HELP! Trojan Virus on my laptop

[_Cathy_]

My PC has a Trojan virus. I think I got it from kickass tr. What do I do now? My files are not backed up.

Sent from my GT-N7100 using Tapatalk

[_Cathy_]

I cant open a page without ads popping up

Sent from my GT-N7100 using Tapatalk

[crazy_boy]

Cat, did you trying running microsoft anti virus?

[_Cathy_]

No. How do I do that? I have mcafee but it is expired na. I am afraid it might get my passwords so I disconnected from the internet.

Sent from my GT-N7100 using Tapatalk

[badkuk]

Do you have any AV software installed? Baka naman na-stop ng AV yung trojan before it could be executed.


Normally i would recommend:

-- doing a backup of the entire hard drive; if not possible, do a backup of your important files.
-- get another clean PC with AV installed and updated. Attach your hard drive as a slave, then use that PC to scan/clean.
-- return your hard drive to your PC, see if everything works
-- install/update your AV.


Although ideally, if you can afford to do so, just back up your files, then reformat/reinstall everything. Depending on the malware you got, AVs may not be able to remove it completely.


i've notice this particular malware running rampant the past few years -- Gammerau or something. M.O. of this malware is to

-- move all files and folders on your hard drive to a hidden folder
-- creates a trojan shortcut*.lnk) to the hidden folder. Less careful users would not notice that it's a shortcut and will double-click it, hence executing the trojan.
-- creates fake desktop.ini, thumbs.db files that contain the malware code. If the contents of this file look like garbage/unprintable characters, most likely infected nga. You can try to upload these files to virustotal.com to check.

-- from what i've noticed, the malware doesn't corrupt your files. It's primarily concerned with replicating itself. Pero mahirap magsalita ng tapos. It's very possible that it can do other nasty stuff. That's why if possible i would recommend resetup.


Are you running Windows XP?

[_Cathy_]

It's on my laptop pala. How do I know what is my windows? I really feel like crying now! If I back up my files how do I know which are not infected?

I have an expired Mcafee but it did say that it removed the trojan. But I think there is still a virus because I cannot click webpages without ads popping up. Also I saw some new folders on my "All Programs" I cant seem to run mcafee on my own bec it is expired na

Sent from my GT-N7100 using Tapatalk

[badkuk]

It's on my laptop pala. How do I know what is my windows? I really feel like crying now! If I back up my files how do I know which are not infected?

I have an expired Mcafee but it did say that it removed the trojan. But I think there is still a virus because I cannot click webpages without ads popping up. Also I saw some new folders on my "All Programs" I cant seem to run mcafee on my own bec it is expired na

Sent from my GT-N7100 using Tapatalk

Malamang hindi Gammerau yung nasa PC mo.

Maybe this can help:
How to remove Any Browser Redirect virus (Removal Guide)

[rukawa11]

Update mo antivirus then scan all, tangal yan, virus nga yan galing kickass, dinali din laffy ko kay KIckass dati

[_Cathy_]

Thanks. So this virus will not trt to login my accounts naman? Like Amazon or gmail etc?

I cannot even go to Tsikot. I am redirected to other sites. It also changed the homepage of google chrome

Sent from my GT-N7100 using Tapatalk

[rukawa11]

Try to update your anti virus, scan all then para makasigurado uninstall/ install mo chrome and mozilla mo, ganun ginawa ko ok naman
Baka nagtatago virus sa chrome browser application mo

[ddungu2016]

i dont trust mcafee. you can have a trial of norton av for a month. then you can scan your machine with norton. uninstall mcafee first before installing norton.

Sent from my Nexus 5 using Tapatalk

[jkatzify]

Laptop infected as well a month ago.
Chrome-Firefox and IE were infected.
I removed Chrome and installed Opera.
Downloaded and tried "Adware removal tool by tsa" and "Hitman Pro".
Ran these 2 programs one after the other for 5 times and it got rid of the infection.
Finally re-installed Chrome.

[Monty]

Thanks. So this virus will not trt to login my accounts naman? Like Amazon or gmail etc?

I cannot even go to Tsikot. I am redirected to other sites. It also changed the homepage of google chrome

Sent from my GT-N7100 using Tapatalk

Hopefully not but better to be on the safe side and change your passwords. Use a different (trusted) computer when doing so.

[oj88]

When the dust settles, I'd like to recommend ESET Smart Security. I bought my copy from Lazada... 2-year subscription for 5 PCs. We just divided the costs among family members so it was really cheap.

ESET Smart Security includes both the Anti-Virus and an enhanced firewall. It's light on the resources so it won't cause your PC to crawl to a halt with it running in the background.

[_Cathy_]

Do you have any AV software installed? Baka naman na-stop ng AV yung trojan before it could be executed.


Normally i would recommend:

-- doing a backup of the entire hard drive; if not possible, do a backup of your important files.
-- get another clean PC with AV installed and updated. Attach your hard drive as a slave, then use that PC to scan/clean.
-- return your hard drive to your PC, see if everything works
-- install/update your AV.


Although ideally, if you can afford to do so, just back up your files, then reformat/reinstall everything. Depending on the malware you got, AVs may not be able to remove it completely.


i've notice this particular malware running rampant the past few years -- Gammerau or something. M.O. of this malware is to

-- move all files and folders on your hard drive to a hidden folder
-- creates a trojan shortcut*.lnk) to the hidden folder. Less careful users would not notice that it's a shortcut and will double-click it, hence executing the trojan.
-- creates fake desktop.ini, thumbs.db files that contain the malware code. If the contents of this file look like garbage/unprintable characters, most likely infected nga. You can try to upload these files to virustotal.com to check.

-- from what i've noticed, the malware doesn't corrupt your files. It's primarily concerned with replicating itself. Pero mahirap magsalita ng tapos. It's very possible that it can do other nasty stuff. That's why if possible i would recommend resetup.


Are you running Windows XP?

I think I deleted something. I cannot connect to the internet. It says "The windows wireless service is not running on this computer" :cry:

Sent from my GT-N7100 using Tapatalk

[badkuk]

I think I deleted something. I cannot connect to the internet. It says "The windows wireless service is not running on this computer" :cry:

Sent from my GT-N7100 using Tapatalk

unless you deleted anything under c:\WINDOWS, i don't think that's what caused the problem. Have you tried booting in safe mode+networking?

[_Cathy_]

unless you deleted anything under c:\WINDOWS, i don't think that's what caused the problem. Have you tried booting in safe mode+networking?

okay na sir. I clicked system restore. It looks like something was deleted by hitman pro. I'm on step 6 of 8 in the link you gave me

[Walter]

Check your turrent software also, it might be the one that's causing the problem. There were reports of some issues with new ut*rrent versions.

[111prez]

Malware bytes anti-malware is effective for me

You can download a free version

TDSS Rootkit Killer is also good

[shadow]

Huwag kasi DL ng DL ng ****. [emoji12]


Sent from my iPhone using Tapatalk