Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I have Ukash Virus


  • Please log in to reply
7 replies to this topic

#1 EyeGEE

EyeGEE

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:45 AM

Posted 26 August 2012 - 04:59 AM

As stated, I have a ukash virus. With this virus I cannot get into my computer at all. I am running windows xp on a compaq presario.

What happens is I am able to run the start up but as soon as I log on to one of the names my computer locks up with something about my files are going to be forwarded to the feds if I dont pay x in UKASH. Can someone walk me though some way of cleaning this up? I have fairly decent computer knowlege, but I have never run into this problem. I thought about just using a recovery cd, but that becomes a hassle as well. Any feedback is appreciated.

thanks.

BC AdBot (Login to Remove)

 


#2 roelof1967

roelof1967

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:12:45 PM

Posted 26 August 2012 - 06:35 AM

Hello,

This is a very nasty virus.
I think you can beter ask here for help : http://www.bleepingcomputer.com/forums/forum22.html
First you have to do these steps : http://www.bleepingcomputer.com/forums/topic34773.html

Roelof

#3 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:45 AM

Posted 26 August 2012 - 07:01 AM

Boot into safemode with networking


Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#4 roelof1967

roelof1967

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:12:45 PM

Posted 26 August 2012 - 07:58 AM

Sorry, but these won't work because the topic poster cannot log into the computer.
That's why I said that a expert must look into it.

Roelof

#5 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:45 AM

Posted 26 August 2012 - 08:03 AM

roelof1967

Read my instructions properly

SAFEMODE WITH NETWORKING :P .I would should have made it BOLD

If user has issues logging into safemode with networking.I would report to malware response team.

#6 roelof1967

roelof1967

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:12:45 PM

Posted 26 August 2012 - 08:07 AM

The user is going to have problems with logging in.
See this page : http://www.pcwebplus.nl/phpbb/viewtopic.php?f=222&t=5927 where I well trained malware figther is using another cd to delete te virus.

Not all viruses can be handled by using the tools you use.

Roelof

Edited by roelof1967, 26 August 2012 - 08:08 AM.


#7 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:45 AM

Posted 26 August 2012 - 08:09 AM

Lol,thankyou :lol:

We see a lot of these stuffs here :lol: .I would guide the user appropriately when i get a reply.

#8 roelof1967

roelof1967

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:12:45 PM

Posted 26 August 2012 - 08:11 AM

I wish the user much luck then.

Roelof




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users