Printable Version | Subscribe | Add to Favourites
New Topic New Poll New Reply
Author: Subject: Virus help...please
Alan B

posted on 5/3/11 at 02:01 PM Reply With Quote
Virus help...please

Hi Guys,

My girlfriends computer seems to have picked up something.

It acts like its an AV program calling itself "system tools"...but the layout etc tells me its not official windows..... telling you there are tons of viruses ets and it will fix them...for a cost of course. I'm convinced that the"program" is of course a virus itself.

It's really hampering running avast and I'm lost as to what to do to get rid of the f*****g thing...

Help...any clues what to do...

Thanks,

Alan

View User's Profile E-Mail User Visit User's Homepage View All Posts By User U2U Member
ChrisW

posted on 5/3/11 at 02:05 PM Reply With Quote
Sounds like an IE extension. HijackThis should sort it. Make sure you download it from Trend themselves - it's a free tool. Some of the more dodgy download locations have modified versions that contain more spyware and/or are modified to ignore their particular virus.

Chris

View User's Profile E-Mail User Visit User's Homepage View All Posts By User U2U Member
Jon Ison

posted on 5/3/11 at 02:11 PM Reply With Quote
Alan, as she been on eBay ?

You need to turn off the PC, switch back on pressing F8 which takes you to system restore, restore to a saved date well before the infection.

If she as clicked on it it may well be to far in in that case google it you will find plenty of removal tools.


If anyone else is reading this and your AV tells/warns you of an infection DO NOT click on any of the warnings, top right corner red X click click and click then close down, you will re start ok.

If you just click once on your AV's bogus warning then its probably in its not your AV warning you its the Malware trying to get in.

Known carriers of it

ebay, auto trader, face book, amazon, the Malware is attached to adverts not peoples listings the adds that these sights pop up all over the place,

View User's Profile View All Posts By User U2U Member
imp paul

posted on 5/3/11 at 02:13 PM Reply With Quote
i have just sent you a email with a tool this should sort it out for you
View User's Profile View All Posts By User U2U Member
andrew.carwithen

posted on 5/3/11 at 02:30 PM Reply With Quote
I had this last week.
Being a 'puter numpty, I googled 'System tools' and found a remedy which I could understand in layman's terms..
It involved starting laptop in safe networking mode which then allowed me to download Malwarebyte's free anti-malware from without 'system tools' blocking it.
Once installed, ran the anti-malware and it cleared it.

HTH,
Andy.

View User's Profile View All Posts By User U2U Member
Peteff

posted on 5/3/11 at 02:30 PM Reply With Quote
Download malwarebytes on another computer and put it on a usb key. Start the infected computer in safe mode (tap F8 key while starting windows) with network support and insert the usb key, install malwarebytes and up date it then run a full scan and delete whatever it finds. Malwarebytes program





yours, Pete

I went into the RSPCA office the other day. It was so small you could hardly swing a cat in there.

View User's Profile View All Posts By User U2U Member
Alan B

posted on 5/3/11 at 02:43 PM Reply With Quote
Cheers guys......

Excellent and very quick advice.....


Thanks

View User's Profile E-Mail User Visit User's Homepage View All Posts By User U2U Member
mistergrumpy

posted on 5/3/11 at 02:54 PM Reply With Quote
I had it too the other week. Seemed to come from Ebay as Avast started flashing and sounding, was a bit late though as I was experiencing symptoms already. I downloaded a programme called search and destroy and that semed to sort it.
View User's Profile View All Posts By User U2U Member
cerbera

posted on 5/3/11 at 03:19 PM Reply With Quote
I give anther vote for malwarebytes






View User's Profile View All Posts By User U2U Member
kenton

posted on 5/3/11 at 04:39 PM Reply With Quote
I had this last weekend. the f8 key on startup didnt work, i had to re start from the last update before the computer was infected.
It managed to disable AVG. Virus came from an add on the auto trader website.

[Edited on 5/3/11 by kenton]

[Edited on 5/3/11 by kenton]

View User's Profile View All Posts By User U2U Member
mad4x4

posted on 5/3/11 at 05:22 PM Reply With Quote
+1 for malwarebytes





Scot's do it better in Kilts.

MK INDY's Don't Self Centre Regardless of MK Setting !

View User's Profile Visit User's Homepage View All Posts By User U2U Member
McLannahan

posted on 5/3/11 at 05:38 PM Reply With Quote
I've fixed three PC's with this just in the last week. Seems to be getting more and more common. It's quite crafty but follow the advice given, no point in me repeating it!






View User's Profile Visit User's Homepage View All Posts By User U2U Member
ditchlewis

posted on 5/3/11 at 07:14 PM Reply With Quote
Same here had the virus yesterday, cleaned it up but it is back again

just trying to get rid of it now.

ditch

View User's Profile E-Mail User View All Posts By User U2U Member
David Jenkins

posted on 5/3/11 at 07:21 PM Reply With Quote
<smug mode>

Linux has its advantages...

</smug mode>

<not-so-smug mode>

...but I'm sure that one day it'll happen!

</not-so-smug mode>






View User's Profile Visit User's Homepage View All Posts By User U2U Member
liam.mccaffrey

posted on 13/3/11 at 10:43 AM Reply With Quote
I had it last week, malwarebyte sorted it





Build Blog
Build Photo Album

View User's Profile View All Posts By User U2U Member

New Topic New Poll New Reply


go to top






Website design and SEO by Studio Montage

All content © 2001-16 LocostBuilders. Reproduction prohibited
Opinions expressed in public posts are those of the author and do not necessarily represent
the views of other users or any member of the LocostBuilders team.
Running XMB 1.8 Partagium [© 2002 XMB Group] on Apache under CentOS Linux
Founded, built and operated by ChrisW.