Win 7 Security 2011 $59.95 - Urgent Help Please

stilltheone

If you have problems starting Malwarebytes AntiMalware, try Hitman Pro 3.5


Use this video as a guide.

[Deleted User]

Thank you everyone. It took ages but everything seems to be fine now - I followed your very helpful instructions AND I've learned my lesson. I had to wait a very long time to get through to the Credit Card company but when I did the young man was first class. My card has been cancelled, he has assured me that (not that he said it but despite my stupidity!) I won't be out of pocket. The fraud department will telephone me next week to tie up any loose ends. I have had to have new passwords etc. for my on line banking. INTERESTINGLY the young man at the Credit Card company said that he had already had several people on the telephone to him this evening/early morning reporting exactly the same scam.

Thank you all once again. I was so worried about it and your help has been invaluable.

Crimson

RussJK

Glad you're sorted with the credit card - but keep in mind that you still have the malware on your computer, so your computer is currently unsafe to use for internet banking. Please do the above regarding Malwarebytes, HitmanPro, and HijackThis. If you don't understand the instructions, please ask.

d123

RussJK wrote: »

you still have the malware on your computer, so your computer is currently unsafe to use for internet banking. Please do the above regarding Malwarebytes, HitmanPro, and HijackThis. If you don't understand the instructions, please ask.

+1

Can I also suggest you run malwarebytes in Safe Mode (push f8 as the PC boots) when you do, some of the malware will remain if you run it in a normal boot.

John_Gray

To Malwarebytes' Anti-Malware and HitMan Pro 3.5 I would add (the free edition of) SuperAntiSpyware. Run all three, one after the other, until there are no malware elements found. This will take a long time...

Then run HiJackThis, and post the results, as indicated above.

[Deleted User]

RussJK wrote: »

Glad you're sorted with the credit card - but keep in mind that you still have the malware on your computer, so your computer is currently unsafe to use for internet banking. Please do the above regarding Malwarebytes, HitmanPro, and HijackThis. If you don't understand the instructions, please ask.

Thank you very much. I think I am confused. I thought I had followed the instructions but I wonder if I have not followed them prooerly. I've done my best - but it may not be good enough.

The Update Checker does not seem to work - although the icon has appeared. HiJackThis icon is on and seems to work. Malwarebytes Anti-Malware is also installed and I think it is all right.

When checking I saw an icon like the one I saw last night (but it may have been a different one.) I have uninstalled Microsoft Security Essentials Product 2.0.657.0 - thinking this was the same as the rogue programme. If it is not and if I need to reinstall it I'll be very grateful for advice, please.

I'm embarrassed to be in such a mess but I really do appreciate all the help I've been given. The truth is that I am not 100% certain that I have been able to follow all the instructions accurately. Any more help will be valued +++. Thank you

Crimson

The_Grandmaster

It may be possible the malware on your computer has prevented malwarebytes from working correctly. So don't worry, we (or someone else) should be able to get you through the steps.

http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2011 is the best instruction on removal but we shall all break it down into small steps.

Can you go to point 3. on the website and download RKILL and complete point 4.
Then you should be able to run malwarebytes or download it etc.

d123

Deleted_User wrote: »

I have uninstalled Microsoft Security Essentials Product 2.0.657.0 - thinking this was the same as the rogue programme. If it is not and if I need to reinstall it I'll be very grateful for advice, please.



Crimson

You should reinstall it, Microsoft Security Essentials is your antivirus program.

[Deleted User]

The_Grandmaster wrote: »

It may be possible the malware on your computer has prevented malwarebytes from working correctly. So don't worry, we (or someone else) should be able to get you through the steps.

http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2011 is the best instruction on removal but we shall all break it down into small steps.

Can you go to point 3. on the website and download RKILL and complete point 4.
Then you should be able to run malwarebytes or download it etc.

Hello GrandMaster -

I followed the instructions and this came on screen. Does this mean that it was unsuccessful?

"This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 08/05/2011 at 16:17:42.
Operating System: Windows 7 Home Premium


Processes terminated by Rkill or while it was running:

C:\Windows\SysWOW64\InfDefaultInstall.exe
C:\Windows\SysWOW64\runonce.exe


Rkill completed on 08/05/2011 at 16:17:51. " - or is it all right?

I am just about to download Hitman Pro 3.5 - I am trying and I appreciate all the help, thank you.

RussJK

Deleted_User wrote: »

Thank you very much. I think I am confused. I thought I had followed the instructions but I wonder if I have not followed them prooerly. I've done my best - but it may not be good enough.
When checking I saw an icon like the one I saw last night (but it may have been a different one.) I have uninstalled Microsoft Security Essentials Product 2.0.657.0 - thinking this was the same as the rogue programme. If it is not and if I need to reinstall it I'll be very grateful for advice, please.
Crimson

Hello. We can't tell if you have followed the instructions or not, because we haven't seen any of the Logs.

No problem, just go through each and complete each step one by one. It'll be a bit long and a bit back and forth (depending on what you have done), but I'm guessing you might appreciate more detail. If you don't understand something, please just ask.

1. Did you already run a Malwarebytes scan? and clean what it found? If so, please go into Malwarebytes again, click on the 'Logs' tab, then open the log that shows what you found. It'll open in notepad - all you need to do is copy all the text, then paste it in this thread. Please do this before anything else.

2. Did you run the System Restore, and load a restore point from a date before all this happened? If you haven't, then you really need to that to fix any settings the malware might have changed. Just make sure that the date of the Restore Point is a date before you got the infection.
Here is a guide if you are using Windows XP:
http://support.microsoft.com/kb/306084

Here is a guide if you are using Vista or Windows 7:
http://www.howtogeek.com/howto/windows-vista/using-windows-vista-system-restore/

3. If you do system restore, you may find you may need to reinstall Malwarebytes to be able to run it properly again. If so, you can get the most up to date version here:
http://www.malwarebytes.org/mbam-download.php
Once again, run the Malwarebytes update, then do a full scan this time and clean anything it finds, and please post the log here even if it doesn't find anything.

4. Save this file to your desktop:
http://www.trendmicro.com/ftp/products/hijackthis/HijackThis.exe
Then hold down the LEFT SHIFT button while you RIGHT MOUSE CLICK on the file on your desktop, and select 'Run As Administrator' and hijackthis should load.

5. When HijackThis loads, press 'Run system scan and save log', and it'll do a scan of your system settings. Don't 'fix' anything though.

6. When the log file opens in Notepad, just copy the contents and paste them into this thread and we'll take a look at it.

7. Run HitManPro, and remove anything it finds.
http://www.surfright.nl/en/hitmanpro

8. You'll have to reinstall Microsoft Security Essentials (or another antivirus). I don't want to confuse you with options, so just download it and reinstall it:
http://download.cnet.com/Microsoft-Security-Essentials/3000-2239_4-10969260.html

That should be enough for now. Let us know how you go with each step.