Have Ad-aware, Spywareblaster & AVG (free) but can't get rid of suspected nasty.

Sherbert_DibDab

I have had someone orchestrate a situation where altho password protected they were able to gain access to (password protected) laptop and delete things, as well as some things from my FB (long story). I also didn't notice for a while that my AVG had been uninstalled, and I have had posts taken off FB and had to report it. I don'tknow if they also put something on my laptop (remote access is not enabled). I have reinstalled AVG, Ad-aware & Spyware and run them all, in addition to this they have tampered with my power supply entry point, so I am eager to try and back up what is on here as if I lose power permanently, I lose everything, and this has happened to me a few times recently. At the moment I have only 1 usb port working which is obscured by tape pushing the power adaptor in so I may have to try on disks (if so which ones/size). My portable HD recently broke but I was going to try and see if I could buy a new one and save anything via there as there's some excellent help on here.

I've also had to change all passwords etc and order all new bank cards/internet access etc the only time I have bought anything was 2 days ago from ebay when I bought an adaptor thinking my one had broken, rather than the laptop having an internal problem. Hence I paid by Paypal.

It was only when I was trying to sign into TopCashBack and it didn't allow me to (another person has had this happen mentioned it on relevant thread). That I noticed when it was going to reset my password (which TCB didn't as it said my emailwasn't registered-same prob asanother user) that in my bar at the bottom with a link to a facial library social networking site name followed by something like plugins/fanlotsofnumbers/php/href at the bottom each time I tried that password reset it linked the prob back to FB. I have had AVG abort and send an error report recently a few times as has ad-aware too a few times.

After noticing this I scanned everything again with ad-aware, AVG & updated and turned spywareblaster on.

I need to buy a new laptop as I can't get out due to ill health so it's very important for me to try and buy a laptop (one goes off of secial tomorrow) as well as to try and back this laptop up before it fails completely with everything on it.

Nothing came up with the scans but when I tried TCB again the same thing happened-it's too quick to get to see it properly.

My FB I notified them that someone was accessing it and got told I'd used a link that wasn't true FB. I will check my email now to see what has happened if anything since, but I assume my account is disabled for now.

I need to know how to locate and rid myself of these plug in's, I did have high privacy but the person who accessed my laptop may have altered them. I also don't know whether it's safe for me to buy this replacement laptop online from here. I'm limited because I can't get out to purchase overthe counter, have recently relocated, so the only option is the library which I'd also find difficult.

Can anyone please advise me how to get the plug in off or test the security of this current laptop. I have no idea how long it will work for and I am already quite stressed about it going of completely, so if there's anyone who can assist I'd appreciate it.

I'm on quite high pain killers at the moment so everything seems a lot more complicated than it probably is. If anyone wants to PM me please feel free, I think my settings will allow it on here. It takes ages to type anything as sometimes a slight movement reults in a loss of power and the battery only holds for 16 mins as this laptop is second hand from ebay

The space bar is also broken so apologies if this has been jumbled at times.

Thanks everyone for your time

Knarf44

First suggestion is to download and install the often recommended program Malwarebytes.

Once installed, open it and look for the third tab from the left called "Update". Click the tab then wait for the program to automatically update. It'll tell you when it's completed. Then click the "Scanner" tab and click on "Full scan". It may take a while to complete to please be patient.

When it's finished it'll produce a logfile, a simple text based report which you should copy and paste into this thread.

Next, download and install another recommended program called "Hijack This". After installing and opening the program, click "Do a system scan and save a logfile".

When it's finished, copy and paste the logfile into this thread and wait for further advice.

fiddiwebb

Bloomin 'eck!

Erm....download the latest version of Malwarebytes, once downloaded open Malwarebytes and update it first before running a full scan.
Make sure to let Malwarebytes remove anything it may find after scanning and then post the Malwarebytes log file in your next message.

http://filehippo.com/download_malwarebytes_anti_malware/

JasX

depending on how sneaky they've been i'd be stopping at nothing short of a reformat and rebuild from scratch..... also AVG has historically been a pretty useless anti virus (rumor has it its been getting slightly better recently) but i'd still recommend switching to a more reliable free one.

Also copy stuff off and format your USB sticks. and whatever you do backup everything too scan it several times over with different AV programs.

aliEnRIK

Personally id remove the harddrive and use another computer to retrieve whatever you want of it

Then (in your case) id recommend giving up with it. Either that or format the drive and start afresh and get the power supply/connector/ whatever fixed

I certainly would NOT be using the internet with it. Id also recommend using another computer to change ALL passwords and 'hints' to passwords (making them near impossible to crack, and each important site given a different password. Ebay, Paypal, Emails, Amazon and anything else you may have an account with)

fiddiwebb

So will OP tell us who trashed their laptop, friend, OH?

juliand

Rootkits ( :mad: ) affect the operating system and are very tricky to remove. They can take over core operating system files, and hide even from the best Anti Virus Programs. Sometimes they may be busy sending out emails in the background or monitoring your computer trying to capture you banking details or something.

In addition to having good, up-to-date anti virus software, the key to avoiding Root Kits is not to install anything that you don't recognise on to your computer. So many websites try and trick you into downloading and installing an exe file. This is commonly referred to as "scareware".

When you do this you effectively bypass your antivirus system. Some are very sly. For example a website may tell you that you have a virus, and pop up a realistic window, with a message such as download this to clean your virus, and of course when you do - you actually get a virus. :mad:

I can't post links as I am a newbie - but check these out (add a www. to the beginning)

microsoft.com/security/antivirus/rogue.aspx
zdnet.com/blog/security/the-ultimate-guide-to-scareware-protection/4297
youtube.com/watch?v=T5Hdg_xtqps


As mentioned by Knarf44, malwarebytes is probably the best chance you have of removing it.

Some of these rootkits can cause so much damage, that it is not possible to remove. Worst case scenario you may have to reinstall your laptop.

Therefore I suggest the first thing you do is backup all your important files.

Good luck!

aliEnRIK

Malwarebytes has little chance of removing it. If I thought it would id recommend it
The damage has already been done, trying to fix it at this stage is a tad daft

spakkker

Just buy a £30 system from local classifieds for now. Get the vendor to deliver,set up and show working.

EDIT -did you buy another laptop?

gonzo127

i personally wouldnt buy anything online with your laptop in its current state, this however could be gotten around with a little bit of work and one of the linux distributions, - although maybe not ideal for some people this would work as a temp solution

basically download and burn of one of the ubuntu versions (puppy linux would also work however i have no experience with this version of Linux) once you have burnt it of on CD, change the boot order of your computer to boot from disk drive first and pop the disk into your drive, this will give you the option of 'Try Ubuntu' which runs the entire operating system from the disk and your computers RAM - however if you want it to run quicker you can install it on a 2gb usb stick and run it from that

this should then allow you to access the net with no fear of the virus stealing anything - windows virus's do not work on linux - so you can order your new system, it will also allow you to change all your passwords to all your accounts without the worry of any virus's stealing these new details aswell

Sherbert_DibDab

It was an ex following a hospital appointment I'd been to for a serious set of medical tests.
I can't post the log as I am new and it is seeing it as links.
Will I be able to send it to anyone privately?
I am ill so having to use this in the interim, I'm ringing Tesco about my e voucher exchange for a computer. There's nothing else I can do.