TROJAN REMOVER
Moderator: Moderators
-
- Newly registered Member
- Posts: 13
- Joined: Fri Sep 28, 2012 7:59 pm
- Has thanked: 5 times
- Been thanked: 0
TROJAN REMOVER
My daughter has clicked on an advert that was a trojan ,
its recording your face and telling you to pay the $100 fine YEAH RIGHT
My home network would detect a trojan but she did this whilst at her Nans, on her network
The laptop is now disalbed and i dont know what to do ???
Thanks in advance
Ric
its recording your face and telling you to pay the $100 fine YEAH RIGHT
My home network would detect a trojan but she did this whilst at her Nans, on her network
The laptop is now disalbed and i dont know what to do ???
Thanks in advance
Ric
- wine~o
- Senior Member
- Posts: 26279
- Joined: Sat Jan 10, 2009 3:49 pm
- Location: hants/dorset border
- Has thanked: 1414 times
- Been thanked: 4019 times
Re: TROJAN REMOVER
Download and run Mbam from here http://www.malwarebytes.org/products/malwarebytes_free/
The free one...
With a bit of luck that should remove it.
Once that's done, check your firewall is active, update your anti-virus software and run a scan with that as well.
The free one...
With a bit of luck that should remove it.
Once that's done, check your firewall is active, update your anti-virus software and run a scan with that as well.
Verwood Handyman
_____________________________________________________________________________
If you feel you have benefited from the Free advice given on the Forum, Please consider making a donation to UHM's Nominated charity, read all about it and donate here :
http://www.donnasdreamhouse.co.uk
_____________________________________________________________________________
If you feel you have benefited from the Free advice given on the Forum, Please consider making a donation to UHM's Nominated charity, read all about it and donate here :
http://www.donnasdreamhouse.co.uk
- thescruff
- Senior Member
- Posts: 49685
- Joined: Mon Mar 10, 2008 12:46 am
- Location: Bath
- Has thanked: 360 times
- Been thanked: 3735 times
Re: TROJAN REMOVER
And if you know the name of the virus, do an online google for details about it and how to remove.
- wine~o
- Senior Member
- Posts: 26279
- Joined: Sat Jan 10, 2009 3:49 pm
- Location: hants/dorset border
- Has thanked: 1414 times
- Been thanked: 4019 times
Re: TROJAN REMOVER
Ahhh ...... won't it start in safe mode ???
Verwood Handyman
_____________________________________________________________________________
If you feel you have benefited from the Free advice given on the Forum, Please consider making a donation to UHM's Nominated charity, read all about it and donate here :
http://www.donnasdreamhouse.co.uk
_____________________________________________________________________________
If you feel you have benefited from the Free advice given on the Forum, Please consider making a donation to UHM's Nominated charity, read all about it and donate here :
http://www.donnasdreamhouse.co.uk
- chat_to_rich
- Senior Member
- Posts: 254
- Joined: Fri Jan 08, 2010 1:46 pm
- Location: Kent
- Has thanked: 0
- Been thanked: 45 times
Re: TROJAN REMOVER
Try and offline scanner like this one http://windows.microsoft.com/is-is/wind ... er-offline. It runs from a USB stick or CD so Windows isn't running and therefore neither is the malware.
- These users thanked the author chat_to_rich for the post:
- Ric1
- Rating: 7.14%
-
- Newly registered Member
- Posts: 13
- Joined: Fri Sep 28, 2012 7:59 pm
- Has thanked: 5 times
- Been thanked: 0
Re: TROJAN REMOVER
http://www.pcrisk.com/removal-guides/69 ... unit-virus
Am using info from here , have now downloaded http://www.malwarebytes.org/products/malwarebytes_free/ on to a usb stick so will hopefully be able to start at a new save point and access the stick , i had to use command prompt .
Fingers crossed
Am using info from here , have now downloaded http://www.malwarebytes.org/products/malwarebytes_free/ on to a usb stick so will hopefully be able to start at a new save point and access the stick , i had to use command prompt .
Fingers crossed
- thescruff
- Senior Member
- Posts: 49685
- Joined: Mon Mar 10, 2008 12:46 am
- Location: Bath
- Has thanked: 360 times
- Been thanked: 3735 times
Re: TROJAN REMOVER
Start the computer in safe mode to run MBam
- wine~o
- Senior Member
- Posts: 26279
- Joined: Sat Jan 10, 2009 3:49 pm
- Location: hants/dorset border
- Has thanked: 1414 times
- Been thanked: 4019 times
Re: TROJAN REMOVER
Ric1 wrote:
Thanks have been sent
Ric
Sorted then ? do we know what the trojan was ?
Verwood Handyman
_____________________________________________________________________________
If you feel you have benefited from the Free advice given on the Forum, Please consider making a donation to UHM's Nominated charity, read all about it and donate here :
http://www.donnasdreamhouse.co.uk
_____________________________________________________________________________
If you feel you have benefited from the Free advice given on the Forum, Please consider making a donation to UHM's Nominated charity, read all about it and donate here :
http://www.donnasdreamhouse.co.uk
-
- Senior Member
- Posts: 1172
- Joined: Wed May 27, 2009 6:50 pm
- Has thanked: 83 times
- Been thanked: 24 times
Re: TROJAN REMOVER
Now now now, there is a surprise.
When I got home yesterday, the kids decided to use the missus's laptop.
The next thing I know is they coming downstairs to say computer wont start and there is a 4nny picture there?
When I looked at the laptop, it said Metropolitan Police etc etc. You have been visiting porn sites (then displayed THREE pictures of women and men having sex). You have to pay $100 in 72 hours or we will take you to court.
Kids are only 7 and 9, this is the last kind of pictures I wanted them to be watching. So Ricky, how exactly did you go about sorting it? I need all the steps please, please.
Wifey is giving me 4nny looks and asking what happened to her computer? I have a feeling she thinks I might have watched something that I never did watch
When I got home yesterday, the kids decided to use the missus's laptop.
The next thing I know is they coming downstairs to say computer wont start and there is a 4nny picture there?
When I looked at the laptop, it said Metropolitan Police etc etc. You have been visiting porn sites (then displayed THREE pictures of women and men having sex). You have to pay $100 in 72 hours or we will take you to court.
Kids are only 7 and 9, this is the last kind of pictures I wanted them to be watching. So Ricky, how exactly did you go about sorting it? I need all the steps please, please.
Wifey is giving me 4nny looks and asking what happened to her computer? I have a feeling she thinks I might have watched something that I never did watch
Men will always be kids. Even after they have grown up, they keep trying to go back where they originally came from!
- DTWCeramics
- Senior Member
- Posts: 385
- Joined: Thu Apr 12, 2012 3:35 pm
- Location: Portsmouth
- Has thanked: 13 times
- Been thanked: 43 times
Re: TROJAN REMOVER
There's 2 ways to counter this problem.
Normally the virus does come from shady porn sites, unfortunately. However, these are accessible easily by anybody nowadays... Don't suppose the kids are into Pokemon are you?
The latest game is called "Pokemon X"... google that and guess what comes up?
Easy peasy mode (not as fun!):
Download Malwarebytes from another machine, put onto a USB stick.
Boot laptop up in safemode (believe this is f10 by default while loading)
log on, plop the USB in and install Malwarebytes
Run malwarebytes, and get your lappy back!
Fun way!
Boot into safemode
Start > Run > MSConfig
Locate the fake startup program, and the directory this lives in.
Disable the startup settings, remove the services entries (check the hide all microsoft services button, easy find!)
Nuke all the files that are related to said virus.
Run an antivirus just after for a laugh, and realise you beat the system!
But yeah, go with the first way I did :)
Which firewall do you use? I've had Mcaffee stop similar programs from attacking my missus' PC in the past, (I don't normally endorse antivirus programs!!)
HTH!
Cheers
Matt
Normally the virus does come from shady porn sites, unfortunately. However, these are accessible easily by anybody nowadays... Don't suppose the kids are into Pokemon are you?
The latest game is called "Pokemon X"... google that and guess what comes up?
Easy peasy mode (not as fun!):
Download Malwarebytes from another machine, put onto a USB stick.
Boot laptop up in safemode (believe this is f10 by default while loading)
log on, plop the USB in and install Malwarebytes
Run malwarebytes, and get your lappy back!
Fun way!
Boot into safemode
Start > Run > MSConfig
Locate the fake startup program, and the directory this lives in.
Disable the startup settings, remove the services entries (check the hide all microsoft services button, easy find!)
Nuke all the files that are related to said virus.
Run an antivirus just after for a laugh, and realise you beat the system!
But yeah, go with the first way I did :)
Which firewall do you use? I've had Mcaffee stop similar programs from attacking my missus' PC in the past, (I don't normally endorse antivirus programs!!)
HTH!
Cheers
Matt
Matt
- TheToolStore
- Newly registered Member
- Posts: 37
- Joined: Wed Apr 17, 2013 1:51 pm
- Location: Christchurch, Dorset
- Has thanked: 0
- Been thanked: 5 times
Re: TROJAN REMOVER
the windows safe mode is F8 after the first screen...
malware is not a bad program in free version not all the features available. I'd suggest to get a Sypbot search& destroy (you can get it from filehippo website - put "filehippo" in google)
Another good solution is to find a previous restoration point.. works some time.
but the only, 100% working solution just to reinstall the windows..
BTW there are quiet many viruses around facebook, and msn / skype,
most of the are spreading is small games, enimoticon packs etc... more commonly than porn sites...:P
and DON'T try to shut down unknown windows services unless you know what are you doing....
malware is not a bad program in free version not all the features available. I'd suggest to get a Sypbot search& destroy (you can get it from filehippo website - put "filehippo" in google)
Another good solution is to find a previous restoration point.. works some time.
but the only, 100% working solution just to reinstall the windows..
BTW there are quiet many viruses around facebook, and msn / skype,
most of the are spreading is small games, enimoticon packs etc... more commonly than porn sites...:P
and DON'T try to shut down unknown windows services unless you know what are you doing....