Help with Win7 Security! (Alarm bells)

Sav112 · 14 Jan 2012 at 16:21

Hi lads a friend said he got a new computer about a year ago and something came up and blocked everything and I’m afraid instead of a quick call to ask me or go to Pc world they paid $80 to buy it. Paid and as I expected to hear everything worked like magic. (Alarm bells) :mad:

Total con sounding thing. Anyway today as he knows I’m a bit more computer literate he asked “ok lost my internet and other programs and its saying buy -Win 7 Home Security”

So I take look while on the phone and it immediately comes back with Virus or Malware that controls your system. So told him don’t what ever you do pay anything! and I’ll take a run up tomorrow and try and delete/remove this. His wee girl just clicks on things so she may have downloaded it.

One of the sites telling you about this suggests Spyhunter? Is this an ok program to fire on a memory stick and take over to his?

Or can you suggest a few free programs that are genuine that will flush his system.

If I can get them to run of a CD or something and clean the system that would be great.

Just to Add its Windows 7 he's on!

Diggsy · 14 Jan 2012 at 16:28

Run MalwareBytes, SpyBot and SuperAntispyware. They should sort it out.

Might even be a good idea to run the Kaspersky Virus Removal Tool too.

When you've done all that, run HijackThis to make sure it's clean. You can check the log it produces here

Never heard of Spyhunter personally. The above are all very good.

EDIT - by the way, make sure you disable System Restore before cleaning the system as a lot of nasties hide copies of themselves in there. You can re-enable once you are certain it's clean.

Sav112 · 14 Jan 2012 at 16:57

Cheers for that put them on the USB and will give them a go. The more things i can arm myself with the better.

KIA · 15 Jan 2012 at 16:11

Boot to safe mode with networking. Download MBAM, update definitions & run a full disk scan.

Crowort · 16 Jan 2012 at 02:06

When it is all clean but you still can't get online reset the LAN settings to automatic. I was stumped for like two hours the first time I removed this for someone. Now I know that it seems silly but easy to miss if you don't know.

If you encounter any problems post back, I'm sure most of us have removed this for friends and family before. I know I have maybe 5-10 times. The above suggestions are all good.

As an extra tip it tends to only fully infect one account so if you have problems it is worth changing user or creating a new one if need be.