Urgent Virus Help

MBAM should rid you of the problem if it's just a simple rootkit and Cnet is a trusted site.  If MBAM doesn't rid it from the offset, could you specify what the operating system is and I could walk you through the steps to remove it manually.

He said they already tried MalwareBytes mate.

He said they already tried MalwareBytes mate.

True, should have noticed that.  Sounds like a more complex rootkit.

Two questions:
1) What OS are they using?
2) Does the person at work use the computer for anything "personal", if not would they object to having their computer scanned by HijackThis (the program is a little invasive, anyone reading the log could tell what browser/search engine/home page/programs they have installed)?  I could read the log and tell you how to remove the problem.

Did some googling, maybe this thread helps?
http://www.howtogeek.com/forum/topic/its-called-internet-protection-fake-anti-virus-pop-up
The last post might be the solution.

Dex is on the ball. I use SUPERAntispyware, I've cleared the exact same virus of my mates laptop just last week. No harm in doing a system retore aswell to make sure. Also use the "Run" command and type in %temp% and delete all the files you find. Empty the recycle bin and after all that if that doesn't get rid of it ill run around Dublin in a pink dress.

Anyone got any ideas how to get shut?

Bumping this as one of my mates at work seems to have a nasty bit of malware/virus that AVG/MalwareBytes and Spybot won't get rid of.

It basically makes this scanner pop up and lists a load of trojans and stuff that's supposed to be on her comp, yet it's the actual scanner that's the problem. It won't let you work on anything and it tries to get you to enter personal data. It's called "Internet Protection".

Her comp has been booted in safe mode and had some malware entries removed. But when you start it up in normal mode, this annoying scanner pops up again.

Anyone got any ideas how to get shut?

http://www.simplysup.com/

Free 30 day trial, good tool to get rid of trojans.

Thanks for the advice lads, you are all proper gents!

Vitez, I may take you up on that. It's definitely a more complex rootkit. I'll let you know how I get on chief.

I had a virus recently, did what redkenny mentioned, was called worm.blaster 32 or something like that, did a system restore and it was gone but it only went and came back, just sent my computer into chaos until it wouldn't boot up, just kept on looping around, typical of that type of malware. I was running XP so my dad tried the XP reinstall CD, no luck. So he thought F**k it, and tried a Vista reinstall CD, and it worked, so I'm running Vista now and just rushing through the hundreds of updates that I'm missing. Lost all my documents etc, might try getting them back but there was nothing of huge value, fortunately, for years I've used my brick of an ipofod as a hard disk r my music so I didn't lose that.

Those scanners are real common now and real hard to remove.   Spybot SD may work, you can also try Advanced System Care.

More than likely you will need a hardcore removal tool.  Try Sophos http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html

Its a very good Rootkit Removal tool.

If its something that happens alot. When you remove it install Antilogger. http://download.cnet.com/AntiLogger/3000-8022_4-10822444.html?tag=contentMain;contentBody;5d

Its an active tool that will stop any infections before they got on your system.

Got one of those virus pop ups On the work computer. Have downloaded Spybot to try and sort it.
If that doesn't work I'll try the 2010 Norton that the new laptop came with.

Got one of those virus pop ups On the work computer. Have downloaded Spybot to try and sort it.
If that doesn't work I'll try the 2010 Norton that the new laptop came with.

Just so you know, as paid subscription anti viruses go, Norton is complete cack. Personally I prefer to use free versions of anti-virus software over the likes of Norton/McAfee.

Found the little b***ard. I ran all kinds of scans that found nothing. The main symptoms were that Firefox was getting redirected to shopping sites and Windows update wouldn't work. Also when I tried to navigate directly to the Microsoft Update site, I got a 'Page cannot be displayed' message.
I used IE to search Google for 'Microsft update page cannot be displayed' and eventually found the cause of the problem. It's a nasty little f**ker called Rootkit Win32.TDSS.tdl4.
Fortunately Kaspersky have a piece of software called TDSKILLER that you can download for free and it seems to have killed it for me. I'm now updating Windows and Firefox seems to be working fine again  

I don't know if these are considered viruses but does anyone get weird links posted by your friends on your wall in Facebook or receive random emails that don't make sense? Like adverts kinda stuff in them emails and the 'Check out who's stalked you today!' and such on Facebook.

That's just spam Adryan, aren't viruses.

That's just spam Adryan, aren't viruses.

No, but clicking on those kinds of links and installing things on Facebook can add to problems you might be having with spyware. People don't realise just how dangerous those links can be, or how clicking certain ones can add you to all kinds of mailing lists.

It's best to steer clear of anything you find suspicious, or any posts/links on facebook that you can see have been repeated on others pages.

Latest one is windows oversight centre ( a complete fraud ) but looks like windows etc, it's a real pain as it stops you running anti virus spybot programs. Basically I had to rename AVG to GVA so it didn't recognise the little sucker it's now history.

Logged into my Hotmail account this morning to find a load of delivery status notification (failure) emails. It appears that emails have been sent from my address book that I haven't sent and when I look in my sent box there is nothing there to say that the messages were sent.

I'm running a scan on my computer but so far have found nothing.

Anyone else have this problem or any idea what's going on?

Logged into my Hotmail account this morning to find a load of delivery status notification (failure) emails. It appears that emails have been sent from my address book that I haven't sent and when I look in my sent box there is nothing there to say that the messages were sent.

I'm running a scan on my computer but so far have found nothing.

Anyone else have this problem or any idea what's going on?

It wouldn't have been anything on your computer doing that.

It's either the Hotmail servers, or someone has access to your account.

Change your password immediately.

Logged into my Hotmail account this morning to find a load of delivery status notification (failure) emails. It appears that emails have been sent from my address book that I haven't sent and when I look in my sent box there is nothing there to say that the messages were sent.

I'm running a scan on my computer but so far have found nothing.

Anyone else have this problem or any idea what's going on?

Had the same problem myself a few weeks back. Have you opened a email from a friend about some berrys that make you lose weight?? If so that could well be the problem. It turns out to be a virus that sends emails out without you knowing to friends. It can also slow you pc down.

It wouldn't have been anything on your computer doing that.

It's either the Hotmail servers, or someone has access to your account.

Change your password immediately.

Had the same problem myself a few weeks back. Have you opened a email from a friend about some berrys that make you lose weight?? If so that could well be the problem. It turns out to be a virus that sends emails out without you knowing to friends. It can also slow you pc down.

Thanks for the help guys.

Couldn't find ant virus or malware on my laptop.

Changed my password. No-one should have access to my account though as this is the only computer I open my hotmail account with and nobody else knows my password.

Is a strange one though. On closer inspection, it appears to have sent emails from my safe list rather then my address book and they all started with "enquires@"

Not had any emails about berries either.

Will wait and see if anything else happens. Hopefully it won't.

Dave, I know people don't like to change their email address/provider because you may have registered  for several sites and services using that address but I really would consider leaving Hotmail. From time to time I get spam emails from friends and they are always, without fail from Hotmail accounts. This is a very common problem.
If you prefer to use free web-based email services then I'd suggest Yahoo! or Gmail. I personally use Yahoo! Mail and never seem to have any problems with it.

Dave, I know people don't like to change their email address/provider because you may have registered  for several sites and services using that address but I really would consider leaving Hotmail. From time to time I get spam emails from friends and they are always, without fail from Hotmail accounts. This is a very common problem.
If you prefer to use free web-based email services then I'd suggest Yahoo! or Gmail. I personally use Yahoo! Mail and never seem to have any problems with it.

Cheers for that info Rep, had the account for years and this is the first time anything has happened.

Don't really want to change it though as it would be a real pain. Will stick with it for now but, if I have anymore problems I think I'll get rid of it.

Right i got a virus detection notice this afternoon and thought i had caught it but the way my pc slowed down and played up it must have slipped through or part of it , anyhow i have done a system restore  deleted chrome because it had attached to that , i have now re installed chrome but have lost all my bookmarks does anyone know if you can retrieve them and how .