Laptop, worm, virus, trojan. Please Help.

vanilla

Hi everyone, i really need your help....
Laptop working fine this morning but then i got a message stating the laptop was infected. I ran spybot which showed up 3 thing so i selected fix all.

Now i keep getting a message from security tool which say's.....
Google ToolbarUser_32.exe is infected with Lemena.3544. This worm is trying to sent your credit card details using GoogleToolbarUser_32.exe to connect to remote host.

Then the next message will use a different name of a virus but still state about the credit card details being sent.

Any help, advice would be great but i'm not to well up on computers.

Many thanks.

aliEnRIK

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)
If you get a message that you cant write to the hosts file then Press the SHIFT key, and whilst holding it RIGHT CLICK and select RUN AS (admin)

fiddiwebb

Now i keep getting a message from security tool which say's.....

Which security tool?

I assume its a rogue security programme that has downloaded onto your machine.

Download (from filehippo.com), update and run a full scan with Malwarebytes and post the log file in your next message.

hubert_cumberdale

its the same old security tools virus

malwarebytes will sort it you may have to do it in safe mode as it can depending on the strength of it prevent you from running any .exe's

when entering safe mode i had to open task manager very quickly and end the security tools task before it initilised then malware bytes could be run and do its thing

vanilla

aliEnRIK wrote: »

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)
If you get a message that you cant write to the hosts file then Press the SHIFT key, and whilst holding it RIGHT CLICK and select RUN AS (admin)

I've downloaded this but when i click it ask's if i allow this program and i click allow then the security tool comes up and nothing else happens.

fiddiwebb wrote: »

Now i keep getting a message from security tool which say's.....


Which security tool?

I assume its a rogue security programme that has downloaded onto your machine.

Download (from filehippo.com), update and run a full scan with Malwarebytes and post the log file in your next message.

It just say's security tool..

hubert_cumberdale wrote: »

its the same old security tools virus

malwarebytes will sort it you may have to do it in safe mode as it can depending on the strength of it prevent you from running any .exe's

when entering safe mode i had to open task manager very quickly and end the security tools task before it initilised then malware bytes could be run and do its thing

I've tried F8 but nothing happens.

dogmaryxx

Run FIXEXE http://download.bleepingcomputer.com...010/FixExe.reg

then try Malwarebytes again

vanilla

dogmaryxx wrote: »

Run FIXEXE http://download.bleepingcomputer.com...010/FixExe.reg

then try Malwarebytes again

It say's it cannot display this webpage. When i try Malwarebytes the security tool pop's up and say's malwarebytes is infected.

dogmaryxx

Try link again now working

stilltheone

vanilla wrote: »

Hi everyone, i really need your help....
.

Hitman Pro in Breach Mode.

If you are running a 32 bit OS, download and save Hitman Pro to your Desktop(or USB drive if necessary).

For 64bit OSes, click here

Once saved, hold down the Ctrl key situated on the left of the keyboard whilst double clicking on the Hitman Pro .exe file in order to start the program. Then follow the simple instructions.

Here is a video guide for your edification:

http://www.youtube.com/watch?v=m6eRWTv2STk&feature=player_embedded

vanilla

dogmaryxx wrote: »

Run FIXEXE http://download.bleepingcomputer.com...010/FixExe.reg

then try Malwarebytes again

I got it this time, so i hit run then allow then continue. Then an exclamation came up in a triangle with stuff wrote beside it but it was too quick to read.

vanilla

stilltheone wrote: »

Hitman Pro in Breach Mode.

How do i know if it's a 32 or 64 bit, i really know nothing about computers..