Think my computer has been infected

harvey1964

It says "shared documents" -6 virus' found
hard drive -9 virus' found
my documents - 3 virus' found
below that it says windows security -security is affected by virus....
a pop up keeps saying trojan horse blocked........
I have avast security system installed
Help...what shall I do ?
can i run something to check or erase

RussJK

Most likely it is something like the System Tools infection giving the fake virus warnings:
http://www.bleepingcomputer.com/virus-removal/remove-system-tool

The trojan blocked message is probably real, and would be the realtime 'behaviour' guard of Avast stopping the trojan from fully installing itself.

Follow the steps in the above link, or for easier steps try these from Aerostar:
https://forums.moneysavingexpert.com/discussion/3093804

Let us know exactly what you do and what effect it has, and post any logs here in this thread.

closed

If this has just happened, close your browser, do a system restore to yesterday, and reboot, then do a FULL scan with malwarebytes

harvey1964

closed wrote: »

If this has just happened, close your browser, do a system restore to yesterday, and reboot, then do a FULL scan with malwarebytes

how do i do this ?
thanks

closed

http://support.microsoft.com/kb/306084

harvey1964

RussJK wrote: »

Most likely it is something like the System Tools infection giving the fake virus warnings:
http://www.bleepingcomputer.com/virus-removal/remove-system-tool

The trojan blocked message is probably real, and would be the realtime 'behaviour' guard of Avast stopping the trojan from fully installing itself.

Follow the steps in the above link, or for easier steps try these from Aerostar:
https://forums.moneysavingexpert.com/discussion/3093804

Let us know exactly what you do and what effect it has, and post any logs here in this thread.

sorry do i go into the tools option on top of computer to do this.....
i clicked on the 2nd link above in mse

RussJK

harvey1964 wrote: »

sorry do i go into the tools option on top of computer to do this.....
i clicked on the 2nd link above in mse

The second link assumes that you have the fake AV warning like this one:
http://www.bleepstatic.com/swr-guides/s/system-tool/system-tool.jpg

The System Tool is a scam that pretends to find infections, and asks for money to 'fix' them. The registration codes actually do deactivate it, allowing for removal with Malwarebytes.

If yours doesn't look like that then follow the other link, or follow Closed's advice if you have a restore point to fall back on.

harvey1964

not sure what to do...have tried the links above but not sure what i am looking for......or doing ?
the trojan message has not re-appeared again since i have logged back on

closed

Full scan with malwarebytes and kaspersky, fix anything found before closing

http://www.filehippo.com/download_malwarebytes_anti_malware/


http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/

harvey1964

Just running the spyhunter 4 now...it has already found 86 threats to my computer and many harmful malware infections....but to have them removed it says you must purchase the full version ? is this right ? do you have to pay to get these removed ?

RussJK

harvey1964 wrote: »

Just running the spyhunter 4 now...it has already found 86 threats to my computer and many harmful malware infections....but to have them removed it says you must purchase the full version ? is this right ? do you have to pay to get these removed ?

Why are you running "spyhunter", and where did you get it from? It's a rogue app, and no one in this thread asked you to run it.