Pop-ups to sell antivirus

Closed
twan100 - Sep 14, 2010 at 04:34 PM
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 - Sep 14, 2010 at 04:46 PM
Hello,
My labtop is corrupted or something. When i turn on my computer i get these pop ups saying security warning, and i cant open any application or get on the internet. When it asks me if i want to fix the problem i click yes and it takes me to a website that has prices for antivirus systems or something. I dont want to be scammed out of money especially since i know sometimes these virius are fake and just try to get your money. I need help i've tried everything. O! and i put my labtop on safemode and now i cant get out of it... what should i do?!


Related:

1 response

Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,163
Sep 14, 2010 at 04:46 PM
Twan,

You know, you are asking to get out of a problem and yet you never bothered to say please.

We are not servants here, we are volunteers who give their time freely to help others! It is part of a every well educated child's manners.

But since you look in despair...

You are the victim of a rogue Trojan Horse designed to get to your credit card account and it is a good thing you did not fall for it.

Please boot your system in safemode with networking which will give you access to internet.

Please follow the following procedure carefully and to the letter.

You have a rogue virus Trojan Horse which is self protective, thus it will prevent any antivirus from fonctionning.

You must kill the evil processes which the virus is presently running amd preventing you from running any antivirus. If you don't it will keep reproducing the files for ever.

To kill the processes:

1. Download to your desktop and run Rogue Kill:

https://download.bleepingcomputer.com/grinler/rkill.com

2. You should now see a window that shows all of your desktop icons, including the rkill.com program.

3. Double-click on the rkill.com in order to automatically attempt to stop any processes associated with the Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step.

If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by the Horse when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate the processes . So, please try running Rkill until malware is no longer running.

As a matter of a fact, if you get messages, it is a sign that the virus is agonizing with excrutiating pain, so you can just grin while it is suffering!:)))

Please, DO NOT REBOOT your computer or the processes will come back to haunt you!

Download to your desktop Malwarebyte.

https://ccm.net/downloads/security-and-maintenance/4621-malwarebytes-anti-malware/

Once on your desktop, we must still outwit the virus.

Right click on the MBAM icon and click on rename. Rename it kioskea.exe.

Install Malwarebyte and launch it. From the second tab, update it.

Pretty please, request a FULL system scan which should take more than hour. Once the scan is finish, delete all of item that were found.

Please let me know the results or I may throw a curse on your computer.:-)))

Regards
0