Virus????

susi

I answered a call on skype (from my daughteer who I speak to every day) and a virus alert box popped up, before I knew it there were boxes flashing all over the place. I run AVG which showed I had over 400 threats of which only a few could be removed. I have tried to follow the step by step instructions fro removal on here (which I successfully managed to do on my last computer) but I cant get past the mbam as the next program wont download. I am on Vista. can anyone give me some simple instructions (sorry I am not at all techie) if possible.
Thanks in advance

aliEnRIK

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)
If you get a message that you cant write to the hosts file then Press the SHIFT key, and whilst holding it RIGHT CLICK and select RUN AS (admin)

(If youve already run malwarebytes, goto LOGS and post the WHOLE of the log, then UPDATE it and run a FULL scan as above)

GunJack

reboot your pc in safe mode with networking (keep tapping F8 on startup to get the options) and try from there

:wave: @ RIK - almost synced postings !!

susi

Ok thanks for that, have run the quick scan on malwarebytes and its saying no malicious items were detected, here is the report
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4372
Windows 6.0.6001 Service Pack 1
Internet Explorer 8.0.6001.18928
30/07/2010 23:59:10
mbam-log-2010-07-30 (23-59-10).txt
Scan type: Quick scan
Objects scanned: 136422
Time elapsed: 11 minute(s), 43 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)

However my AVG is still saying there is??????? Should I still continue with the second one???

bat999

susi wrote: »

Should I still continue with the second one???

Yes, it will show which programs are running.

closed

what files are identified as a threat?

sassy_one

I would recommend going to your GP, and lots of rest as anti-biotics don't work well for viruses

susi

I have installed Hyjacker but when I try to run it its saying "For some reason your system denied write access to the hosts file. If any hyjacked domains are in this file Hyjack this may NOT be able to fix this". It then tells me to edit the file myself by exiting Hyjack, right clicking the icon and using run as administrator but for some reason I cant do this (the option dosent even come up)

macman

OP, why are you still on SP1? Once clean you need to run several years of Windows Updates to secure your PC properly.
And uninstall AVG and use a decent AV program (Kaspersky, Avira,MSE).

susi

Ok at the ristk of sounding really stupid.......what is SP1???? I am a complete idiot when it comes to the techie stuff, know how to use a computer and thats about it. Please enlighten me?

macman

SP = Service Pack. You are currently running either XP SP1 or Vista SP1 (the latter I hope, as that means it's only about 2 years out of date)? XP is curently on SP3 and Vista on SP2.
When your system is clean you need to run Windows Updates manually from the Start menu to pick up all the software updates you don't have installed. Many of these are important security fixes, which may explain why you are infected in the first place.
Then make sure you have Windows Updates set to Automatic in Control Panel.
You will probably need to run WU several times to pick up the backlog. But not until your system is clean.
And ditch AVG-it's useless.