Do I have a Trojan / Virus? :S

I don't know very much about computer safety, and I keep getting a message from Win 7 Security that I have something like: Trojan-keylogger****" and it won't let me go onto the internet, I try to go on the Internet, and it tells me it's unsafe. To scan, I must purchase the Windows 7 Security thing.. :/

I need help, what should I do? I did a System Restore, and it works for awhile, but then Win 7 Security comes back saying I have it again. :|
Thanks,
Wub.

 

OK, try a system restore in safe mode.
Then download blink person security, you can get it from eeye.com
Then create a non administrator account on your pc and use that from now on.

Install blink on the admin account. Use non-admin account for general use.

 

http://www.malwarehelp.org/win-7-security-removal-2010.html

Why is the only help anyone can ever give involve telling them to use system restore and download the AV of their choice?
Too often there's people just posting in threads "try this and this, then download blink security whatever the fuck."
Pisses me off. Be more specific.
and Malwarebytes should work for just about anything your shitty favorite AV's do. All it is is a matter of personal preference.

 

Aight, I have a C|EH LPT C|HFI C|NDA C|NSA

My quite literal professional opionion on a miracle cure to every solution people create for themselves. (I already gave it) It might piss you off but that's how the ball bounces.

Ujelly?

Let's see, 3 largest security cyberheads are... C.O.R.E. / Qualys / Eeye
One of them makes antivirus software, guess which one it is?

---------
Wait wait wait, I could kindly ask him to give me access to his box so I could take a more in depth look. Then I can quit everything I'm doing to do pretty much the same thing...

You know what AV we use? blink LMFAO
you know what vulnerability scanner we use? retina LMFAO x2
You know what company the DOD hires to design their firewalls? (just guess lol)

I don't give "do this" and "do that" responses.

Let's give a step by step breakdown of what happens::

Boot the computer into safe mode, you now have full write access. Roll back before the system was infected (in safe mode)

Reboot. Intall blink. It will prevent you from getting any virus, it's pretty damn good.

Use blinks vulnerability scanner (retina), it will run a test, use it to apply patches to your sustem.

Create non administrative account. Believe me.... Microsoft didn't intend for you to run the system as administrator 24/7. Actually that's one of the things that should be on your personal DO NOT do list.

 

So the best you can do is tell him to download your AV and do system restore?
That's putting your knowledge to good use. Even google gave more info..

 

There's more than 1 way to skin a cat. Very good, yes there is. I'm sure you found alot of opinions on google. I will testify mine is solid.

C|EH - Certified | Ethical Hacker
C|HFI - Certified | Hacking Forensics Investigator
C|NDA - Certified | Network Defense Architect
C|NSA - Certified | Network Security Architect
LPT - Licensed Penetration Tester

^I got more on my wall, but these ones are the ones best worth mentioning.
I'm not an idiot. Sure, you could wave magical harry potter wands around. But in the real world these simple solutions DO WORK. He's not using xp, he's using an operating system that's designed to LOCK ITSELF DOWN when you start tinkering with it! If it was xp, which doesn't usually default you with system restore that would be another story. But In this case, he's using windows 7 which provides you with an "easy out". I suggest he take it.

 

Thats sign of a Trojan if you need romovals i can do it over Teamviewer just pm me

 

So, now it's not letting me open other programs, such as : TeamViewer, or anyting that I download. It also won't let me open : Control Panel, (so I can't back my computer up,) or Task Manager, :| ..
Any help PLEASE?!

 

You can't open Task Manager? I had the exact thing and I removed it without a restore.

What I did was:
Fix the .exe autorun registry keys (the malwarehelp.org link posted above should help with that)
Delete the process from Task Manager.
Run Malware Bytes indepth full pc scan.
Remove infected files.

That's what worked for me. Sorry I can't help you further, but I had the exact same thing, I'm sure of it, and now I'm fine so don't worry too much.

 

I'm not very informed when it comes to Computers.. :$ I tried googling .exe autorun keys, and can't seem to understand how that works.. :/
Could you help me further, please? This is greatly appreciated.

 

Have you tried running your computer in safemode?

 

I'm not sure how to :$..

 

Restart your computer and it will say something about press F2 and then look for safemode use your arrow keys and press enter

 

Get onto another computer, download malware antibytes, save to flash drive/usb, plug it in to infected computer, reboot into safemode, and then scan. Voila!

 

The solution for this has already been posted. If the OP hasn't tried it out yet, that is his own fault.

http://www.malwarehelp.org/win-7-security-removal-2010.html - I can confirm that this works, I have done it for friends before, without any problems, at all.

To open things, such as TeamViewer (I assume you're using Win7) right click, and then "Run as Administrator", or something like that. - This could make all programs work.

If you want to sort the .exe problem (files that can't open), open notepad, and type this;

Code:

Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\.exe]
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

Save it as "whatever.reg" - make sure it's a .reg at the end. - This doesn't solve your main problem, but it prevents the rogue to activate itself through .exe files.

 

I have tried this, but I can't download / run it, and even when I "Run as Administrator," it still won't open it.. it gets closes admediately.

 

Like I said, go into safe mode.

 

Yeah, this is a virus. I just had to reformat my computer cause it infected my internet. Do what the above says. Also to kill it, CTRL+DEL+ALT then open task manager. Find a [Random 3 Letters].exe and kill that process.

 

Try going to run and then msconfig and going to startup and disabling stuff that doesn't seem right.

 

Do the registry thingy first, and you should be able to open any .exe file. - Which is on the website, and I also posted above.