I have something that pops up saying it's a system tool. It has a pad lock with a globe inside it. I can't get into anything. It wants me to give my credit card information to remove it. I know it's some kind of virus so I won't. I know very little about computers and hoping someone can help me or point me in the right direction.
Update your dat files and scan your PC with Virusscan in Safe Mode.
To do this, tap F8 repeatedly while booting up. You'll get a boot screen with choices. Pick Safe Mode. Your PC will boot in a low resolution state as most processes won't be running. Go to "My Computer" (XP) or "Computer" (Vista), right-click the hard drive and select "Scan" from the drop-down menu. You'll see an extra taskbar icon which will show a progress report if you hover over it.
If you think you have a virus infection on your PC do one or both of the following :
- Run the free Mcafee Stinger program from http://vil.nai.com/vil/stinger/ -
set it to Report Mode (in Preferences) and post the logs of anything it detects.
- Join the McAfee Getsusp group at https://community.mcafee.com/groups/getsusp30-beta-feedback
You will have to ask there for Getsusp, which is a Beta program and not yet on general release.
Before you use Getsusp, you should go to this document
and download the PDF file explaining what Getsusp is and how it works, and this document
which downloads the installation guide PDF document.
If you want a second opinion, or to be on the safe side, then you can do a scan with the free versions of these tools :
If you already have Malwarebytes installed, the virus could be protecting itself against it. In that case, in order to get Malwarebytes running you'll need to rename the executable. Open the C:\Program Files\Malwarebytes Antimalware folder, then rename the "mbam.exe" file and double-click directly on the file to open the program. After updating the program, run a full system scan using Malwarebytes.
Make sure both programs are updated to the latest versions before running them and let them clean anything they find. If they quarantine a file or fail to remove a file try to get a copy of it and send it to Mcafee using the virus submission path described here :
(The following has been copied from a post of Peacekeeper's, to whom I am grateful for saving me some typing).
Send the file to mcafee labs at http://vil.nai.com/vil/submit-sample.aspx
Zip the file and password it with password infected.
You will probably get an autoreply back saying it is infected; reply asking for it to be manually tested.
Include in your first submission :-
Please provide the following information along with your sample. It will help us speed the sample review process:
· A list of all files contained in the sample submission, including a brief description of where or how you found them
· What symptoms cause you to suspect that the sample is malicious
· Whether any security products find a virus (tell us the security vendor, its product name, the version number, and the virus name assigned to the sample)
· Your McAfee product information (product name, engine, and DAT version
· Any system details that may be relevant (operating system, service packs, etc.)Message was edited by: Peacekeeper on 3/01/11 7:10:40 PM