My sis's laptop is massively infected!!

[pillar]

Ok guys, need your help! I tried posting about this on my sis's laptop, but then got bsod! (Thats how bad its gotten) Ok heres the issue. My sis complained about a possible virus. Looked into it. Found that its jacking with her security tool thats installed on her HP laptop. Up to 25 infections have been found in the laptop, so not very good news @ all. Ive tried installed full version of McAfee Anti-virus (I have it on my desktop so dont be knocking it) as well as ive tried installing a 30-day trial of Trend Micro. The laptop ended up going black screen while trying to install McAfee, but now this worm wants to act like its gonna send valuable credit card info using both anti-virus .exe files, not to mention IE. Like I said above, I just got bsod like 5 mins ago, so things are looking bleak. My sister just wants her pictures from her laptop off, but I told her that it might not be possible. We have a flash drive ready and available, but worried bout multiple pictures possibly being infected. More than likely im gonna wipe the hard drive clean & will install Win 7 on it.

Any extra ideas/comments??

 

[Kill Me]

I'm not much of a guy that can help you too much on this but I would recommend downloading "SuperAntiSpyware" & running a full scan & then remove all of the things found from the scan. This is has a completely FREE version that should do just fine but there is also a free trial of the Professional version which has much more features available to use. If your laptop goes black while downloading this, then I can't really help you much further.

Here's the download link for the free version & the professional trial.

 

[pillar]

unfortunately it seems to be interfering with any programs that is downloaded & is being asked to be installed, so i dont think any of this will help. i believe all that is left to do is wipe the hard drive completely clean & start brand new (that is unless someone else has a better idea).

 

[Clarko]

I would suggest to scan it externally first. Get a IDE/Sata to USB adapter so you can hook up the HDD to your PC. Most of the time it doesn't remove the entire virus because it needs to be running and active to be properly detected and removed. But with my experience on a similar issue it should remove enough of the virus for you to be able to download or install a removal program on the hard drive itself when it is back on the laptop.

I would need to ask what shows up on screen or get screenshots but this sounds like Scareware. A fake AV program that pops out and says you have all these files infected and only way to remove is to buy their product. But its a phish scam to fool the user to give up their info for identity theft.

I suggest using Malwarebytes anti-malware. Works all the time for me. External or internal scan.

I hope this helps you out.

 

[phalanx]

I would suggest to scan it externally first. Get a IDE/Sata to USB adapter so you can hook up the HDD to your PC. Most of the time it doesn't remove the entire virus because it needs to be running and active to be properly detected and removed. But with my experience on a similar issue it should remove enough of the virus for you to be able to download or install a removal program on the hard drive itself when it is back on the laptop.

I would need to ask what shows up on screen or get screenshots but this sounds like Scareware. A fake AV program that pops out and says you have all these files infected and only way to remove is to buy their product. But its a phish scam to fool the user to give up their info for identity theft.

I suggest using Malwarebytes anti-malware. Works all the time for me. External or internal scan.

I hope this helps you out.

+1 You could also try ComboFix (32 bit OS only)

 

[Toasteddude]

Also, have you been scanning in safe mode? Sometimes the virus will not boot if you enter safe mode, which only boots the basics windows needs to run.

 

[NCA]

1. On a clean computer, download Ubuntu and burn it to a CD.

2a. If the infected laptop has a CD/DVD drive, stick the Ubuntu CD inside and reboot.
OR
2b. If the infected laptop doesn't have a CD/DVD drive, stick the Ubuntu disc into your clean computer and reboot. Boot from CD. When Ubuntu starts up, go to System > Administration > Create a USB startup disc and follow the instuctions. This will give you a bootable USB drive. Stick the USB drive into the laptop and reboot.

3. The laptop should automatically boot into Ubuntu instead of Windows. If not, try pressing F12 repeatedly at boot time. If that doesn't work, you will have to change a few BIOS settings.

4. Once Ubuntu boots, your Windows drive should show up on the desktop (or you can look thru the menus). You can now copy media (music/video/photos) over from the infected drive to an external USB flash drive or HDD. Be very careful to copy only what is necessary. Virus-scan this external drive whenever you plug it into another computer.

5. At this point, I would strongly suggest you format the laptop and reinstall Windows.

 

[ryansmile]

if everyhting fails you can always reformat the harddrive.
it erases everything.
including viruses.

 

[pillar]

ya i asked my sis what all she needed & it was pictures (which i got), but i just got home, so im gonna scan those pics & see what comes up. hopefully no viruses got onto the pics. more than likely im gonna wipe the hard drive clean & install win 7 on it (my moms in the air force so were getting a good discount on that).