What is this???

xxlaurissaxx

I was checking my hotmail account and didn't go into anything dodgy but suddenly I started getting messages popping up saying I had a virus and trojan and needed software. I instantly started running AVG malware but im guessing it was the virus that closed it down as it stopped after 1 minute and disappeared from my screen, then the messages about software started popping up again and started to install something which I ended then shut my laptop down and started again in safe mode.
I have ran AVG again (full scan) and Spybot search and Destroy but both havent found anything. Do you think my laptop is safe or should I get a different anti virus/spyware and run again?

Sorry Im rubbish with techie stuff and dont have a clue what to do. (Im still in safe mode just now).

Any help would be really appreciated.

xxlaurissaxx

aliEnRIK

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan

reboot
Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)
If you get a message that you cant write to the hosts file then Press the SHIFT key, and whilst holding it RIGHT CLICK and select RUN AS (admin)

xxlaurissaxx

Thank you. I will do that when I get home from work tonight at 10.

xxlaurissaxx

Just tried to run the malware and hijack this but it wont let me download them in safe mode and when I tried without safe mode it just kept disappearing and wouldn't let me run it. Is there anything else I can do? Im really panicking, its my OH's laptop and all his work is on here

Thanks

debitcardmayhem

xxlaurissaxx wrote: »

Just tried to run the malware and hijack this but it wont let me download them in safe mode and when I tried without safe mode it just kept disappearing and wouldn't let me run it. Is there anything else I can do? Im really panicking, its my OH's laptop and all his work is on here

Thanks

Laura follow this re rkill and then post your logs here http://www.bleepingcomputer.com/virus-removal/remove-system-tool

xxlaurissaxx

debitcardmayhem wrote: »

Laura follow this re rkill and then post your logs here http://www.bleepingcomputer.com/virus-removal/remove-system-tool

Thank you. Should I do this in safe mode or should I run it in normal mode?

Thanks

debitcardmayhem

xxlaurissaxx wrote: »

Thank you. Should I do this in safe mode or should I run it in normal mode?

Thanks

If you can run it in normal great if not go into safemode with networking. Make sure you click on the Update Tab in Malwarebytes before clicking scan.

fiddiwebb

Try in normal mode first.

When you tried to download Malwarebytes in safe mode did you use "safe mode with networking" ?

debitcardmayhem

Also make sure you try all of the rkill variants posted on bleeping computer site, sometimes they catch sometimes not.

xxlaurissaxx

I have tried running it in safe mode with networking and it couldn't so tried in normal and it wont even start running. The "thing" keeps closing it down and trying to scan my computer and coming up with loads of different file names that are supposidly infected, saying there are 37 trojans etc. What would be the next best thing to do? I really am starting to worry that its alot worse than I though

Thanks


EDIT - Just been reading the other threads. I have the system tool virus too

I ran MWB full scan in safe mode with networking after I updated it and it came back clear. I also ran spybot S&D and that came back clear.

Whats the next steps?

Thanks so nmuch for everyones help so far. xx

debitcardmayhem

Post your Malwarebytes log please laura (its on the Logs Tab)