GolfGTIforum.co.uk
General => General discussion => Topic started by: T_J_G on 16 February 2012, 22:12
-
Right I'm not totally up to speed on Windows but it seems our laptop has got a trojan. Spybot picks it up as a WIN32 GEMA but won't remove it. I tried to download AVG but it comes up that my security settings on browser don't allow this :huh: When a search on google is done and we click a link it'll forward us to ebay or adultfriendfinder.com.
I'm running Spybot in administrator mode see if that'll kill it...any ideas people?
-
Remove it in safe mode :undecided:
-
AVG might work. It's free too.
-
Check my blog in my profile, I hastily wrote a post not so long ago about removing viruses :smiley: Lots of viruses are modelled around the same lame tactics and in most cases easier to remove thanks to this lameness.
-
AVG might work. It's free too.
Downloading now.
Jay read your blog but to be honest most of it went over my head. Does the taskill stop the virus from being used and therefore can be removed easier?
-
It stops the virus program running, if you've told taskkill to kill the correct program that is. Also depends on a few things, the virus could be running in multiple processes (program names like zxcv.exe or asdf.exe) so you'll need to kill all, or boot into safe mode - most viruses don't / can't run in safe mode.
It is a bit of a mess and I need to tidy it up, I just has inspiration late at night and rambled on :grin:
-
It's kind of useful but I'm not too clued up on Windows.
I've taskkilled IE and doing another spybot search? If not reboot into safe mode and remove through Spybot that way?
-
Hijack this kill the process
run malware bytes
Get doggy and search for other files that contain those for mentioned virus names then manually delete the other files!
Done
-
Right done a hijack this jsut no idea what it means!
-
You need to seperate normal processes from a active virus you can click on each item it finds to establish if Hijack this thinks its normal. The tricky part is establishing what its doing, but safe bet get Malware bytes get trial version of Pro to clean up the comp, but sometimes the virus is clever enough to stop installs which is why you need hijack this to stop it in its tracks before wiping it out! Read the guides for Hijack this or print a copy of what it finds on here if you can?
-
Update: computer is really slow so just backing up for a clean install of Vista I think
-
Dont forget to back drivers up it might be a mare to find them again?