promotion image of download ymail app
Anonymous asked in Computers & InternetSecurity · 9 years ago

please help me people?

ok well earlier i got a message from avg that i had 4 trojan horses and weirdly enough one was seen as being malware bytes anyway i removed that and scanned it and avg removed them and sent them to the virus vault i re downloaded malwarebytes and scanned it found nothing and avg after 3 scans found nothing ? am i safe now im really scared they could hack into my facebook or something. please guys can you give me a answer and also sorry for my poor grammar i am typing with one hand as the other is broke

4 Answers

  • Tamim
    Lv 7
    9 years ago
    Favorite Answer

    Perform this virus removal instruction, Just to be Safe.

    Follow the steps carefully. Ask a computer-savvy friend to assist you if you lack experience in this area.

    +First download the latest versions of the following on +another, clean machine+ and burn to CD or copy to a USB memory stick+




    RKill this page has a variety of different filenames to download to fool the virus, which will try to block RKill from running. Remember the filename of the version you downloaded.

    CCleaner (cleans out caches)

    Avast! Home:

    Download these to your desktop and before running them, then change the names of the malwarebyte and combofix files to

    Malwarebytes: mblah.scr

    ComboFix: comfix.exe

    Follow these steps in order Don't skip ahead.

    Now, start the machine in Safe Mode with networking (hit the F8 function key as the machine boots up, and choose Safe mode)

    Turn off System Restore on your machine, but only until you get this fixed - many of these trojans get copied into the System Restore files, which anti-virus programs aren't allowed to touch and the viruses could reinstall themselves from there. My Computer > Properties > System Restore.

    The malware actively blocks programs and tools, so before you can start cleaning, you need to get the malware entries out of the registry, and stop the malware's current processes from running.

    Double-click FixNCR.reg to run it to clean the registry

    Now double click the RKill file (whatever name you downloaded it as) to run it. Wait for it, it could take a while. If the fake antivirus program throws a warning on the screen and blocks RKill, leave the warning up on the screen and run RKill again.

    Do not reboot your computer If you reboot it will just load the malware in again.

    Then run CCleaner (it'll make scanning faster because it will delete a bunch of temp files and save you from having to scan those.) If the virus blocks CCleaner from running, proceed to the next step.

    Then run Malwarebytes (mblah), and clean everything it says.

    Then run ComboFix (comfix), and clean everything it says. If it tells you to reboot your machine during the process, do so immediately.

    Then install and run Avast - tell Avast to do a boot-scan - click on "schedule boot-scan" - and restart the computer

    Let it start and do the Avast boot scan

    Then turn System Restore back on.

    Now install the antivirus program of your choice to do continuous scanning, and make sure you keep it up to date

    Always keep your Windows, web browser and Java software up to date - frequent patches are released to plug security holes.



    • Commenter avatarLogin to reply the answers
  • Anonymous
    9 years ago

    Yes you are safe, just do it again and compare the results. AVG is not popular as avast! Anti-Virus so the program is still new and still needs updating. Try contacting your software's supporters so you'll have a better understanding of the program you're using. Please take patience with virus removers because some aren't perfectly fit for your preferences. Just consider this okay?

    • Commenter avatarLogin to reply the answers
  • 9 years ago

    If nothing shows up in the current scans you are probably safe...and yes, there are many many malwares that actively attack the very programs designed to remove them...even malwarebytes.

    • Commenter avatarLogin to reply the answers
  • 9 years ago

    yes you are safe but i would run it again and clean out your cookies and history and run it again in safe mode. Safe mode just hit F8 over and over till it boots up in safe mode and clean out history and cookies

    • Commenter avatarLogin to reply the answers
Still have questions? Get your answers by asking now.