Heres the story:
so i was on a website minding my own business, then some random thing popped up saying i successfully installed an anti-virus program. Then something came up saying i had to start a virus scan. I tried to open task manager but it wouldnt let me. And no other programs would work.
I shut down my computer and restarted it in safemode. I ran a scan in both malwarebytes and mcafee and they both said there was nothing. I heard about shutting off system restore and then running a scan, but i cant find the option for disabling it.
I am really scared and my anxiety is kicking in. This isnt even my computer its my dads and he is not coming home until march 17.
Malwarebytes says there is an update but im too scared to go on the internet or out of safe mode. Please help
Answers & Comments
Verified answer
try the help desk of a techincal support forum such as this one:
http://www.needtechsupport.com/help-desk/
Before we get you to shut down system restore first make sure the heuristic level(scan level)of the McAfee is set to high or thorough then redo scan. Check Malwarebytes also for this not sure myself I am in Linux system at present so i am going on memory, It may have this setting also but I do not think it does.
After scanning go into "Control Panel" and open "System", the System Restore is top left tab on XP, Windows 7 should be same can not remember. Turn off- do not worry about losing these because many bugs like to hide in the restore files.
Now do a Disk Clean up, go back to "Start button" click it and you will see "My Computer" or "Computer" now right Click on computer and hit the "Manage"
Now you will click on "Disk Managment" on the left. Now click once on the system drive or C: partition then right click on same and you will see "Properties" open that.
Still with me bud. Relax and continue:)
The Disk Properties window shows the Disk cleanup or Clean System files button. Start the clean up, another window will pop up (the larger one) make sure all the boxes inside are checked except
the Office installation files if they show those we will keep, now open the other tab on this window and for good measure click "remove system restore points" or something like that. it should be bottom button.
It may sound strange but what we are doing is a clean up but also we are trying to get the bug to react and give itself away to McAfee, now once the clean up is done, it may take time,let it finish.
Now do a disk defragmentation. It is on the Tools tab on same Disk Proterties window or also is available in the Disk management window on left side above Disk management. do the defrag, I have had antivirus pop up and say it found a virus during this also.
Keep all windows open for now, ok.
After the drag is done go to the "tools" again and you will see "Check disk for errors" when you click on it make sure BOTH boxes are checked. It will say reboot required click OK but do not reboot yet.
Close all windows, and type CMD in the run box at start area. You will see the Command Prompt open, everything is set just type in sfc /scannow then hit enter i when it is done type exit then hit enter or close the little window.
Other hiding spot Pagefile. go to Contol Panel then Folder Options ( uncheck hide system files and folders and uncheck hide file extensions)
Now pagefile is visible. Go to start- my computer- you will C: drive - open and go down until you see pagefile. Delete it. it will make a new one at reboot so no worries.
Now it is time to reboot and maybe unplug the Network line if it is still in or turn off the wireless.switch --- the manual switch. look around for it if this is a laptop.
Watch to make sure the Disk Check kicks in at reboot you will know it because the whole screen will look like the little Command Prompt Window like before and you will notice the system doing a run of about 5 tests.
If it does not get back into Safe Mode and get back to the Tools Tab and redo the "check for Disk errors'"
If all goes well keep machine off line and check how it runs for a while. Maybe some of the other people here have other suggestions too. Just make sure it feels right to you before reconnecting it up.
What is the name of the rogue program?
Combofix is not for beginner computer users, don't use it unless you know what your doing.
Need the name of the phony anti-virus program to help you.
Download this from another computer, transfer it to your computer via jump drive, run it in normal mode with internet connected. Once it finishes, update and run malware bytes.
http://www.bleepingcomputer.com/download/anti-viru...
monitoring cookies aren't particularly a fear. the viruses are commonly coming again given that of your approach repair, oftentimes malware will lock into approach repair so while the person deletes them they arrive again as quickly as a reboot occurs. disable your approach repair and run your experiment once more