Help Please Laptop Infected

patman99

The other thread has a few 'errors'.
This is the correct way to do it (having done over a dozen this week).

1. Using alternative PC, download 'Malwarebytes', 'Rkill' (all named variants) AND the appropriate 'HOSTS' file for the effected version of Windows.

2. Burn to CD (no chance of virus copying itself across as it is a read only media)

3. Boot infected PC into Safe mode (repeatedly tap 'F8' until you get a screen with a 'menu' appear, then using arrow keys, highlight 'Safe mode with Network support')

4. Insert CD and copy 'Rkill' to your desktop. In Win. XP, go to 'Start' and select the 'Run' menu item, then enter '%Userprofile%\Desktop. For Vista/7, click on 'start', then enter the same command in the 'Search' box. Run Rkill. Do NOT reboot PC afterwards.

5. Fire-up Internet Explorer.

6. Within IE, go to 'Tools'->'Inernet options'. In the dialogue box that opens, select 'Connections', then 'Lan Settings'. Un-check 'Use a Proxy Server'. Click 'OK'

7. Install and update Malwarebytes (Rkill will have stopped the rogue software running and the IE fix will allow the update to download and install).

8. Run a FULL scan with Malwarebytes (will take a while), tick and remove EVERYTHING it finds.

9. Download and run hosts-perm.bat this unlocks your Windows Hosts file and allows you to replace it with the new 'Hosts' file you downloaded earlier.

10. Delete your current 'Hosts' file from 'C:\Windows\System32\Drivers\etc\' and copy across the new 'Hosts' file you downloaded earlier.

Reboot and enjoy!!!.

sunshine01

Thank you so much for such detailed instructions. unfortunately I dont have access to another computer, until Monday is there another way around it, or will it besafe to leave until then. I have tried to reload malware and download Rkill, but the exe. message comes up again. many thanks

sunshine01

Just tried to go into the safe mode, and F8 brings up operating system, and says you can chose options to open with, but there is nothing there only a big gap.
The only way of progressing further is to click on operating system and it opens.

patman99

You should have a list of your Operating systems, above this should be a list something like this -

Safe Mode
Safe Mode with Network Support
Command Line only

Last Good boot

Start Windows normally


If your normally get a menu when you boot asking you to select your O/S, then you need to select your O/S, then hit 'F8'

beachlou

I can't get onto the internet in safe mode so I can't download malwarebytes. I have downloaded it to my USB stick (have no disk drive on my alternative laptop) & have tried to run it but the virus is still there. ANy ideas on where to go from here? Thanks

fillyfop

I'm another me too!!

Became infected when I logged into my hotmail account last night. I've run through the list of what to do on my infected laptop (on my desktop now), but I'm stuck at the last step on downloading a new HOST. It won't let me save it back in the C:\windows\system32\drivers\etc\ location. Where should I save it?

I rebooted and tried again, but still didn't work. Evrything looks back to normal but slower and a few niggles but I'm assuming that's because I hven't saved the HOST in a suitable place....currently in my documents

Thank You.

fillyfop

beachlou wrote: »

I can't get onto the internet in safe mode so I can't download malwarebytes. I have downloaded it to my USB stick (have no disk drive on my alternative laptop) & have tried to run it but the virus is still there. ANy ideas on where to go from here? Thanks

I did the whole process in normal mode. It wouldn't let me access the malware program in safe mode.

Browntoa

fillyfop , you need to start your own thread , each repair is unique to the pc infected

beachlou , you need to download all the variants of Rkill , see post 12, onto the usb drive and run them on by one until a black sqaure box opens and it runs...then try malwarebytes agian

beachlou

Browntoa wrote: »

fillyfop , you need to start your own thread , each repair is unique to the pc infected

beachlou , you need to download all the variants of Rkill , see post 12, onto the usb drive and run them on by one until a black sqaure box opens and it runs...then try malwarebytes agian

Thanks, will try again. Sorry to be a major pain. Is this in safe mode or normal mode to run rKill?

beachlou

I have run all the variants. They all initially come up with a black screen, then come up with a file log stating that 'processes terminated by Rkill or while it was running' Does this mean it didn't work?