System infected

Status
Not open for further replies.

nad1611

Posts: 11   +0
Help would be much appreciated for the following problem
My daughter has just turned her netbook on only to be met by the words fromInternet Security 2010 "Your System is infected, system has been stopped due to a serious malfunction, spyware activity is being detected it is recommended to use spyware removal tool. do noy use not use computer until spyware is removed......... etc

When prompted to remove spyware it takes her to a pop up to purchase a particular tool. She cannot access the internet we can't get into system to restore or anything else.

The system is running on Windows Xp. I can't access any info to find out what security systems are on the netbook but it looks as though whatever there was was only for a trial period which has expired.

Some of the examples of threat indicated are
Email-worm.BAT.Alcobul.b
Networm.Win 32.DipNet.d
Trojan-PSW.Win332.Check

It is now showing some porno sites despite the fact that we aren't able to access the internet!!!
 
you probably have one of those "phony" anti-virus programs. Infact, the anti-virus IS a spyware. Download Superantispyware and Malwarebytes as instructed in the "8 steps" and run those programs.
 
Thank you 4646asdfasdf. Always grateful for help!

Internet Security 2010 is a rogue program. It puts alerts up to make the user think there is malware to have them click to but their program. So now we need to remove 'it' Here are some descriptions of rogue spyware:
  • They use deceptive means to get the user to buy their program
  • The programs give 'false positives' meaning an entry is presented as 'bad' when is usually is not.
  • Their scanning techniques are not thorough and their databases may not be current.
  • There is no privacy policy
  • See SpywareWarrior for specifics.

Sound familiar?

The link to the steps we ask you to follow is HERE.

Please follow the steps, run the 3 programs and attach the 3 logs in your next reply. If she can stay off of the internet, you can download the programs to a flash drive, then run them on her computer.
 
Does that mean that the Anti Spyware which is a Virus would have been downloaded to my daughters machine, because she swear she has not downloaded or added anything to the Netbook other than Microsoft Office.

Either way we cannot now access anything from the Netbook. The screen is completely black blank screen and the functions do not appear to make any changes whatsoever, Any thoughts?
 
She doesn't have to intentionally download anything. IF that was the case, we could prevent a lot of the malware infections. But some process got on the system to display the message. And once she did this, more malware:
When prompted to remove spyware it takes her to a pop up to purchase a particular tool.

But if you have a blank, black screen, the only way in would be to boot from the setup on the CD- But most netbooks don't have a CD drive.

Does she have a CD Drive either internal or external and do she have the CD for the operating system? (Vista? Windows XP? Windows 7?)
 
I'll have to check if she's got the cd at Uni she does have an external dvd drive. I presume we would simply follow the instructions which would follow the attaching of the dvd drive and putting the cd in?
 
You'd have to use the CD to get into the Windows Setup to boot from. I don't know how the netbook is set up for this, but usually you'd have to go into the BIOS and change the boot order from hard drive to CD first- then hard drive second.

Does she have a manual with the mini> It may explain how to boot from the setup.
 
All these things would be in her rooms at uni and she goes back on Saturday. The only thing is we can't actually get into Bios at present. Either way it looks like we won't be able to change anything until we get her back to Uni. Thanks for your help so far and I'll get back if we're still having problems
 
Sorry we can't do more now. Please ask her to review the netbook manual for specifics. It may help. Let us know if we can be of more help.
 
Status
Not open for further replies.
Back