Malware 32 blaster worm- please help:(

schofy

My mum has somehow managed to what appears to hve allowed some malware on to her computor, it lists itself as as blaster worm 32, constantly prompts you to downlaod some soft ware from a malware protection link and will not allow me open any anti virus programs, windows defender or allow me to open system restore to take it back to a safe time.
ive tried downloading various programs from microsoft, symantic and hippo but it will not allow them to open.
is my only hope wiping the hard dive, backing up everything of their pc will be a right pain if i have too
if anyone has any help it would be gratefully accepted

RussJK

See if you can copy over rkill, and run that first. Then you might be able to run other programs, such as malwarebytes anti-malware. Sometimes you need to rename rkill to something else, in order to fool the malware:
http://www.bleepingcomputer.com/download/anti-virus/rkill

Also I have it hosted here under two false names in case you get redirected:
http://www.users.on.net/~russ/iExplore.exe
http://www.users.on.net/~russ/eXplorer.exe

An alternative is to try HitmanPro in breach mode, which is done by holding down LEFT CTRL as you run it:
http://www.surfright.nl/en/hitmanpro

You can copy files over with a USB stick or preferably burnt to a CD if you have trouble downloading it direct from hers. Using a USB stick means that you could infect your own computer, so if you are copying files over from a healthy computer, then I'd double check your security first. What do you have protecting it? Have you set heuristics to the highest? Have you turned off USB autoruns (google it)?

schofy

cheers mate but non of them worked, just says each program i download is infected and i should take action to remove it
its really starting to do my swede in, to be fair my computor program knowledge is basic joe bloggs so i do appreciate the help
what happens if i do click on the link, will it just take me to site but allow me access again or is that just wishfull thinking

RussJK

So when you try to run them, it prevents it? Even doing the LEFT CTRL while loading HitmanPro?

Has it prevented running the computer in safe mode with networking? (starting, hit F8)?

schofy

yes i held the left ctrl down, didnt make a difference said the film was infected, tried rebooting, tapping f8 continuosly did nothing, this sucker is a bad one not impressed

stilltheone

Operating system?

RussJK

Well feel free to try a bootable antivirus, such as Avira or Dr Web. Basic instructions and a long list of them are in this thread:
https://forums.moneysavingexpert.com/discussion/comment/41653210#Comment_41653210

Hopefully one of them will pick it up. You'll also want to make a recovery disk for the particular version of Windows.

jason_bourne_3

You can try to install Kaspersky virus removal tool on usb drive(not very sure it is possible) or on your harddrive.You can find it here:www[dot]kaspersky[dot]com/virusscanner
How to protect your compurer after disinfection here: support[dot]kaspersky[dot]com/faq/?qid=193238617
If you cannot start antivirus software on your computer , you can try "live" Kaspersky Rescue Disk 10 (first link) .

PS:both tools are free

schofy

i managed to get comp to boot into safe mode, no idea why it wouldnt before.
system restored it to last week when i know it was alright then and re-started it.
i can now get into programs, including the anti virus and malware program that so far has found 17 items that have quarantined and removed. I'm gonna leave it running and go home and check on it tomorrow. do you think i may have solved it. interesting enough since taking it back a week i notice its aftera java update which according to my mum, she may have updated during the last time i looked at it for her. could this malware been on the back of this??
thank you so much for all advice, i am still gonna check on those removal sights, i appreciate all the help.
time for some tea me thinks

The_Grandmaster

Post a log on here when done so someone can look at it. They might advise you run other scans depending on the results.

schofy

well i have returned and the system restore seems to have solved the problem, well i hope it has, the pop up of malware 32 blaster worm thing has gone and i can access any all programs again and i have run a full virus/malware/root kit etc scan with the AVG anti virus thing on the comp and run windows defender, both have shown clean results.
i do realise these are not meag great tools but its hopefully a good start
what do you mean by posting a log?? please forgive my basic computor knowledge.