need to be careful doing this, as you don't want to connect to the net whilst having no AV. What I would do is download the installer for the new AV first (either AVG9, or Avast or Microsoft Security Essentials - personally I would use one of the latter 2) along with Combofix, and the McAfee cleaner. Then I would disconnect from the net, uninstall AVG, run the McAfee cleaner, run Combofix, then install the new AV before reconnecting to the net.