virus on laptop help please

GreenNotM

SpywareKnight is a rogue antispyware application that uses aggressive advertising, popups, and Internet Explorer start page hijacking. Popups will display alerts stating that you are infected with various malware including one called Win32.Trojan.Dropper. If you start Internet Explorer your homepage will be about:blank and contain text stating that you are infected with Trojan.DLoader/LX and that you should install either Spyware Knight or SpySoldier to remove it.


Is the above the type of message you are getting ? What is IE's home page ?

http://www.bleepingcomputer.com/forums/topic76548.html

helen1014

GreenNotM wrote:

SpywareKnight is a rogue antispyware application that uses aggressive advertising, popups, and Internet Explorer start page hijacking. Popups will display alerts stating that you are infected with various malware including one called Win32.Trojan.Dropper. If you start Internet Explorer your homepage will be about:blank and contain text stating that you are infected with Trojan.DLoader/LX and that you should install either Spyware Knight or SpySoldier to remove it.


Is the above the type of message you are getting ? What is IE's home page ?

hiya yes that is what is happening,it says about the spysoldier,ie homepage is still on wannadoo at the moment

albertross_2

http://www.ewido.net/en/

http://www.microsoft.com/athome/security/spyware/software/default.mspx

then..

and see if it is in add/remove programs.

GreenNotM

Seem smitfraud.exe will be needed too How To Remove Spywareknight (removal Instructions)


and for How To Remove Spysoldier (removal Instructions)

Helen - once you have uninstalled the programme from add/remove programs follow the instructions on the links above - goodnight and good luck ...

helen1014

hiya,
looked in add/remove prog,no sign of it in there,still went ahead and followed the instructions to the end will let you know ????????? ta again. :beer:

helen1014

hiya yes im back yet again,
hubbys has still got something on there ,father in laws seems ok now hubby just wiped it clean ,but he cant do it to his as it has all his work stuff on there,the web page he goes on to it changes it,it changes existin web page with a web address of www.online-security-centre.com/spy_detect/,but the web page tab is sayin this page cannot be displayed.the actual webpage is sayin attention virus detected ,it says the virus is trojan.DLoader/lx,and it reccomends i either download spywarenight or spysoldier,have done wat u said ,also done scan 3 times but no different,HELPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP
:eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek:

Browntoa

use the smitfraud tool as recommended by Greennotm

if that did not work then try smitrem

http://www.pchell.com/support/smitremtutorial.shtml

helen1014

Browntoa wrote:

use the smitfraud tool as recommended by Greennotm

hiya did do that still there,but thanks anyway.:beer:

GreenNotM

helen1014 wrote:

hiya yes im back yet again,
hubbys has still got something on there ,father in laws seems ok now hubby just wiped it clean ,but he cant do it to his as it has all his work stuff on there,the web page he goes on to it changes it,it changes existin web page with a web address of www.online-security-centre.com/spy_detect/,but the web page tab is sayin this page cannot be displayed.the actual webpage is sayin attention virus detected ,it says the virus is trojan.DLoader/lx,and it reccomends i either download spywarenight or spysoldier,have done wat u said ,also done scan 3 times but no different,HELPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP
:eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek: :eek:

Helen - grab the laptop tell him to sit back and relax, as you know what you are doing .... follow the link How To Remove Spysoldier (removal Instructions) and do as it says there - Good luck

GreenNotM

helen1014 wrote:

hiya did do that still there,but thanks anyway.:beer:

Did you run it with system restore off ? Did add/remove programs ? in Safe mode ?