computer help!!

[malks]

i need a computer literate person to try and help me debug my computer. basically i know i have a virus (probably many) and i've just realised something appears to be running on my machine trying to get my bank details to my online account logins etc.... can someone point me in the right direction? or do something remotely?? i'm just about to pull the plugs aout of it all and take it to a shop if i cant get some thing as i dont want people stealing stuff from me!

[Blue_SV650S]

goto task manager (CTL-ALT-DELETE) and on the processes tab, it will give you a list of processes that are running.

Expand the window so all current processes can be seen and take a screenshot ... post that up ..

If we can identify a rogue program, we should be able to find a cure with a bit of googlefu 8)

[rictus01]

given the situation you're in I take it you don't run any virus software/ spyware detection, or open files you don't know ?

for a start, don't open anything you don't know (most trojans require you to start them).

stop any processes you don't know ( ctl+alt+del - task manager) either buy or download a virus protection program, install make sure it's up to date.

switch off the pc, disconnect the PC from the internet safe boot the PC F8 use the virus scanner to scan it's host directory and clean it if required, if it has a boot option use that if not boot to command prompt and go to the scanners directory and use the commands from there, once it's scanned the whole machine restart and normally boot up into windows, scan again to be sure.

try running Zone alarm or another firewall program so you can choose what programs access the internet.

the above is general stuff, but nothing will help if you don't use a little common sense in looking after the machine.

Cheers Mark.

[krhall]

Malks - You have PM!

[malks]

cheers, i'm thinking there appears to be far too much running at the moment! here we go:

also no pm..........

[krhall]

Oops try now. Put that on then get a virus scan going.

[Blue_SV650S]

jucheck.exe

http://www.greatis.com/appdata/d/j/jucheck.exe.htm

[malks]

kr- cheers for the help, but that has just given me 3 folders with lots of different files to choose from!

[fizzwheel]

Mcaffee do a free program called "Stinger"

http://mcafee-avert-stinger.en.softonic.com/

Download and run it, or even better as Rictus says, download it, then boot your PC in safe mode and run it. If its a common virus the stinger will clean it off.

If you have mal or spyware ontop of that you'll have a battle on your hands. Personally if you havent ever run any Anti-Virus on your PC then I'd pull the plug on your install and wipe the whole lot and start again as you may find you'll never get rid of it totally. Its a drastic solution so try the above stuff and the advice thats already been posted first.

[Blue_SV650S]

kr- cheers for the help, but that has just given me 3 folders with lots of different files to choose from!

Google W32.Scrimge.O .. that is the worm you have ...


"The worm then connects to m.proxyisp.info on TCP port 21888 allowing unauthorized access to perform the following actions:

* Update itself
* Download additional files
* Spread using Microsoft instant messaging clients
* Delete itself
"

Basically this has opened the door in ...

You could have all sorts of muck in there now ...

So get rid of this then install an antivirus ... and do a boot check ... avast is a good free one (http://www.avast.com/eng/download.html) ...

[malks]

im being a complete spaz, i've downloaded reg run on the comp but do i just get it to delete anything it may suspect is harmful? also blue sv how do i get in to delete that worm? im having a bad night with this computer.

ive also found out this may all be caused by my father playing around with firewall settings/ anti virus programmes (eg turning them off!)

[krhall]

Just pick the folder suitable for your OS and download everything in there. Then unzip and follow the instructions.

[malks]

cheers kr! i'll report back how i get on! if you never hear from me again, my computer has come to life and eaten me up!

[krhall]

Malks - it has other names too, sophos should pick it up for you.