redirect virus

Hello to all ,

My nephew was using facebook when he got a message advising him to update his avast vps of course he followed all instructions and bingo!!! avast is disabled and when I tried to download mbam , superantispyware or even gmer the computer said that that I didn’t have administrator rights .
For the time being the pc is completely blocked , it does open up but after 5 mins approx nothing will work ie not even the mouse . Of course I have reearched the problem on your forum but for the moment nothing will work .

any ideas anyone ???

paul

So, you mean he got the message on FACEBOOK?! Avast should update itself automatically. Also, this was probobaly a false message. Similar to the Koobface virus that lies to you that you have your Flashplayer outdated and installs itself onto the system.

Hi there you have the enhanced malware. Please everyone take note… Never,never,never update any programme asking for an update on facebook… Otherwise you will get infected

Download OTL to your Desktop

[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
[*]Select All Users
[*]Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
CREATERESTOREPOINT

[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Post both logs

THEN

Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the “Scan” button to start scan

http://i1224.photobucket.com/albums/ee362/Essexboy3/aswMBR%20shots/aswMBRScan.gif

On completion of the scan click save log, save it to your desktop and post in your next reply

http://i1224.photobucket.com/albums/ee362/Essexboy3/aswMBR%20shots/aswMBRsavelog.gif

Thanks essexboy for your quick reply but my nephew is French and he is running xp 3 of course in French . Will downloading otl as you advised work for him also .

Sorry if this seems like a really stupid question .

Paul

Certainly will, although the output will be in French it will follow a set format so I will know what is what ;D

Thanks for your reply essexboy I will try what you advised and I will let you know what the results are .

paul

This first run will not clear anything but it will show me what files to target and what other tools I may require