MY SON HAS DOWNLOADED A VIRUS ONTO HIS LAPTOP WHICH HAS CORRUPTED ALL EXE FILES. HOW CAN I USE MY LAPTOP TO SCAN AND REMOVE THIS THREAT. THE ABVE NAME IS WHAT HIS LAPTOP SAYS IS ON IT, IT IS ALSO FILLING HIS LAPTOP WITH PORN. PLEASE IF YOU CAN HELP TRY TO KEEP IT SIMPLE LANGUAGE FOR ME. THANKS
My son has received a similar trojan and "porn" icons appear on his desktop. I have McAfee virus scan plus. I thought it would prevent trojans from invading. I need similar help with removing. I've found numerous hits on google for the trojnan and removal tools. Can't McAfee help with this without charging add'l money for the revmoval(especially since the McAfee product is intalled on this laptop)?
The first thing you should do is to review and follow the directions in this link from McAfee
I also suggest you download and install Malwarebytes www.malwarebytes.org and I also recommend you run SuperAntispyware www.superantispyware.com both of which are free and removes alot of stuff that shouldn't be there in the first place.
Message was edited by: k3tg on 5/4/10 11:49:04 AM CDT
We also have this trojan & we are unable to remove. The trojan will not allow access to any websites other than those which it wishes us to download from, so we are unable to download any other spyware removal tools or scanners. Nor will it allow any programs to be opened, i.e. Windows Restore, any scanners downloaded onto a pen drive, etc etc.
We have managed to run TDSS killer (in safe mode) which has resolved all the spam pop ups, but we are unable to scan & remove this trojan!
Does anyone have any advice on where to go now?
Any help & advice appreciated.
You may need to download to a pen drive or a usb stick but you will need to rename the programs as the trojan files are written to protect themselves so by renaming them you may be able to get them installed and running on your computer. You will in all probability have to obtain these programs on a non infected computer so you can get them installed on the infected machine.
What k3tg says and
Also try installing them to another folder than the non standard 1. When you install the program update it as now update should then work. Been though this last weekend works well.
Thanks for the advice Peacekeeper, have downloaded malwarebytes to pen drive & renamed parent folder, sub folder, exe file on the pen drive & I still get the same error message when I try to run the program:
"Application cannot be executed. The file ....... is infected.
Do you want to activate your antivirus software now?"
It appears that running any exe file prompts this response, ie, Solitaire, hearts, etc.
Must admit I have never had a virus as dificult as this to remove and I am stumped.
Any further advice would be most appreciated.
Hey k3tg is the 1 you should thank he was the responder I just adding some info.
Possible you have a fake alert read This and run stinger. Sometimes good to search for message and look for the green ticked (solved posts)
A big thanks to both K3tg & Peacekeeper, we are finally clean!!
We did have a fake alert trojan & zinger allowed us to remove one trojan, which in turn allowed us to install Malwarebytes & run a scan (all in safe mode), which found the infected files & subsequently removed them. We also had to reset IE's default settings as these trojans changed IE settings which would not allow us to browse the web & use associated programs, live mail etc.
Once again thanks for all your help, you are stars