Requesting help fixing trojan infection

[mjenks777]

My mothers computer has been infected with the SHeur2.AYCY Trojan and I'm trying to help her get it fixed. We have AVG free edition 8. I'm not sure what information you will need from us, I've never had to fix one of these before.

She was browsing the internet and her computer locked up. after she rebooted from a force shut down there was a little red circle with a white x in her start bar with balloon pop ups trying to scam her into downloading some software. AVG said it removed the infections, but it hasn't. her computer wont connect to any internet or run any kind of virus scanner anymore. i can get files i need to download onto her computer with a gig stick from mine if needed.

Appreciate any help. Thanks

[harry 48]

http://www.computerhope.com/forum/index.php/topic,46313.0.html


go to above and complete post 3 logs here an expert will see them

[mjenks777]

Her computer will not connect to the internet in any way, so im using mine to download these and transfer them over with a gig stick. is there a chance that my computer will get infected when we bring the log files from her computer back to mine so i can post?

[harry 48]

 

download this anti-virus and run it first before you do the rest then you will no it will be ok


go ahead complete everything and see what the logs say and put them on the stick and post

[mjenks777]

Downloaded the SUPERantispyware, Malwarebytes andtimalware, and the hijack this. Transfered them over to her computer, but none of them will even load. when i try to open them nothing happens at all.

[onion]

I'm not an expert, but i am really bored waiting for a reply on my problem... what i would do is try to
a) rename the files to something like    "anything.exe"   or "shooter.exe"   you get the point. then try running them.
b) make a new user with admin rights and try running virus scans on that...

Thats all the advice i can give. GL

[Karnac]

http://www.kusangpalo.com/2008/usb-drive-tip-hold-down-shift-key.html

If you have difficulty, you may have to run them in safe mode, tap F8 at start, .
If you have difficulty, you may have to rename the programs when you save them. (sniper.exe or test.exe)
If you get stuck on a step, proceed to the next .

[harry 48]

Mbam   renamer


Try the renamer download for Malwarbytes.

http://kixhelp.com/wr/files/mb/randmbam.exe

The randmbam.exe will try to create random names and shortcuts for Malwarebytes Anti Malware (MBAM) if you have it installed already.

If it installs then use this link to download the updates.

Download Malwarebytes' Anti-Malware Database - GT500.org

Just download it to the desktop and run the exe then run Malwarebytes


as karnac said rename

[mjenks777]

Renaming the files let me get them all installed. But none of them will run now that they are installed. I switched to safe mode, and still none of them will start.

[onion]

Try running them on a different user (control pannel>users>new user w/ admin rights.)

[mjenks777]

tried that when i was in safe mode. Didnt work

[mjenks777]

Ive still had no luck getting anything to work. Any more ideas? before we go get a new computer and light that one on fire?

[Karnac]

Can you download AviraAntiVir and run a scan, perhaps it will do a better job than AVG....be sure to disable AVG if you do so.

[evilfantasy]

Try this. BitDefender Rescue USB

Or if you don't have a flash drive then you can burn a CD. Rescue CD’s

[mjenks777]

ill try that BitDefender Rescue USB. Sure hope it works. Thanks for the help thus far!