Another IT Help thread

[L3nny]

Popped round the mother in laws house for a lovely spot of roast beef.

Unfortunately the price for said meal was to have a look at her laptop.

She had a trojan which would open on windows startup and demanded you pay £70 to the police and wouldn't let you click anything or close the program.

I booted in safe mode, ran msconfig and disabled the offending program and deleted the exe, also deleted a reg entry.

Problem is now, certain services cannot start, it's as though the local system password has been changed.

The main downside of this is the wifi wont work.

On XP you could just select manage, users, and change the password there.

Anyone know how to do this in Win7

Chz

[andrewsmith]

Normally safemode and going to ODBC (I think! Never did this in a good while)
Allowed you wipe out Administrator and recreate Admin2 with password. That Win XP again, PM Soulkiss he might know a better way

[L3nny]

Well you're all useless, got bored of waiting for an answer and did a system restore.

Luckily there was a restore point from last week.

That's not fully removed the offending items as trojans bypass files that are monitored by system restore and will infect again.
Download malware bytes from here
http://www.malwarebytes.org run a full scan. It will take a few hours.


Sent from my GT-I9100 using Tapatalk 2

[Mark_h]

When I last got hit, none of the usual tools sorted it as it infected the IPL. If you manually went around stopping autostarts and deleting exe's, it just came back. Even creating dummy write-protected files with the same filename didn't stop the bugger. I found one tool that was free and worked. Hitman Pro It sorted the IPL then went off and sorted all the other damage. The usual malware and virus stuff declared no problem before, during or after.

This was all in an XP world but I'm sure Hitman will work on W7 too.

May be worth trying this next time.

However restorepoint recovery is usually by far the best solution for parental support situations especially if they've "had a go" themselves.

[L3nny]

Both Norton and Windows Defender can't find anything and it looks like it's working at the moment so I'll see how it goes.

She just opdated her Norton subscription too at 30 odd quid or whatever it is. I knew those things were a waste of money.

Thanks for the replies

[andrewsmith]

AVG is the best one!

All I've got at work and its the free one

[L3nny]

Same as what I use. Never had a problem and I visit some pretty dodgy websites

[Mark_h]

Originally Posted by L3nny

Both Norton and Windows Defender can't find anything and it looks like it's working at the moment so I'll see how it goes.

She just opdated her Norton subscription too at 30 odd quid or whatever it is. I knew those things were a waste of money.

Thanks for the replies

Still recommend running hitman. I've got all sorts of AV and anti-malware stuff and none of them picked up my issue. I only knew something was wrong as it kept re-proxing my browser. Decent trojans declare themselves safe in your detector software so don't get picked up.

Norton is crap it couldn't find a virgin in a Nunary.
Use avast its free and quicker than avg.
Avg is ok but slow and processor intensive.

Sent from my GT-I9100 using Tapatalk 2