We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
The Forum now has a brand new text editor, adding a bunch of handy features to use when creating posts. Read more in our how-to guide

help Antivirus is on laptop

I just started my laptop and it's somehow got 'antivirus is' on it and it started popping up viruses left right and center. I managed to stop it running but how do I now remove it from my laptop. malwarebytes didn't find anything
Nothing to see here, move along.

Comments

  • Donnie
    Donnie Posts: 9,862 Forumite
    Let us see the Malwarebytes log. It will be under 'Logs'. Open the text file for today's date and paste the contents here.
  • dogmaryxx
    dogmaryxx Posts: 2,446 Forumite
    Part of the Furniture 1,000 Posts Name Dropper
    Save http://dl.surfright.nl/HitmanPro35.exe to desktop
    Then Hold down the left CTRL-key when you start Hitman Pro and all non-essential processes will be terminated, including the malware process before the scan.
  • neilwoods
    neilwoods Posts: 2,304 Forumite
    Could always do a search for a removal tool. Took all of 5 seconds to find one.

    http://www.2-spyware.com/remove-antivirus-is.html
    Mansion TV. Avoid at all cost's :j
  • yes but how do i know the antivirus tool is another load of crap that will infect my laptop even more
    Nothing to see here, move along.
  • The_Grandmaster
    The_Grandmaster Posts: 1,424 Forumite
    Part of the Furniture Combo Breaker
    edited 1 October 2010 at 3:10PM
    I probably won't use the link (2-spyware) given above. McAffee users have mixed opinion... 2-spyware.com | McAfee SiteAdvisor Software – Website Safety Ratings and Secure Search Lets see what malwarebytes finds for accessing the site...

    Anyway:

    Do what dogymarxx says. Then install malwarebytes:
    Download Malwarebytes Anti-Malware 1.46 - FileHippo.com
    go to UPDATE tab, CHECK FOR UPDATES, then a QUICK SCAN first... Post log here.

    Download HijackThis 2.0.2 - FileHippo.com
    Install and DO A SYSTEM SCAN AND SAVE LOGFILE. Post log here.
  • fiddiwebb
    fiddiwebb Posts: 1,806 Forumite
    Try what dogmary suggested first.
  • You will have to bear with me my internet is slow and it takes ages to download stuff
    Nothing to see here, move along.
  • Donnie
    Donnie Posts: 9,862 Forumite
    You will have to bear with me my internet is slow and it takes ages to download stuff

    Why would you have to download stuff if you say that you already have Malwarebytes? Where are the logs?
  • Coveredinbees!!!!
    Coveredinbees!!!! Posts: 3,960 Forumite
    Part of the Furniture 1,000 Posts Name Dropper Photogenic
    edited 1 October 2010 at 5:46PM
    I already said malwarebytes found nothing, hitman pro found the problem and fixed it. thanks.

    But then due to iggle piggle being on the TV I ran malwarebytes again and it found something so here is the log

    Malwarebytes' Anti-Malware 1.46
    https://www.malwarebytes.org

    Database version: 4727

    Windows 6.0.6002 Service Pack 2
    Internet Explorer 8.0.6001.18943

    01/10/2010 18:41:04
    mbam-log-2010-10-01 (18-41-04).txt

    Scan type: Quick scan
    Objects scanned: 134989
    Time elapsed: 12 minute(s), 48 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 1
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{2b357a1e-d37b-796b-5b86-f42536ff152e} (Trojan.ZbotR.Gen) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
    Nothing to see here, move along.
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 353.8K Banking & Borrowing
  • 254.3K Reduce Debt & Boost Income
  • 455.2K Spending & Discounts
  • 246.9K Work, Benefits & Business
  • 603.4K Mortgages, Homes & Bills
  • 178.2K Life & Family
  • 260.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.