Hi Guys,

My girlfriends computer seems to have picked up something.

It acts like its an AV program calling itself "system tools"...but the layout etc tells me its not official windows..... telling you there are tons of viruses ets and it will fix them...for a cost of course. I'm convinced that the"program" is of course a virus itself.

It's really hampering running avast and I'm lost as to what to do to get rid of the f*****g thing...

Help...any clues what to do...

Thanks,

Alan

Sounds like an IE extension. HijackThis should sort it. Make sure you download it from Trend themselves - it's a free tool. Some of the more dodgy download locations have modified versions that contain more spyware and/or are modified to ignore their particular virus.

Chris

Alan, as she been on eBay ?

You need to turn off the PC, switch back on pressing F8 which takes you to system restore, restore to a saved date well before the infection.

If she as clicked on it it may well be to far in in that case google it you will find plenty of removal tools.


If anyone else is reading this and your AV tells/warns you of an infection DO NOT click on any of the warnings, top right corner red X click click and click then close down, you will re start ok.

If you just click once on your AV's bogus warning then its probably in its not your AV warning you its the Malware trying to get in.

Known carriers of it

ebay, auto trader, face book, amazon, the Malware is attached to adverts not peoples listings the adds that these sights pop up all over the place,

i have just sent you a email with a tool this should sort it out for you

I had this last week.
Being a 'puter numpty, I googled 'System tools' and found a remedy which I could understand in layman's terms..
It involved starting laptop in safe networking mode which then allowed me to download Malwarebyte's free anti-malware from without 'system tools' blocking it.
Once installed, ran the anti-malware and it cleared it.

HTH,
Andy.

Download malwarebytes on another computer and put it on a usb key. Start the infected computer in safe mode (tap F8 key while starting windows) with network support and insert the usb key, install malwarebytes and up date it then run a full scan and delete whatever it finds. Malwarebytes program

Cheers guys......

Excellent and very quick advice.....


Thanks

I had it too the other week. Seemed to come from Ebay as Avast started flashing and sounding, was a bit late though as I was experiencing symptoms already. I downloaded a programme called search and destroy and that semed to sort it.

I give anther vote for malwarebytes

I had this last weekend. the f8 key on startup didnt work, i had to re start from the last update before the computer was infected.
It managed to disable AVG. Virus came from an add on the auto trader website.

[Edited on 5/3/11 by kenton]

[Edited on 5/3/11 by kenton]

+1 for malwarebytes

I've fixed three PC's with this just in the last week. Seems to be getting more and more common. It's quite crafty but follow the advice given, no point in me repeating it!

Same here had the virus yesterday, cleaned it up but it is back again

just trying to get rid of it now.

ditch

<smug mode>

Linux has its advantages...

</smug mode>

<not-so-smug mode>

...but I'm sure that one day it'll happen!

</not-so-smug mode>

I had it last week, malwarebyte sorted it