Wonder if someone out there can help me with this problem?

System: Windows XP Pro w/all updates



My daughter's PC got hit with a Virus/Trojan or something. She received an
email (from someone she didn't know) that say she had a card waiting and
clicked on the link for the card. When she clicked on the link her computer
rebooted and things haven't been the same since. Some web site are blocked
like Symantec, and Hot mail to name a couple.

Does anyone know the name of this bug and if so, where to find the removal
tool?

All scans that I able to do fines nothing. Also System Restore is no longer
working.

Thanks

--

Bob Eyster

Bob Eyster wrote:

> Wonder if someone out there can help me with this problem?
>
> System: Windows XP Pro w/all updates
>
> My daughter's PC got hit with a Virus/Trojan or something. She received an
> email (from someone she didn't know) that say she had a card waiting and
> clicked on the link for the card. When she clicked on the link her
> computer rebooted and things haven't been the same since. Some web site
> are blocked like Symantec, and Hot mail to name a couple.
>
> Does anyone know the name of this bug and if so, where to find the removal
> tool?
>
> All scans that I able to do fines nothing. Also System Restore is no
> longer working.

You've posted in a newsgroup for the Vista operating system. A better place
would be microsoft.public.security.virus. Since you didn't say what you
scanned with, I can't comment on that but from your description of the
problem it certainly sounds like your daughter's computer is infected. Here
are general malware removal steps:

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/...moving_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech;
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

You do not mention if you are running an Anti-virus.
If not, install Avast. Do not have more than 1(one) AV installed

Also, install Malwarebytes and Spybot Search & Destroy.

Once the above is done, scan your computer with one of the Program at a
time, in Safe Mode.
All info below.

http://www.avast.com/eng/download-avast-home.html

Avast Anti-Virus is Vista compatible (32bit and 64bit Versions), FREE,
auto-updating, and a low resources user of your computer.
And, only have 1(one) Anti-Virus installed / running on your computer at any
one time..
Conflicts may occur if you have more than 1(one).

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.


"Bob Eyster" wrote:

> Wonder if someone out there can help me with this problem?
>
> System: Windows XP Pro w/all updates
>
> My daughter's PC got hit with a Virus/Trojan or something. She received an
> email (from someone she didn't know) that say she had a card waiting and
> clicked on the link for the card. When she clicked on the link her computer
> rebooted and things haven't been the same since. Some web site are blocked
> like Symantec, and Hot mail to name a couple.
>
> Does anyone know the name of this bug and if so, where to find the removal
> tool?
>
> All scans that I able to do fines nothing. Also System Restore is no longer
> working.
>
> Thanks
>
> --
>
> Bob Eyster
>
>
>
>

Hi Sally,

Thanks for the info and web sites. Looks like the MalwareBytes software did
the trick, found about 4 Trojans.

Again thanks

--

Bob Eyster
MS Windows Vista Home Premium



"Sally Johnson" <SallyJohnson@xxxxxx> wrote in message
news:856326A7-2C72-4243-8DD9-E239A2505228@xxxxxx

> You do not mention if you are running an Anti-virus.
> If not, install Avast. Do not have more than 1(one) AV installed
>
> Also, install Malwarebytes and Spybot Search & Destroy.
>
> Once the above is done, scan your computer with one of the Program at a
> time, in Safe Mode.
> All info below.
>
> http://www.avast.com/eng/download-avast-home.html
>
> Avast Anti-Virus is Vista compatible (32bit and 64bit Versions), FREE,
> auto-updating, and a low resources user of your computer.
> And, only have 1(one) Anti-Virus installed / running on your computer at
> any
> one time..
> Conflicts may occur if you have more than 1(one).
>
> http://www.spybot.info/en/index.html
>
> Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
> Download, install, update, and immunize your System with it.
> Then SCAN with it.
> Update it, and scan your System once a fortnight.
>
> http://www.malwarebytes.org/mbam.php
>
> Malwarebytes is as the name says, a Malware Remover!
> For the Free version scroll down their page to either download from
> Download.com, or Major Geeks.com
>
> Download, install, and update.
>
> Important re: Safe Mode
> If you happen to find a problem that you can’t uninstall / delete, reboot
> the computer, and go into Safe Mode.
> To get into Safe mode, tap F8 right at Power On / Startup, and use UP
> arrow
> key to get to Safe Mode from list of options, then hit ENTER.
> RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
> while in Safe Mode.
>
>
> "Bob Eyster" wrote:
>

>> Wonder if someone out there can help me with this problem?
>>
>> System: Windows XP Pro w/all updates
>>
>> My daughter's PC got hit with a Virus/Trojan or something. She received
>> an
>> email (from someone she didn't know) that say she had a card waiting and
>> clicked on the link for the card. When she clicked on the link her
>> computer
>> rebooted and things haven't been the same since. Some web site are
>> blocked
>> like Symantec, and Hot mail to name a couple.
>>
>> Does anyone know the name of this bug and if so, where to find the
>> removal
>> tool?
>>
>> All scans that I able to do fines nothing. Also System Restore is no
>> longer
>> working.
>>
>> Thanks
>>
>> --
>>
>> Bob Eyster
>>
>>
>>
>>