Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected with a fake AV and google hijack


  • Please log in to reply
1 reply to this topic

#1 Sue Hardy

Sue Hardy

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:56 PM

Posted 23 December 2010 - 11:02 AM

Hi,

This is my first real post here, so I'm sorry that I'm posting with a problem.

My laptop is infected with something that isn't responding to Rkill or Malwarebytes.

The worst thing is I don't know how I got it. I first noticed a pop-up on Monday, it was porn - unusual, I thought since I'm the only one who uses that machine and I know which sites I've visited. I closed it and thought nothing else of it. Then the next day, Google started acting odd. I'd search something and the usual list would come up but when I clicked on whatever another window would open and another search engine address would be in the box.

Then today all hell broke loose. I have a fake AV trying to get me to do the usual things, I can't open any programs when in normal mode and I can't get rid of the thing. It walked right past Avast and now when I scan in safe mode with Malwarebytes nothing comes up.

Please help!!

Edited by Sue Hardy, 23 December 2010 - 11:03 AM.


BC AdBot (Login to Remove)

 


#2 Sue Hardy

Sue Hardy
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:56 PM

Posted 23 December 2010 - 02:52 PM

Looks like it might be fixed. I managed to run Rkill in normal mode and it stopped 6 items. Five looked like they were legit but there was a temp. file hidden away. I ran Malwarebytes but it didn't see it so I deleted the thing anyway - looks okay now but I'm not taking it for granted.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users