Help got virus etc on laptop and no antivirus in place

an1179

Hi

DS was using laptop and Mcaffee ran out. He got a message and downloaded 'an update' which turns out to be a Virus

This message is on the screen

Warning!
Your're in Danger!
Your Computer is infected with Spyware!

All you do with your computer is stored forever in your hard disk. When you visit sites, send emails... All your actions are logged. And it is impossible to remove them with standard tools. Your data is still available for forensics, and in some cases
For your boss, your friends, your wife, your children. Every site you or somebody or even something, like spyware, opened in your browsers, with all the images, and all the downloaded and maybe later removed movies or mp3 songs - ARE STILL THERE and could break your life!

Secure yourself right now!
Removal all spyware from your PC!

I have been trying to download and follow a previous problem similar to mine but I have got Spyware Docto asking for me to register and purchase a programme . This is from the first link on the following quote. I have downloaded the programmes in safe mode. I have no antivirus software now as the pcdoctor deleted mcaffee
What a Mess!!! Help Please

[FONT=&quot]http://forums.moneysavingexpert.com/...=newpm&u=17007
(Quote Browntoa)

You can fix it , you need access to another pc (friends ??)

download all variants of Rkill

http://www.bleepingcomputer.com/forums/topic308364.html

you may need to try all of them before you find one that works

download malwarebytes

http://www.filehippo.com/download_ma..._anti_malware/

and its update file

http://data.mbamupdates.com/tools/mbam-rules.exe

and combofix in case you need it later

http://www.bleepingcomputer.com/comb...o-use-combofix

put them ALL on a usb drive or burn to a CD on the other pc

run Rkill first

then install malwarebytes , then run the update file

do a full scan with malwarebytes and fix all it finds , then post the log file it produces at the end back here(you will probably have internet access etc back on the infected pc by then

only run combofix if I or AlienRik tells you [IMG]file:///C:/DOCUME%7E1/NASHPC%7E1/LOCALS%7E1/Temp/msohtmlclip1/01/clip_image001.gif[/IMG]
(Unquote)

[/FONT]
HELP please

Browntoa

you need to download the stuff on a clean PC , download all the variants of Rkill and keep trying them on the infected laptop until one of them runs ( you get a black window open up if it runs)

then install malwarebytes and run that ( should run after rkill has done its bit )

will run combofix if its needed after you have posted the malwarebytes log file

an1179

[FONT=&quot]Hi There thanks you for your reply

Have got a desktop pc nearby have downloaded [/FONT]
[FONT=&quot]Spyware Doctor® with AntiVirus 2011 for Windows[/FONT]
[FONT=&quot]Tried downloading onto a DVDR first but it would not do that so DL to this PC and tried to transfer but don't seem to be able to.

Tried downloading onto a DVDR first but it would not do that

Get the mnessage 'windows experienced a problem when trying to download this form
PC tool smart alert
Wave Sound
Avdb

[/FONT]

Maverick1984_2

I've worked for an independent IT consultancy company not too long ago and one of the things they used was 2 programs which worked wonders...

Use a bit of software called Malwarebytes. This bit of software tends to clean up all surface level infections which most of the time does the trick.
If the problem is more prominant however, use a tool called Combofix which is also free. It's a utility which will only run in safe mode and cleans all low level spyware on registry level.

Lastly, for AV software. use ESET NOD32. It's one of the best AV solutions in the market at this moment in time and have had no computer issues using it. I have it running on my PC and MAC

an1179

Thank you Maverick1984 I am having problems getting any of these 'clean up' programmes onto the laptop it seems to infect them also.
I am following Browntoas instructions at the moment to see if that works

santer_2

If you are unable to install anything yet, try using a rescue disc to clean the system

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

Maverick1984_2

If thats the case, then re boot your laptop in safe mode with networking first in order to prevent anything from starting up at boot level, then download and run combofix.

Hopefully this should clear off anything low level that you're experiencing.

If this works, then do a quick scan with Malwarebytes to clear off any left over rubbish. From what you're saying, i think running in safe mode should do the trick as most spyware will not run on that level, unless it's a full fledged virus which is unlikely as it's very rarely seen now.

an1179

I did download programmes to laptop in safe mode then the request for payment came up . I need to transfer the files I have downloaded onto my pc ontio a DVDR to put into laptop but having problems with that at the moment. Not sure where I am going wrong tried highlighting and moving to DVDR - not working tried highlights cut/paste not working.

duchy

Another vote for Malawarebytes.
My neighbour came knocking on my door in a panic (I work in broadband support) as their PC wouldn't work. None of the usual solutions would work -so I ran malawarebytes and it cleaned it right off (sounds like a very similar trojan problem even down to the wording).
I downloaded the program off the net from my own PC onto a memory stick and installed it onto their PC -it cleared everything although took a while to run. (I had the same problem installing some of the other "solution" programs as the OP)

I installed AVG free as a stop gap and all was well.

Maverick1984_2

In that case, do a full scan with Malwarebytes and see if that helps... Ignore the messages and simply run the software.

Try clearing your System Restore history as well as that tends to cause massive problems.

an1179

Thank you all -

I am having problems getting the programme which I have downloaded onto my desktop onto a DVDr and then onto my lap top - any suggestions or point by point directions onhow to do this