TROJAN REMOVER

All your computer hardware and software questions in here please.

Moderator: Moderators

Ric1
Newly registered Member
Posts: 13
Joined: Fri Sep 28, 2012 7:59 pm
Has thanked: 5 times
Been thanked: 0

TROJAN REMOVER

Post by Ric1 »

My daughter has clicked on an advert that was a trojan ,
its recording your face and telling you to pay the $100 fine YEAH RIGHT

My home network would detect a trojan but she did this whilst at her Nans, on her network

The laptop is now disalbed and i dont know what to do ???

Thanks in advance

Ric
User avatar
wine~o
Senior Member
Posts: 26279
Joined: Sat Jan 10, 2009 3:49 pm
Location: hants/dorset border
Has thanked: 1414 times
Been thanked: 4019 times

Re: TROJAN REMOVER

Post by wine~o »

Download and run Mbam from here http://www.malwarebytes.org/products/malwarebytes_free/

The free one...

With a bit of luck that should remove it.

Once that's done, check your firewall is active, update your anti-virus software and run a scan with that as well.
Verwood Handyman

_____________________________________________________________________________

If you feel you have benefited from the Free advice given on the Forum, Please consider making a donation to UHM's Nominated charity, read all about it and donate here :

http://www.donnasdreamhouse.co.uk
User avatar
thescruff
Senior Member
Posts: 49685
Joined: Mon Mar 10, 2008 12:46 am
Location: Bath
Has thanked: 360 times
Been thanked: 3735 times

Re: TROJAN REMOVER

Post by thescruff »

And if you know the name of the virus, do an online google for details about it and how to remove.
These users thanked the author thescruff for the post:
Ric1
Rating: 7.14%
Ric1
Newly registered Member
Posts: 13
Joined: Fri Sep 28, 2012 7:59 pm
Has thanked: 5 times
Been thanked: 0

Re: TROJAN REMOVER

Post by Ric1 »

The problem i got is that the laptop is disabled and i cannot access any thing :dunno:

In order to install the trojan killer

:cussing:
User avatar
wine~o
Senior Member
Posts: 26279
Joined: Sat Jan 10, 2009 3:49 pm
Location: hants/dorset border
Has thanked: 1414 times
Been thanked: 4019 times

Re: TROJAN REMOVER

Post by wine~o »

Ahhh ...... won't it start in safe mode ???
These users thanked the author wine~o for the post:
Ric1
Rating: 7.14%
Verwood Handyman

_____________________________________________________________________________

If you feel you have benefited from the Free advice given on the Forum, Please consider making a donation to UHM's Nominated charity, read all about it and donate here :

http://www.donnasdreamhouse.co.uk
User avatar
chat_to_rich
Senior Member
Posts: 254
Joined: Fri Jan 08, 2010 1:46 pm
Location: Kent
Has thanked: 0
Been thanked: 45 times

Re: TROJAN REMOVER

Post by chat_to_rich »

Try and offline scanner like this one http://windows.microsoft.com/is-is/wind ... er-offline. It runs from a USB stick or CD so Windows isn't running and therefore neither is the malware.
These users thanked the author chat_to_rich for the post:
Ric1
Rating: 7.14%
Ric1
Newly registered Member
Posts: 13
Joined: Fri Sep 28, 2012 7:59 pm
Has thanked: 5 times
Been thanked: 0

Re: TROJAN REMOVER

Post by Ric1 »

police central e-crime unit ::b

Am doing reserch now :-)
Ric1
Newly registered Member
Posts: 13
Joined: Fri Sep 28, 2012 7:59 pm
Has thanked: 5 times
Been thanked: 0

Re: TROJAN REMOVER

Post by Ric1 »

http://www.pcrisk.com/removal-guides/69 ... unit-virus

Am using info from here , have now downloaded http://www.malwarebytes.org/products/malwarebytes_free/ on to a usb stick so will hopefully be able to start at a new save point and access the stick , i had to use command prompt .

Fingers crossed
User avatar
thescruff
Senior Member
Posts: 49685
Joined: Mon Mar 10, 2008 12:46 am
Location: Bath
Has thanked: 360 times
Been thanked: 3735 times

Re: TROJAN REMOVER

Post by thescruff »

Start the computer in safe mode to run MBam
These users thanked the author thescruff for the post:
Ric1
Rating: 7.14%
Ric1
Newly registered Member
Posts: 13
Joined: Fri Sep 28, 2012 7:59 pm
Has thanked: 5 times
Been thanked: 0

Re: TROJAN REMOVER

Post by Ric1 »

:cheers:

Thanks have been sent

Ric
User avatar
wine~o
Senior Member
Posts: 26279
Joined: Sat Jan 10, 2009 3:49 pm
Location: hants/dorset border
Has thanked: 1414 times
Been thanked: 4019 times

Re: TROJAN REMOVER

Post by wine~o »

Ric1 wrote::cheers:

Thanks have been sent

Ric

Sorted then ? do we know what the trojan was ?
Verwood Handyman

_____________________________________________________________________________

If you feel you have benefited from the Free advice given on the Forum, Please consider making a donation to UHM's Nominated charity, read all about it and donate here :

http://www.donnasdreamhouse.co.uk
Ric1
Newly registered Member
Posts: 13
Joined: Fri Sep 28, 2012 7:59 pm
Has thanked: 5 times
Been thanked: 0

Re: TROJAN REMOVER

Post by Ric1 »

wine~o wrote:
Ric1 wrote::cheers:

Thanks have been sent

Ric

Sorted then ? do we know what the trojan was ?
Police-central-e-crime-unit is all i know
kintangoman
Senior Member
Posts: 1172
Joined: Wed May 27, 2009 6:50 pm
Has thanked: 83 times
Been thanked: 24 times

Re: TROJAN REMOVER

Post by kintangoman »

Now now now, there is a surprise.

When I got home yesterday, the kids decided to use the missus's laptop.
The next thing I know is they coming downstairs to say computer wont start and there is a 4nny picture there?
When I looked at the laptop, it said Metropolitan Police etc etc. You have been visiting porn sites (then displayed THREE pictures of women and men having sex). You have to pay $100 in 72 hours or we will take you to court.

Kids are only 7 and 9, this is the last kind of pictures I wanted them to be watching. So Ricky, how exactly did you go about sorting it? I need all the steps please, please. :thumbleft:

Wifey is giving me 4nny looks and asking what happened to her computer? I have a feeling she thinks I might have watched something that I never did watch ::b
Men will always be kids. Even after they have grown up, they keep trying to go back where they originally came from!
User avatar
DTWCeramics
Senior Member
Posts: 385
Joined: Thu Apr 12, 2012 3:35 pm
Location: Portsmouth
Has thanked: 13 times
Been thanked: 43 times

Re: TROJAN REMOVER

Post by DTWCeramics »

There's 2 ways to counter this problem.

Normally the virus does come from shady porn sites, unfortunately. However, these are accessible easily by anybody nowadays... Don't suppose the kids are into Pokemon are you?

The latest game is called "Pokemon X"... google that and guess what comes up?

Easy peasy mode (not as fun!):

Download Malwarebytes from another machine, put onto a USB stick.
Boot laptop up in safemode (believe this is f10 by default while loading)
log on, plop the USB in and install Malwarebytes
Run malwarebytes, and get your lappy back!

Fun way!
Boot into safemode
Start > Run > MSConfig
Locate the fake startup program, and the directory this lives in.
Disable the startup settings, remove the services entries (check the hide all microsoft services button, easy find!)
Nuke all the files that are related to said virus.
Run an antivirus just after for a laugh, and realise you beat the system!

But yeah, go with the first way I did :)

Which firewall do you use? I've had Mcaffee stop similar programs from attacking my missus' PC in the past, (I don't normally endorse antivirus programs!!)

HTH!

Cheers

Matt :thumbleft:
Matt
User avatar
TheToolStore
Newly registered Member
Posts: 37
Joined: Wed Apr 17, 2013 1:51 pm
Location: Christchurch, Dorset
Has thanked: 0
Been thanked: 5 times

Re: TROJAN REMOVER

Post by TheToolStore »

the windows safe mode is F8 after the first screen...
malware is not a bad program in free version not all the features available. I'd suggest to get a Sypbot search& destroy (you can get it from filehippo website - put "filehippo" in google)
Another good solution is to find a previous restoration point.. works some time.

but the only, 100% working solution just to reinstall the windows..

BTW there are quiet many viruses around facebook, and msn / skype,

most of the are spreading is small games, enimoticon packs etc... more commonly than porn sites...:P
and DON'T try to shut down unknown windows services unless you know what are you doing....
Post Reply

Return to “Computers”