Malware Removal Forums

This one is a monster!

Pi&Chips · 2008-09-01T19:23:48+00:00

My neighbour had fallen behind with his McAfee subscription, so when a message appeared on his screen offering him up-to-date protection, he thought it was from McAfee and happily accepted it, parting with £130 on the way. Now he has a computer that will not do anything without filling his screen with "Virus Found - Remove Now" messages. McAfee cannot see anything wrong. I succeeded in keeping the messages at bay long enough to run HijackThis - log follows - and I now have the computer here at home until fixed. Awaiting further instructions... Keith Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:56:38, on 01/09/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\eH

44 min read

NonSuch

September 6, 2008, 7:43 PM UTC

As this issue is resolved,