virus help...
at my mum and dads theyve got windows (xp i think) the 1 before vista
and theyve got a virus on it.
ive done a system restore from safe mode to before the problem started,
and it helped for a couple of hrs but its now back.
they keep getting a security warning flash up saying the pc is infected do u wanna run a scan, then asks u to buy a program to delete it.
it wont let you open anything up to clean it tho.
theyve got windows antivrus avg (free version)
ad-aware, and norton free versions, but this virus thing wont let them open.
if you try to open it it just comes up with a warning box saying the file is infected do you wanna run antivirus program? and wont let you open it.
it happens when u try and open any program.
any1 got any ideas what i can do?
pls help.
cheers
and theyve got a virus on it.
ive done a system restore from safe mode to before the problem started,
and it helped for a couple of hrs but its now back.
they keep getting a security warning flash up saying the pc is infected do u wanna run a scan, then asks u to buy a program to delete it.
it wont let you open anything up to clean it tho.
theyve got windows antivrus avg (free version)
ad-aware, and norton free versions, but this virus thing wont let them open.
if you try to open it it just comes up with a warning box saying the file is infected do you wanna run antivirus program? and wont let you open it.
it happens when u try and open any program.
any1 got any ideas what i can do?
pls help.
cheers
i had this and had a look on the pc forums and theres trcks to get rid. the virus itself doesnt appear to be damaging but it stops you from running any programs (.exe files) and basically tries to scam you into buying fake software.
iirc you need to determine what the process/s are called and as soon as the pc boots up go into task manager and delete the process, then you can delete all files assosciated with the scam program.
alternatevely i left my pc unplugged from the mains for a week as i wasnt around for that week and that worked. lol.
iirc you need to determine what the process/s are called and as soon as the pc boots up go into task manager and delete the process, then you can delete all files assosciated with the scam program.
alternatevely i left my pc unplugged from the mains for a week as i wasnt around for that week and that worked. lol.
go to safe mode with networking ( so you can still use the net)
download, install, and run a full system scan with malwarebytes
www.malwarebytes.org (get the free version)
once done reboot and go back in to windows, dowload install and run ccleaner to clear out all your temp files (where they usually like to hide)
download, install, and run a full system scan with malwarebytes
www.malwarebytes.org (get the free version)
once done reboot and go back in to windows, dowload install and run ccleaner to clear out all your temp files (where they usually like to hide)
go to safe mode with networking ( so you can still use the net)
download, install, and run a full system scan with malwarebytes
www.malwarebytes.org (get the free version)
once done reboot and go back in to windows, dowload install and run ccleaner to clear out all your temp files (where they usually like to hide)
download, install, and run a full system scan with malwarebytes
www.malwarebytes.org (get the free version)
once done reboot and go back in to windows, dowload install and run ccleaner to clear out all your temp files (where they usually like to hide)
http://www.free-av.com/
http://www.malwarebytes.org/mbam.php
download and run both of them
This is what Danneth told me to use, got rid of the lot.
Plus makes the PC run quicker than with AVG
PS you will need to put them on a dongle 1st then run.
http://www.malwarebytes.org/mbam.php
download and run both of them
This is what Danneth told me to use, got rid of the lot.
Plus makes the PC run quicker than with AVG
PS you will need to put them on a dongle 1st then run.
Trending Topics
http://www.malwarebytes.org/mbam.php
just downloaded this too found a few objects infected wow its good
just downloaded this too found a few objects infected wow its good
Just tried doin the above but it wouldn't let ne open the net.
Just said cannot connect to Internet while in safe mode.
Also they already have malwarebytes antimalware downloaded and did a scan with it the other day and again it only helped for a few hrs.
Just said cannot connect to Internet while in safe mode.
Also they already have malwarebytes antimalware downloaded and did a scan with it the other day and again it only helped for a few hrs.
Last edited by stu21t; Jul 14, 2010 at 05:01 PM.
http://www.free-av.com/
http://www.malwarebytes.org/mbam.php
download and run both of them
This is what Danneth told me to use, got rid of the lot.
Plus makes the PC run quicker than with AVG
PS you will need to put them on a dongle 1st then run.
http://www.malwarebytes.org/mbam.php
download and run both of them
This is what Danneth told me to use, got rid of the lot.
Plus makes the PC run quicker than with AVG
PS you will need to put them on a dongle 1st then run.
well i tried the antimalware program and ccleaner
and it was ok for a few hrs but doesnt work this mornin
im going to try and run norton 360 on it, ive got it on cd.
other than that any ideas?
and it was ok for a few hrs but doesnt work this mornin
im going to try and run norton 360 on it, ive got it on cd.
other than that any ideas?
I've found that life I needed.. It's HERE!!

Joined: Mar 2006
Posts: 1,100
Likes: 0
From: Norfolk, UK
Is this what the pop up/virus says?
If so full scan with the programs i mentioned will clear them.
Trojan-BNK.Win32.Keylogger.gen
is the file name, also have a program with
Also a program comes up with XP Internet Security 2010 - Unregistered Version.
Saying 25 infection found.
is the file name, also have a program with
Also a program comes up with XP Internet Security 2010 - Unregistered Version.
Saying 25 infection found.
Chances are if you've got one trojan then you've got a few. You will need to use a few utils to clean it.
We use Microsoft Security Essentials, free download from Microsoft, Malwarebytes as already recommended plus SuperAntiSpyware and sometimes Adaware, all downloadable from www.download.com.
Download and update each util, then remove network cable or switch off wireless to ensure the trojan cant re-infect itself from the 'net. Start one of the utils off, leave it for ten mins, then start another off, might take some time depending on spec of pc. Also ensure to run full & complete scans rather than quick scans.
Depending how pc savvy you are run up msconfig and check the startup items for unusual .exe's. Google them if neccessary from another PC to see if they are malicious and unselect from startup if the are. (Start button, click "run", type msconfig into the run box.)
We use Microsoft Security Essentials, free download from Microsoft, Malwarebytes as already recommended plus SuperAntiSpyware and sometimes Adaware, all downloadable from www.download.com.
Download and update each util, then remove network cable or switch off wireless to ensure the trojan cant re-infect itself from the 'net. Start one of the utils off, leave it for ten mins, then start another off, might take some time depending on spec of pc. Also ensure to run full & complete scans rather than quick scans.
Depending how pc savvy you are run up msconfig and check the startup items for unusual .exe's. Google them if neccessary from another PC to see if they are malicious and unselect from startup if the are. (Start button, click "run", type msconfig into the run box.)
thanks,
ive just done the startup thing and unchecked about 10 things that werent needed on startup.
dunno if any of them were the problem tho.
also the norton is still going, been scanning for at least 2 hrs now.
the error message above isnt what theyve been getting
it just says whatever program you try to open is infected and do you want to run an antivirus program or continue uncovered?
but wont let you open the programs.
then the net wont work as it says its an unsafe website and opens its own page which is a virus scanner saying you have loads of faults.
once the norton is finished i will try the super anti spyware and adaware
it seems to fix for a little while after i have a play but then comes back again so either reloads or comes back through the net.
i dont want to wipe the pc and start again as its used for bussiness. if i cant fix it i will have to take it to a pc shop.
ive just done the startup thing and unchecked about 10 things that werent needed on startup.
dunno if any of them were the problem tho.
also the norton is still going, been scanning for at least 2 hrs now.
the error message above isnt what theyve been getting
it just says whatever program you try to open is infected and do you want to run an antivirus program or continue uncovered?
but wont let you open the programs.
then the net wont work as it says its an unsafe website and opens its own page which is a virus scanner saying you have loads of faults.
once the norton is finished i will try the super anti spyware and adaware
it seems to fix for a little while after i have a play but then comes back again so either reloads or comes back through the net.
i dont want to wipe the pc and start again as its used for bussiness. if i cant fix it i will have to take it to a pc shop.
watch what your doing with it but this is far more effective than anything else;
http://www.bleepingcomputer.com/comb...o-use-combofix
if it does not run then boot up in safe mode (tap f8 just before wondows starts to load)
http://www.bleepingcomputer.com/comb...o-use-combofix
if it does not run then boot up in safe mode (tap f8 just before wondows starts to load)
if it were me, if you still cant get rid then run in safe mode to copy all your important files onto a USB or similar then format the drive with a fresh XP install. Remember to scan the USB stick before copying files across to fresh install though.
you will have no luck clearing it up now the spyware is in this state Stu, just get the data off you need and then format, reinstall xp. then install antivirus (I have a corporate version of Symantec if you want; nice and light weight) then whack spybot - S&D on and immunize.
unfortunately your a bit screwed when they dig their way in.
unfortunately your a bit screwed when they dig their way in.
Thread
Thread Starter
Forum
Replies
Last Post




