HELP! Trojan Virus on my laptop

[_Cathy_]

My PC has a Trojan virus. I think I got it from kickass tr. What do I do now? My files are not backed up.

Sent from my GT-N7100 using Tapatalk

[_Cathy_]

I cant open a page without ads popping up

Sent from my GT-N7100 using Tapatalk

[crazy_boy]

Cat, did you trying running microsoft anti virus?

[_Cathy_]

No. How do I do that? I have mcafee but it is expired na. I am afraid it might get my passwords so I disconnected from the internet.

Sent from my GT-N7100 using Tapatalk

[badkuk]

Do you have any AV software installed? Baka naman na-stop ng AV yung trojan before it could be executed.


Normally i would recommend:

-- doing a backup of the entire hard drive; if not possible, do a backup of your important files.
-- get another clean PC with AV installed and updated. Attach your hard drive as a slave, then use that PC to scan/clean.
-- return your hard drive to your PC, see if everything works
-- install/update your AV.


Although ideally, if you can afford to do so, just back up your files, then reformat/reinstall everything. Depending on the malware you got, AVs may not be able to remove it completely.


i've notice this particular malware running rampant the past few years -- Gammerau or something. M.O. of this malware is to

-- move all files and folders on your hard drive to a hidden folder
-- creates a trojan shortcut*.lnk) to the hidden folder. Less careful users would not notice that it's a shortcut and will double-click it, hence executing the trojan.
-- creates fake desktop.ini, thumbs.db files that contain the malware code. If the contents of this file look like garbage/unprintable characters, most likely infected nga. You can try to upload these files to virustotal.com to check.

-- from what i've noticed, the malware doesn't corrupt your files. It's primarily concerned with replicating itself. Pero mahirap magsalita ng tapos. It's very possible that it can do other nasty stuff. That's why if possible i would recommend resetup.


Are you running Windows XP?

[_Cathy_]

Do you have any AV software installed? Baka naman na-stop ng AV yung trojan before it could be executed.


Normally i would recommend:

-- doing a backup of the entire hard drive; if not possible, do a backup of your important files.
-- get another clean PC with AV installed and updated. Attach your hard drive as a slave, then use that PC to scan/clean.
-- return your hard drive to your PC, see if everything works
-- install/update your AV.


Although ideally, if you can afford to do so, just back up your files, then reformat/reinstall everything. Depending on the malware you got, AVs may not be able to remove it completely.


i've notice this particular malware running rampant the past few years -- Gammerau or something. M.O. of this malware is to

-- move all files and folders on your hard drive to a hidden folder
-- creates a trojan shortcut*.lnk) to the hidden folder. Less careful users would not notice that it's a shortcut and will double-click it, hence executing the trojan.
-- creates fake desktop.ini, thumbs.db files that contain the malware code. If the contents of this file look like garbage/unprintable characters, most likely infected nga. You can try to upload these files to virustotal.com to check.

-- from what i've noticed, the malware doesn't corrupt your files. It's primarily concerned with replicating itself. Pero mahirap magsalita ng tapos. It's very possible that it can do other nasty stuff. That's why if possible i would recommend resetup.


Are you running Windows XP?

I think I deleted something. I cannot connect to the internet. It says "The windows wireless service is not running on this computer" :cry:

Sent from my GT-N7100 using Tapatalk

[badkuk]

I think I deleted something. I cannot connect to the internet. It says "The windows wireless service is not running on this computer" :cry:

Sent from my GT-N7100 using Tapatalk

unless you deleted anything under c:\WINDOWS, i don't think that's what caused the problem. Have you tried booting in safe mode+networking?

[_Cathy_]

unless you deleted anything under c:\WINDOWS, i don't think that's what caused the problem. Have you tried booting in safe mode+networking?

okay na sir. I clicked system restore. It looks like something was deleted by hitman pro. I'm on step 6 of 8 in the link you gave me

[Walter]

Check your turrent software also, it might be the one that's causing the problem. There were reports of some issues with new ut*rrent versions.

[_Cathy_]

It's on my laptop pala. How do I know what is my windows? I really feel like crying now! If I back up my files how do I know which are not infected?

I have an expired Mcafee but it did say that it removed the trojan. But I think there is still a virus because I cannot click webpages without ads popping up. Also I saw some new folders on my "All Programs" I cant seem to run mcafee on my own bec it is expired na

Sent from my GT-N7100 using Tapatalk

[badkuk]

It's on my laptop pala. How do I know what is my windows? I really feel like crying now! If I back up my files how do I know which are not infected?

I have an expired Mcafee but it did say that it removed the trojan. But I think there is still a virus because I cannot click webpages without ads popping up. Also I saw some new folders on my "All Programs" I cant seem to run mcafee on my own bec it is expired na

Sent from my GT-N7100 using Tapatalk

Malamang hindi Gammerau yung nasa PC mo.

Maybe this can help:
How to remove Any Browser Redirect virus (Removal Guide)

[rukawa11]

Update mo antivirus then scan all, tangal yan, virus nga yan galing kickass, dinali din laffy ko kay KIckass dati

[_Cathy_]

Thanks. So this virus will not trt to login my accounts naman? Like Amazon or gmail etc?

I cannot even go to Tsikot. I am redirected to other sites. It also changed the homepage of google chrome

Sent from my GT-N7100 using Tapatalk

[Monty]

Thanks. So this virus will not trt to login my accounts naman? Like Amazon or gmail etc?

I cannot even go to Tsikot. I am redirected to other sites. It also changed the homepage of google chrome

Sent from my GT-N7100 using Tapatalk

Hopefully not but better to be on the safe side and change your passwords. Use a different (trusted) computer when doing so.

[oj88]

When the dust settles, I'd like to recommend ESET Smart Security. I bought my copy from Lazada... 2-year subscription for 5 PCs. We just divided the costs among family members so it was really cheap.

ESET Smart Security includes both the Anti-Virus and an enhanced firewall. It's light on the resources so it won't cause your PC to crawl to a halt with it running in the background.

[Jun aka Pekto]

Also.......

This should be a wake up call for the TC to buy external storage and make backups of valuable data/information.

I have my most valuable digital data (eg .pdf documents) backed up 2x or even 3x with different external storage devices.

[Jun aka Pekto]

I stick with Avast Free mainly because it has a boot-up scan available before going into Windows and free real-time protection. Once that is done, I follow it up with MalwareBytes for anything left behind by Avast Free.

My browser is Firefox with the AdBlock Plus and Avast extensions.

Works for me. No ads here.

[rukawa11]

Try to update your anti virus, scan all then para makasigurado uninstall/ install mo chrome and mozilla mo, ganun ginawa ko ok naman
Baka nagtatago virus sa chrome browser application mo

[jkatzify]

Laptop infected as well a month ago.
Chrome-Firefox and IE were infected.
I removed Chrome and installed Opera.
Downloaded and tried "Adware removal tool by tsa" and "Hitman Pro".
Ran these 2 programs one after the other for 5 times and it got rid of the infection.
Finally re-installed Chrome.

[ddungu2016]

i dont trust mcafee. you can have a trial of norton av for a month. then you can scan your machine with norton. uninstall mcafee first before installing norton.

Sent from my Nexus 5 using Tapatalk