My computer has been invaded!

ShiWarrior

ShiWarrior

ShiWarrior

Underboss
Joined
20 Oct 2002
Posts
34,422
Location
Oxfordshire / Bucks
Just come home from work, and i got a million I.E's open, and my background picture on my desktop has been changed and I got 2 new icons on my desktop, which are 1) Privacy Protector and 2) Spyware&Malware Protection

not happy!

keep getting a Windows alert thing keep poping up and a new window opens
 
Try the following programs

CCleaner
Superantispyware
rogueremover pro

And then run this:

http://housecall.trendmicro.com/

Select free Scan, let it kill anything.

If u wanna be safe run Nod32 or Kaspersky trials and let it remove anything also.

If that lot dont work then format C: and restore pc is the best bet/ I always run that method seems the best trick ;)
 
Are you running as Administrator? Don't.

Ditch IE in favour of Firefox. ( or at least secure IE; look at zone settings, esp. Internet Zone )
 
ShiWarrior said:
arrrrrrg

I cant get away from it!!!!

Ive still got the dam malware!!!!
:mad:
Click to expand...

which ones u still got? the one in the corner popping up randomly ?

Id still advise kaspersky and full update and full scan, also dont forget to update rogue remover and also update superantispyware and then rescan for any bugs let over.
 
ShiWarrior said:
arrrrrrg

I cant get away from it!!!!

Ive still got the dam malware!!!!
:mad:
Click to expand...

1. Turn Off system restore.
2. Boot into Safe mode.
3. Run Ad Aware SE (update prior to using). Delete what it finds.
4.Run Spybot Search & Destroy (update prior to using). Delete what it finds.
5. Run your AV (update prior to using). Delete what that finds.
6. Boot as Normal.
7. Put kettle on & post thank you post :D
 
back again

Cheers all, will try all of the above if i happen to run into anymore trouble

i should have used safe mode!!!
 
HighlandeR said:
which ones u still got? the one in the corner popping up randomly ?

Id still advise kaspersky and full update and full scan, also dont forget to update rogue remover and also update superantispyware and then rescan for any bugs let over.
Click to expand...

I get one that keep poping up in the corner task bar, called "windows security Alert"
 
Jolly_Jason said:
Just restore your ghost image, should have the problem sorted in about 50 seconds. What!! you didn't make a ghost image :eek: :p ;)
Click to expand...

too true..

how did this happen in the first place?

do what everyone else has said -turning off system restore is important

run nod32 and "avg antispyware" too
 
Cant get rid of it!

I have Antisuper spyware loaded at startup and when the PC boots, it detects the same one everytime in the "registry" i always click on delete, but it stays there!

Could I add a hard drive (as primary) and install all the protection stuff, then add this hard drive as a slave, boot into safemode and run everything, could this work? I got 300 gigs to back up otherwise!
 
give up and format. Its the only real way to be 100 % sure its gone.

i work for an NHS IT contractor, and the staff have a real habit of downloading stuff they shouldnt. It messes with our software and stops it working, then blame us because our software doesnt work because of what ther spyware has changed.

Execuitive decision has come down from the top that its not worth attempting to get rid of this stuff and just to re-image

We've had instances before where we've ran every removal tool at our disposal, rebooted, etc.. and got rid of everything, and the site has called us back hours later telling us its all come back

The one that seems to be going round at the moment is Best Antivirus (how ironic) that keeps popping up telling you that your system is infected, and to upgrade to the pro version for $30 to resolve the situation !
 
1) Update all your antispyware/virus/trojan software
2) Disable system restore
3) Boot into safe mode
4) Run them all and remove everything they find
5) Boot back into windows and run the scanners to see if they find anything.

You may also want to paste a HiJackThis! log so we can see what's running on your computers background :).
 
use the smitfraud thing

somewhere on the internet is a guide on how to get rid of this thing, it's well known

try a search including the name of the software

good luck

reformat is best though
 
You must log in or register to reply here.
Back
Top Bottom