Virus help

[EWC88]

My sister just came to me and told me she has some "huge" virus on her laptop. So I asked her whats up with it and she told me she went to open a email from one of her classmates and right when she opened it all this porn is now on her laptop and all her icons on her screen are naked pics of girls. She gets a boatload of pop ups now as well for all porn.

What steps should I do to handle this?

 

[johnb35]

You should have posted this in the security section of the forum. However, follow this procedure and post both logs.


http://www.computerforum.com/131398-important-please-read-before-posting.html

 

[EWC88]

I downloaded the malwarebytes and it won't let me run it, it says iya impossible cause ight malwarebytes is infected please activate antivirus program.

 

[EWC88]

Also some windows police pro keep poping up on here, its on her laptop but it won;t delete whats scaned because its not purchased. I have no idea how it got on.

 

[formatu]

format C:

 

[linkin]

Try renaming the malwarebytes .exe file to something else, like 123abc.exe or something

 

[nobbly niblets]

Close guys, but no cigar.

MBAM will take care of Windows Police Pro, the new rogue on the block, but first task manager needs to be re-enabled to shut down it's processes so MBAM can run.

A registry tweak needs to be applied.

Have a look at the link below. BleepingComputer have the fix:

http://www.bleepingcomputer.com/virus-removal/remove-windows-police-pro

 

[EWC88]

I'll give that bleepingcomputer.com a try and let you know what happens.

 

[EWC88]

Not working, says that its infected with a worm?

 

[EWC88]

Also when I go under my computer to find the part were I d.l to do the task manager, it says its disabled

 

[nobbly niblets]

did you run the reg file?

Fixtm.reg

 

[EWC88]

Yea the Fixtm.reg is whats not working. Sorry didn't make it clear what I was talking about.

I clicked on the Fixtm.reg to download, I downloaded it and when I went to run it so I can click yes to merge it says it has a worm and its disabled. Even if I right click on the Fixtm.reg I clicked merge it still says the same thing.

 

[nobbly niblets]

You need to run the fix exactly as described.

Windows Police Pro disables task manager in the registry... Fixtm.reg restores the values.

After you run the registry fix you need to repair the file associations for executables.

FixExe.reg restores these.

It is then that you should run MBAM.

 

[nobbly niblets]

If you still have the registry fixes saved to desktop or where ever you saved them keep them there.

Delete MBAM and boot into safe mode with networking.

Run the reg fixes then download install, update and run MBAM.

 

[EWC88]

I did. Intructions say to first print the instructions out...Then download the fixtm.reg, when its downloaded double click on it and select YES to merge.


IT does not let me run it after downloading it...I am following instructions.

 

[EWC88]

Computer noob...Whats MBAM? and how do you run on safe mode?

 

[nobbly niblets]

Sorry... MBAM = malwarebytes antimalware

 

[EWC88]

Oh ok thanks. How do you boot into safe mode?

 

[nobbly niblets]

to enter safe mode / safe mode with networking.

When you reboot the pc... hit the F8 key in about 1 second intervals when you hear it powering up.

you should be given an option screen, choose safe mode with networking.

The screen will have white text against black rolling up it... this is normal.

When the pc has booted the screen will look cartoonish, with safe mode in the 4 corners , this is normal.

 

[nobbly niblets]

run the fix