[Orion_7]

Hello guys, I really need your help. My sister's laptop (windows Vista) was infected by anti-virus-1 spyware two days ago even though she was using McAfee antivirus software. She restored her computer to seven days earlier. The spyware is gone (I think), but now her computer is all messed up. Programs keep crashing. One time, it says printer device just crashed or scanner device just crashed. Then it restarts the computer. She can't uninstall anything because when she goes to control panel-->uninstall a program, there are only three programs in it. She can't open up microsoft office. It says, "There is not enough memory or disk space to run Word". I checked the computer memory and CPU usage in windows task manager and everything is fine: Physical memory 23%. System recovery is my last resort, but she would lose everything. It won't let her save anything to an usb drive or a CD-ROM. It says it needs to format the disk. She just bought Adobe Illustrator CS4 two or three weeks ago, and if she perform a system recovery, it will erase everything, including Illustrator CS4 (1 user only). Please help

[Bichey]

{Edited by Moderator- Bichey please review TSG Rules http://www.techguy.org/rules.html

Your post was removed because unauthorized members may not post advice about removing malware in threads that obviously are malware related. We realize you want to help and that TSG malware helpers are swamped with requests for help but we made the Rule for several reasons-

http://library.techguy.org/wiki/Beco...alware_Removal

A paragraph has also been added to the forum rules that reads as follows:

Log Analysis/Malware Removal - In order to ensure that advice given to users is consistent and of the highest quality, those who wish to assist with security related matters must first graduate from one of the malware boot camp training universities or be approved by the administration as already being qualified. Those authorized to help with malware issues have a gold shield next to their name and authorized malware removal trainees have a blue shield next to their names. Anyone wishing to participate in a training program should contact a Moderator for more information.

[Orion_7]

I doubt this would work though. As I said above, there isn't any significant program in control panel. I won't let her open essential programs on her computer. Even if these two programs could remove the spyware, her computer is still messed up right. Does it fix everything or does it only removes the spyware and leaves the computer where it is right now?

[Bichey]

Better you request 4 solution in malware forum. Experts in that forum will help you. They deal with computer viruses.

[Byteman]

Hi, You should have your sister join as a member and post Hijackthis logs etc....pass this info on to her if you wish.
_ _ _ _ _

Please go to our Malware Removal forum and do what is below:

I will be closing this thread so have sis start a new thread in Malware Removal.....

I'm not sure you will get help and it if you do it may be a few days before you do..... I think you should try, at least to give her a chance to maybe save files that are needed.

Note that you will not be able to post in that forum into a thread started by someone else, only sis and the malware helpers will be able to post.


Read this "Stickied" thread at the top of the Malware Removal forum front page: http://forums.techguy.org/malware-re...st-before.html

go to Click here to download HJTinstall.exe

• Click the blue "Download the Hijackthis Installer" link
• Save HJTinstall.exe to your desktop. DO NOT just press run from the website
• Double click on the HJTinstall.exe icon on your desktop.
• By default it will install to C:\Program Files\Hijack This.
• Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
• Put a check by Create a desktop icon then click Next again.
• Continue to follow the rest of the prompts from there.
• At the final dialogue box click Finish and it will launch Hijack This.
• Click on the Do a system scan and save a log file button. It will scan and then save the log and then the log will open in Notepad.
• Don't use the Analyse This button, its findings are dangerous if misinterpreted
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Paste the log in your next reply.
• DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

don't forget this second part

Please also do this:

• Open Hijack This and click on the "Open the Misc Tools section" button.
• Click on the "Open Uninstall Manager" button.
• Click the "Save List" button. After you click the "Save List" button, you will be asked where to save the file. Pick a place to save it then the list should open in notepad.
• Copy and paste that list here in your reply

[james88]

{Edited by Moderator-} please review TSG Rules http://www.techguy.org/rules.html

Your post was removed because unauthorized members may not post advice about removing malware in threads that obviously are malware related. We realize you want to help and that TSG malware helpers are swamped with requests for help but we made the Rule for several reasons-

http://library.techguy.org/wiki/Beco...alware_Removal

A paragraph has also been added to the forum rules that reads as follows:

Originally Posted by TSG Rules

Log Analysis/Malware Removal - In order to ensure that advice given to users is consistent and of the highest quality, those who wish to assist with security related matters must first graduate from one of the malware boot camp training universities or be approved by the administration as already being qualified. Those authorized to help with malware issues have a gold shield next to their name and authorized malware removal trainees have a blue shield next to their names. Anyone wishing to participate in a training program should contact a Moderator for more information.

[Orion_7]

Originally Posted by james88

this antivirus 1 is a rogue spyware scam, its a fake antivirus from the author of ANTIVIRUS 2009. you should remove it manually, heres how to remove these fake antivirus 1 and its other clones http://darfuns.com/fake-antivirus-2009-removal/

McAfee SiteAdvisor redflags the link above. By the way, I'm not gonna messing around with system registry. It's a $1500 laptop.

[Orion_7]

Originally Posted by Byteman

Hi, You should have your sister join as a member and post Hijackthis logs etc....pass this info on to her if you wish.
_ _ _ _ _

Please go to our Malware Removal forum and do what is below:

I will be closing this thread so have sis start a new thread in Malware Removal.....

I'm not sure you will get help and it if you do it may be a few days before you do..... I think you should try, at least to give her a chance to maybe save files that are needed.

Note that you will not be able to post in that forum into a thread started by someone else, only sis and the malware helpers will be able to post.


Read this "Stickied" thread at the top of the Malware Removal forum front page: http://forums.techguy.org/malware-re...st-before.html

go to Click here to download HJTinstall.exe

• Click the blue "Download the Hijackthis Installer" link
• Save HJTinstall.exe to your desktop. DO NOT just press run from the website
• Double click on the HJTinstall.exe icon on your desktop.
• By default it will install to C:\Program Files\Hijack This.
• Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
• Put a check by Create a desktop icon then click Next again.
• Continue to follow the rest of the prompts from there.
• At the final dialogue box click Finish and it will launch Hijack This.
• Click on the Do a system scan and save a log file button. It will scan and then save the log and then the log will open in Notepad.
• Don't use the Analyse This button, its findings are dangerous if misinterpreted
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Paste the log in your next reply.
• DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

don't forget this second part

Please also do this:

• Open Hijack This and click on the "Open the Misc Tools section" button.
• Click on the "Open Uninstall Manager" button.
• Click the "Save List" button. After you click the "Save List" button, you will be asked where to save the file. Pick a place to save it then the list should open in notepad.
• Copy and paste that list here in your reply

Thank you very much sir. I will tell her to download this program tomorrow since she's sleeping right now. Thanks for your help. I will send a reply after I got home from school tomorrow.

[Byteman]

Yes that will be fine! When we reply to you (or to sis) we are not demanding that you post right back, or right then.....

At this site, it is done when you can follow the directions at your own pace and can take time to do the work right. It works the same way on our side......

[Orion_7]

Originally Posted by Byteman

Yes that will be fine! When we reply to you (or to sis) we are not demanding that you post right back, or right then.....

At this site, it is done when you can follow the directions at your own pace and can take time to do the work right. It works the same way on our side......

Sorry sir. My sister has decided to bring it back to Dell store and/or recovery it. Sorry again for the trouble. Please remove this thread since it's no longer necessary.

[Byteman]

Hi, OK- that's fine with us!

Best of luck!