smart virus please help

Monkeymagic

Please can anyone help. was browsing internet on google chrome when mcafee warned it had blocked trojan. happend twice more then chrome closed and got about 30 write fault error mesages. then most of desktpp disapeared and got a message to say hard drive at risk and should scan. clicked that and got this smart thing which wants me to pay to fix. am now on fone so have searched and can see its virus. saw some fixes on youtube but some coments say fixes come from virus people. please help- i dont know what to trust and am least techy person likely to meet :-(

waddler_8

Smart protection?

Scroll down to "Automated Removal Instructions for Smart Protection 2012 using Malwarebytes' Anti-Malware:"

http://www.bleepingcomputer.com/virus-removal/remove-smart-protection-2012

Follow steps 1 - 27.

john1

Also you could try



http://www.sophos.com/en-us/products/free-tools/virus-removal-tool.aspx

waddler_8

The malware blocks executables from running.

waddler_8

Removal instructions for another piece of "smart" malware.

http://www.bleepingcomputer.com/virus-removal/remove-smart-hdd

same as previously, scroll down to "automated removal instructions....." and follow the steps.

Monkeymagic

Thank you so much waddler8, having trouble with saving hosts file( step 24 i think pf your first link). As its nearly 1am will admit defeat for tonite and try again in the morn.

waddler_8

What OS (XP, Vista, 7) and what browser (Chrome?) are you using to do it - where is it exactly that you are having difficulty? Explain in as much detail as you can and we'll see what we can do.

I take it you've been successful in removing the malware?

Figment

You need to change the properties of the hosts file to make it writeable.

waddler_8

That shouldn't make a difference. You're deleting it & replacing it rather than altering it.

Monkeymagic

Thanks so much waddler_8. have just tried again being less tired and managed to get past the stage i was stuck at. yes i got rid of the 6 objects in the malware. i followed the instructions to restore all my icons etc and that too has worked. just going to do the last stages (Secunia PSI) in a minute, what a relief. really grateful to you. i guess i will see over next couple of days if it has left any problems behind. just one more question, should i leave all those things i have had to download during the process on my desktop, or should i delete those now?

waddler_8

You can delete rkill, tdsskiller, hostsperm & unhide.

Keep malwarebytes installed and keep it updated running quick scans with it every now & then.

Rather than install secunia psi, there's an online scanner that does the job (osi).

http://secunia.com/products/consumer/osi/online/

Out of interest, did tdsskiller find anything?