advice needed , my pc has been taken over

danthemoneysavingman

I perform work on various people's computers, and this is the classic scareware infection.

Point 1: DO NOT PAY THEM ANYTHING
Point 2: if you can, BACK UP FILES YOU WANT TO KEEP - the pop-ups will keep annoying you but you can burn stuff to DVD like pics n music
Point 3: most time will be saved if you completely reinstall your operating system, formatting your hard drive during the reinstall process.

Various sites offer solutions but these scareware processes are adapted quickly. malwarebytes AntiMalware used to be able to ID & remove various versions of this, but that was 3 months ago, and so not any more, the process stops it from scanning.

Hope this helps.

Richie-from-the-Boro

bigblackdog, ask for alienRIK

terryw

Thanks for that Dan. I have had these scareware things about three times and I have managed to clear it every by simply
1. switching off
2. switching on and pressing F8 a few times as it starts
3. Going to "system restore" in safe mode
4. setting to the day before.

This works and gets rid of the scareware .......... but have I done enough? Could nasties still be lurking?.

I have no files that I wish to keep.

Donnie

danthemoneysavingman wrote: »

I perform work on various people's computers, and this is the classic scareware infection.

Point 1: DO NOT PAY THEM ANYTHING
Point 2: if you can, BACK UP FILES YOU WANT TO KEEP - the pop-ups will keep annoying you but you can burn stuff to DVD like pics n music
Point 3: most time will be saved if you completely reinstall your operating system, formatting your hard drive during the reinstall process.

Various sites offer solutions but these scareware processes are adapted quickly. malwarebytes AntiMalware used to be able to ID & remove various versions of this, but that was 3 months ago, and so not any more, the process stops it from scanning.

Hope this helps.

This of course is wrong. Malwarebytes' AntiMalware still works. You just need to know what you are doing. In general you can go to the BleepingComputer website for instructions.

Donnie

bigblackdog wrote: »

i have wondered that myself a few times lol
but cant get it to open , and it is a laptop so awkward , have just lived without the benefit of it for ages

the full scan is progressing , seems to be going quite fast ,

Waiting to see the Log produced by MA.

bigblackdog

Richie-from-the-Boro wrote: »

CD / DVD / Even lappies [ some anyway ] have the usual hole for a paper clip insertion !

amazing , all that technology , and a paper clip is the tool of choice lol
i have looked and it seems there is a small hole to the right of the eject button below the drawer , now i just need a paper clip or something similar , will try it

bigblackdog

danthemoneysavingman wrote: »

I perform work on various people's computers, and this is the classic scareware infection.

Point 1: DO NOT PAY THEM ANYTHING
Point 2: if you can, BACK UP FILES YOU WANT TO KEEP - the pop-ups will keep annoying you but you can burn stuff to DVD like pics n music
Point 3: most time will be saved if you completely reinstall your operating system, formatting your hard drive during the reinstall process.

Various sites offer solutions but these scareware processes are adapted quickly. malwarebytes AntiMalware used to be able to ID & remove various versions of this, but that was 3 months ago, and so not any more, the process stops it from scanning.

Hope this helps.

thanks ,

1 . i am aware its a scam , so wont be paying anything
2. i had an infection like this some months ago , and just lived with the pop ups , clicking them off every 5 mins or so when they appeared
3. thanks to the guys on this site i found malwarebytes and it sorted everything out
this infection seems more serious as unless in safe mode i cannot open anything other than what it wants me to , i.e link to payment page and nothing else

bigblackdog

the full scan completed and nothing malicious was found , tried restarting normally , and the infection is still there , nothing has changed
re entered as administrator with networking in safe mode , looked in add remove programs , nothing in there

just cant believe this

aliEnRIK

Please open malwarebytes, goto LOGS and post the WHOLE of the log

bigblackdog

Donnie wrote: »

Waiting to see the Log produced by MA.

Malwarebytes' Anti-Malware 1.43
Database version: 3506
Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 8.0.6001.18702
13/07/2010 21:33:10
mbam-log-2010-07-13 (21-33-09).txt
Scan type: Full Scan (C:\|D:\|F:\|)
Objects scanned: 325284
Time elapsed: 3 hour(s), 45 minute(s), 33 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)

not much there .......