Jump to content


Photo

Trojan Keylogger attack "Vista Antispyware 2012"


  • This topic is locked This topic is locked
2 replies to this topic

#1 peterma

peterma

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 20 December 2011 - 04:22 PM

Hi,

My PC (Vista) is infected by a trojan.keylogger.
I'm constantly getting popups from "Vista Antispyware 2012" that my PC is infected by all kinds of malware and directing me to a site where to buy the antivirus ...
Every file I try to open is blocked saying it is infected by the trojan keylocker, also internet explorer. I cannot do anything anymore (i write this from another computer).
I managed to run Ad Aware pro anyway (full scan) but the problem remains after restarting.

What can i do ?? (I'm not a technical person).

Peter

#2 CeciliaB

CeciliaB

    Volunteer

  • Moderator
  • 7550 posts

Posted 21 December 2011 - 06:41 PM

Hi peterma,

1.
This infection changes settings on your computer so that when you start a program, it will instead start the infection. To fix this you must change a registry settings. From a clean computer, please download the following file and save it to a CD/DVD, external Drive, or USB flash drive.

FixNCR.reg http://download.blee.../reg/FixNCR.reg

Transfer the CD etc. to the infected computer and double-click the FixNCR.reg file. Let Windows merge its content with the register.
Restart the computer.

2.
Please, download RKill by Grinler to your Desktop:
On the page http://www.bleepingc...nti-virus/rkill click the link iExplore.exe Download Link and save it to your desktop.

Turn off your antivirus program and other security programs.
How? See http://www.bleepingc...opic114351.html

Double-click on the iExplore.exe icon to start RKill. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step.

If you get a message that RKill is an infection, that is a fake warning given by the infection. The trick is to leave the warning on the screen and then run RKill again.

Run RKill five times.

If you continue having problems running RKill, you can download the other renamed versions of RKill from the rkill download page. All of the files are renamed copies of RKill, which you can try instead.

If you need to restart the computer you will have to run RKill again five times.

3.
You should now be able to follow the instructions in the topic Read This Before You Post!.

#3 CeciliaB

CeciliaB

    Volunteer

  • Moderator
  • 7550 posts

Posted 20 January 2012 - 05:27 PM

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter.

Everyone else please begin a New Topic.

Thank You !




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users