Poker PC Virus - HELP!

[jgcblack]

Currently getting fucked over by net pol scam bug...

its a malware program/ trojan that has infected my grind machine and comes up with a Metropolitan Police thingy saying I've been watching x, y or z types of videos/ porn etc.. and that if i pay £100 then since its my first offence they will let me off.

Hope the people who invented this get to rot in a crappy jail somewhere with an overly friendly cellmate called 'brian' who hasn't had any for a couple of weeks... #smileboys


So while im trying to work out how to sort it out from 'safe mode with command prompt' on windows 7 there will be no grinding.

Any suggestions help is all welcome.




I'm running windows 7 and have tried
- to boot into safe mode -                            randomware page still comes up
- to boot into safe mode with networking -  randomware page still comes up
- to boot into safe mode with cmd promt -  no randomware but don't have windows7 restore point cmd.

Anyone know the cmd for starting restore point in windows 7? I've found the XP one but that isn't working.

using these links to help me, but i need to get the software ive downloaded across to grind pc in order to 'execute'.
- digital spy - http://forums.digitalspy.co.uk/showthread.php?t=1594552
- http://pcsupport.about.com/od/commandlinereference/tp/windows-7-commands-p1.09.htm


have downloaded
- combofix
- tdss killer
- malwarebytes
- spybot S&D 1.6.2

[jgcblack]

found it

rstrui.exe

run from the administrator cmd promt has started already, pc did an auto restore point last night at some point so bingo - won't be losing a lot.


lets just hope i can find the little bugger before it 'sets' off again.

[smurf]

 google it...so long as you have another way to get internet

lots of results there

http://www.selectrealsecurity.com/remove-ransomware

[jgcblack]

google it...so long as you have another way to get internet

lots of results there

http://www.selectrealsecurity.com/remove-ransomware

thanks, seem to have sorted it..

found a dodgy looking file in Users/JGCB/Appdata/Roaming/msconfig.dat

yer right mate.

OFF YOU GO!


hopefully this will sort it, only one way to find out... I'm off to watch some torrents, some wonderful torrents I am, because because becauuuusssseeeee the p*rnsites are later!

[Amatay]

I got the same thing last month

Google is your friend

[jgcblack]

I got the same thing last month

Google is your friend

truestory.dat

[RikTee]

download combofix, boot PC into command prompt, run combofix.exe from a usb stick, takes about 30 mins or so but should solve the problem.

[Junior Senior]

System restore back to date when you didnt have the problem

[jgcblack]

System restore back to date when you didnt have the problem

problem was it wasn't letting me get to the 'restore point' part...

i had to run it in cmd as a .exe file.

s'ok now.

[tight4better]

Would suggest nuking your PC (formatting) if you can. And don't change or enter passwords/CC details until you're 100% you're secure.