www.ultimatehandyman.co.uk

My daughter has clicked on an advert that was a trojan ,
its recording your face and telling you to pay the $100 fine YEAH RIGHT

My home network would detect a trojan but she did this whilst at her Nans, on her network

The laptop is now disalbed and i dont know what to do ???

Thanks in advance

Ric

Download and run Mbam from here http://www.malwarebytes.org/products/malwarebytes_free/

The free one...

With a bit of luck that should remove it.

Once that's done, check your firewall is active, update your anti-virus software and run a scan with that as well.

And if you know the name of the virus, do an online google for details about it and how to remove.

The problem i got is that the laptop is disabled and i cannot access any thing

In order to install the trojan killer

Ahhh ...... won't it start in safe mode ???

Try and offline scanner like this one http://windows.microsoft.com/is-is/wind ... er-offline. It runs from a USB stick or CD so Windows isn't running and therefore neither is the malware.

police central e-crime unit

Am doing reserch now

http://www.pcrisk.com/removal-guides/69 ... unit-virus

Am using info from here , have now downloaded http://www.malwarebytes.org/products/malwarebytes_free/ on to a usb stick so will hopefully be able to start at a new save point and access the stick , i had to use command prompt .

Fingers crossed

Start the computer in safe mode to run MBam

Thanks have been sent

Ric

Ric1 wrote:

Thanks have been sent

Ric

Sorted then ? do we know what the trojan was ?

wine~o wrote:

Ric1 wrote:

Thanks have been sent

Ric

Sorted then ? do we know what the trojan was ?

Police-central-e-crime-unit is all i know

Now now now, there is a surprise.

When I got home yesterday, the kids decided to use the missus's laptop.
The next thing I know is they coming downstairs to say computer wont start and there is a 4nny picture there?
When I looked at the laptop, it said Metropolitan Police etc etc. You have been visiting porn sites (then displayed THREE pictures of women and men having sex). You have to pay $100 in 72 hours or we will take you to court.

Kids are only 7 and 9, this is the last kind of pictures I wanted them to be watching. So Ricky, how exactly did you go about sorting it? I need all the steps please, please.

Wifey is giving me 4nny looks and asking what happened to her computer? I have a feeling she thinks I might have watched something that I never did watch

There's 2 ways to counter this problem.

Normally the virus does come from shady porn sites, unfortunately. However, these are accessible easily by anybody nowadays... Don't suppose the kids are into Pokemon are you?

The latest game is called "Pokemon X"... google that and guess what comes up?

Easy peasy mode (not as fun!):

Download Malwarebytes from another machine, put onto a USB stick.
Boot laptop up in safemode (believe this is f10 by default while loading)
log on, plop the USB in and install Malwarebytes
Run malwarebytes, and get your lappy back!

Fun way!
Boot into safemode
Start > Run > MSConfig
Locate the fake startup program, and the directory this lives in.
Disable the startup settings, remove the services entries (check the hide all microsoft services button, easy find!)
Nuke all the files that are related to said virus.
Run an antivirus just after for a laugh, and realise you beat the system!

But yeah, go with the first way I did :)

Which firewall do you use? I've had Mcaffee stop similar programs from attacking my missus' PC in the past, (I don't normally endorse antivirus programs!!)

HTH!

Cheers

Matt

the windows safe mode is F8 after the first screen...
malware is not a bad program in free version not all the features available. I'd suggest to get a Sypbot search& destroy (you can get it from filehippo website - put "filehippo" in google)
Another good solution is to find a previous restoration point.. works some time.

but the only, 100% working solution just to reinstall the windows..

BTW there are quiet many viruses around facebook, and msn / skype,

most of the are spreading is small games, enimoticon packs etc... more commonly than porn sites...:P
and DON'T try to shut down unknown windows services unless you know what are you doing....