Just got a call from friend and went to look his pc.
Message was to activate Malware protection , pc on the start goes into scanning with this malvare program and shows infections of w32.wormblast and on the end says you have to activate Malvare protection and submit email address and password.
I could not start anything:windows task manager, command prompt etc. all was disabled including his antivirus program.
I went home and downloaded the tool to remove it from Symantec.
I disconnected modem.
Started pc in safe mode and managed to start the removal file from cd.
Pc turned off after probably 8 minutes.Could not log any more in the safe mode.If i log normally windows would start but off course you couldn't use it.
Any suggestions.Sorry if you need more info i might look into it with more details tomorrow.Let me know what info you need.
I tried to run the file from cd in safe mode but that switched of the pc too.
June 26th, 2011, 02:46 PM
I would use a LiveCD to get important files off the disks, scan the saved files on a separate machine to make sure they aren't infected. Wipe the disks and clean install.
The "fix it" game get's old quick, imo. Too much hassle.
June 27th, 2011, 12:13 AM
A live CD (Non-Windows) should let you deal with it. I personally just slave the drive.....no boot, no game? ;):)
Otherwise you might try going into BIOS and Windows and turning off all screensavers and power saving. Then try safe mode, or get into control panel real quick.
You didn't say what version of Windows......................?????, or if you have CD/DVD, USB, floppy.
A HijackThis log is frequently useful with these problems, as you don't say what the particular form of scareware is.
A method I have used is to just give it a fake plausible e-mail and password......... chances are they are so greedy they won't pass the opportunity because you are not on the internet?...........that might buy you the time.
June 27th, 2011, 10:47 AM
Thanks for a prompt replies.
Sorry Nihill was just posting details too quickly and forgot to add version of windows etc.
Done the clean install.
Funny things is that Pc was switching off as it was overheating.Picked up straightaway but didnt pay enough attention.Cleaned the fans and pc went from 86c to 43.:)
All good now.
Hell man! why didn't you tell me..............you could have fried my breakfast for me :D
July 2nd, 2011, 12:18 PM
Steve R Jones
Give this new puppy a try:
Microsoft Standalone System Sweeper Beta
A recovery tool that can help you start an infected PC and perform an offline scan to help identify and remove rootkits and other advanced malware. http://connect.microsoft.com/systemsweeper
July 3rd, 2011, 09:40 PM
AVG has a boot disk too - you're going to need a boot disc that detects that ish