I was just surfing the web, and somehow XP got onto my computer and now I can't do anything without crazy ass pop ups telling me to buy their fake software. I can't surf using any of the browsers on my laptop. I have no clue what to do to start ridding my computer of it and I'm a broke college student so geek squad can't rip me off this time, someone help, I'll rep you!
I can't use my browser to download this ( I'm on my iPhone) is there a way to stop the software from hijacking my browser and just showing a warning page?
Restart laptop and press F8 on startup and boot into safe mode. Try to browse to site after that. If it doesn't work try going to this site and downlaod - http://gnuwin32.sourceforge.net/packages/wget.htm open cmd.exe wget http://download.cnet.com/3001-8022_4-10804572.html?spi=aae9b480fd76d46140527ef1fd5567f2
Make sure your internet isn't using a proxy set by the virus. Malwarbytes removed win 7 total security for me.
You can use regedit to fix it. I had to do it on my dads laptop. It isn't too difficult. http://www.spywarevoid.com/remove-xp-total-security-2011-xptotalsecurity-2011-removal-steps.html
How do I do that, I just tried safe mode and Total Security still showed up and prevented me from browsing. Im in a pickle! I have a summer school project due and everything is closed memorial day, I need my laptop lol!
This might not be a very helpful question, but do you have any other computers? If you do and have a blank cd, it's possible to burn something like Ultimate Windows Boot CD and run the spyware utilities that come with it. Then you would boot back into Windows without it and ideally problem solved. If not, what exactly is it doing? Any attempt to browse the internet is blocked or severely crippled? Another option would be to grab a buddy's laptop or desktop and use a flashdrive to try and put MalwareBytes Anti-Malware and/or Spybot Search & Destroy on it then run it on your computer in safe mode. I tend to ramble, so please provide further details
Thanks for your help guys! I actually just got my browser working by entering some stuff I found on google in the registry (I'm surprised it work cause I'm not too computer savvy...obviously). So what do I do now? Download and run malware, anyone know where I can get it for free?
Malwarebytes: http://www.malwarebytes.org/ You might also want to download these and keep these on your computer for the future. It is called RKill and can kill active malware on your computer thus returning a hijacked computer back to you so you can run you antivirus and malware programs. Link: http://www.bleepingcomputer.com/download/anti-virus/rkill
1. Reboot PC into Safe mode using F8 at the splash screen. (like another poster said). 2. Run rkill available here. Rkill.exe It stops known malware processes. If you aren't able to connect to the internet. Open internet explorer, open internet options. Click on the Connections Tab. Click on Advanced. Un-check proxy server if it's check marked. 3. Download malwarebytes and run the scan. http://www.malwarebytes.org/mbam-download.php 4. If the malware caused your files to disappear, download and run unhide.exe here. It will make all your files visible again. A bunch of these new malwares add +h to them. Unhide.exe
I just got bit by this bug last week but it was simple to remove. I also started up in safe mode, ran malwarebytes but also ran Spybot search and destroy which you can get for free from Cnet. After that, zero problems. This virus has been going around like crazy btw.
Before you do all that, see if you can do system restore first. It's much easier. 1. f8 before it starts 2. command prompt safety mode 3. login and type rstrui.exe you may have to change directories into the system32 folder. Simply type "cd c:\windows\system32" without quotes and before step 3. It works 90% of the time.
It doesn't work 100%, but make sure you do it in "command prompt safety mode". Most viruses will disallow use of it in GUI mode.
