spyware

Viruses and worms
1

Please help…
my friend comp got spyware… now shes running her comp in safe mode… but
she cant used the other software… and she wants to restore the system…
can someone help us??

thanks in advance

2

everyone here are ready to help

my friend comp got spyware..

how do you say this?

but she cant used the other software..
which software?

answer also:

is she using avast?

what other security products does she use?

is she able to login in the normal windows mode?

3
everyone here are ready to help
thanks
how do you say this?
its just suddenly appears on her desktop "Spyware" " your computer is in danger" and bla bla...

answer also:

is she using avast?
yes
what other security products does she use?
only AV
is she able to login in the normal windows mode?
yes she can, but this message is appearing on her desktop and cant connect to the net and cant move the cursor o.O
4

same thing had been encountered by one of the forum member and avast user, refer to this it may help you :

http://forum.avast.com/index.php?topic=47318.0

hope it’ll help you.

5

can’t use system restore?

6

Hi.,
we tried to turned off the system restore before anything else like u said in other thread…
but there is a message box saying:

“you have chosen to turn off system restore. If you continue, all existing restore points will be deleted, and you will not be able to track or undo changes to your computer.
Do you want to turn off system restore? Yes or no”

but we are confused of this message… and dont know what to do…
because we tried to system restore last night but it wasnt succeed…
please help :slight_smile:

7

Hi sahara,

This is ok, just click continue and follow the other instructions to download Malwarebytes Anti-Malware and scan with it.

-Scott-

8

hello here i am again…

we already installed malwarebytes, but why it wont run? o.o

9

Hello sahara

are shooted with any kind of error?

10

it was installed fine… no error… but when we try to open it… it wont run… :frowning:

11

okay can you post a log of hijack this, get it from here : http://www.filehippo.com/download_hijackthis/download/8571e06e5eb8ab03c649f3b5d647c599/

is the avast up to date?. if yes then did you do a boot time scan?

if no, then do it.

12

boot time scan?

we do standard scan… is it same?

13

well its not same. you can do a boot time scan:

www.digitalred.com/avast-boot-time.php

14

MBAM won’t run(Fix), SystemSecurity
http://www.malwarebytes.org/forums/index.php?showtopic=17583
http://www.malwarebytes.org/forums/index.php?showtopic=12873
http://www.malwarebytes.org/forums/index.php?showtopic=12713

Malware Removal Guides and Self Help Guides
http://www.malwarebytes.org/forums/index.php?showforum=39

15

consider yokenny’s post and also this :

http://www.malwarebytes.org/forums/index.php?showtopic=11990

well i would do this first : avast boot time scan;

then : try to fix the problem of mbam. reason-if the viruses loaded in the memory is not allowing mbam to run?. first would do a boot time scan then reinstall mbam, update and perform full scan. post the log of mbam here.

16

sounds like there is some problem in that computer meaby you can give superantispyware a shot.

17

hi nmb
we are doing boot time scan…
with the guide of the link you’ve given above…
we are already in step 5, but after we choose “allow delete or move” a box appears with message
“avast!: do you really want to allow automatic changes of your system files? it could damage your system!
YES or NO”

what is it? what should i do?

please… help :slight_smile:

18

select yes. but when you reboot the system and when avast starts scanning, if it finds anything(virus) and it asks you to remove or move to chest then better you move it to chest.

in short : dont delete any file. move it to chest.

that should do.

edit: if you delete any system file then it might be possible that you can never log in to windows. be careful!

19

ok we are on our way there :smiley: hehe

thanks much for your immediate reply :wink:

please dont sleep hehe … stay awake ! :smiley:

2 nights we just sleep only 5 hours in total coz of this F****** virus…

thanks for your sleep…

we are hoping that it will be fixed now, so that we can sleep longer…

20

you are welcome.

please dont sleep hehe ... stay awake ! :D

off topic : here in India its 2:33 AM so dont know when i’ll go to sleep. someone will surely help if I ain’t here.

after finishing the boot time scan, download mbam (if you have already done it, then its oki), remove old mbam install, reinstall , update, perform full scan, post the log here. using additional options while posting.

then get superantispyware(sas) from here : http://www.filehippo.com/download_superantispyware/download/2a9ab224f71776996b68b171773ff630/

do a full scan . if it reports any tracking cookies, dont worry about it. let sas deal with it.

do a hijack this analysis and post log here. hope you still have the hijack this link if not its here : http://www.filehippo.com/download_hijackthis/download/8571e06e5eb8ab03c649f3b5d647c599/