What kind of virus is this? And how do I get rid of it?

  • Thread starter Thread starter LiliF
  • Start date Start date
L

LiliF

Here's a little background to the situation. Maybe it could provide some insight on what type of virus is on my computer. My computer is a Microsoft Windows XP Media Center Editions 2005 (I'm certain that's irrelevant, but you never know) with the Windows 10 update.


I had a lapse in judgement last weekend and downloaded a suspicious looking file despite all the clear warning signs. I don't remember the site I downloaded it from, but I remember searching up up "pokemon snakewood rom download' and clicking a site from there. Now, if the website didn't look sketchy enough, the downloaded file did. It was an application (.exe) instead of a .zip file. I decided to open it and run anyway, because maybe by some higher power it would become a .zip file. I cant tell you what I was thinking that day.


Well, shortly after, multiple popups appeared and things were being forcibly downloaded to my computer without my consent. I could see shortcuts and apps appearing on my screen, anywhere from "anti-malware" applications to "safe shopping" shortcuts. It also gave me false security warning ads prompting me to click the number below for toll-free support, but seeing the damage already done, I decided against it because I was certain it was a trick. There were spelling errors on a few warnings, which furthered my resolve to ignore and exit. I then, not having the time to deal with this, shut down my computer and left to deal with it the next weekend, which was yesterday.


My first action after restarting my computer was to go into Programs and Features and uninstall the "anti-malware" program which I noticed was the first application to be downloaded. This quieted things down a bit. Then I attempted to remove all other things downloaded on 4/2/2016, which were quite a few. This was a bit difficult with the amount of pop-ups blocking my way but I managed. After about a half hour of work, everything in Programs and Features downloaded on that day was removed except for SafeFinder. It would not uninstall no matter how many times I clicked. I went into browser to look up solutions yet I found none, and any solutions I did find were for a different type of virus or an earlier version of windows. One thing I want to mention is that the virus disabled Windows Defender. At one point, I heard constant clicking in the background which sounded like someone or something going through my computer. I freaked out a little bit, though I don''t have any sort of important data on here.


I use Google Chrome browser and I noticed the virus had been adding 2 extensions despite my efforts to remove them. I do not recall their names. I reported abuse on one extension before closing out of browser and digging through my files. I made sure to erase any trace of "pokemon snakewood application" in my downloaded folder and then searched through each folder before I found something in my local disk downloaded on 4/2/2016. It was inconspicuous, under the name of Windows right above Windows.old. The fact that there were two windows and one had been downloaded the day of the virus tipped me off. But when I opened it, there were thousands of files inside that I know for certain I did not download. Now, this was most likely added by Microsoft, but the virus might have infected it. I saw some of those forcibly downloaded apps inside this file, and though I tried to remove them, I was not allowed to make changes without the permissions of TrustedInstaller. So, defeated, I decided to reset my computer completely.


I went into Start, Settings, Update & Security, Recovery, Reset this PC, Get started. After that I chose the option to factory reset with no files left over whatsoever. This morning I came back to see my computer as a virtually brand new Computer. I set it up and customized it again, but the first time I searched something in my Google Chrome browser (I searched just "youtube") I got a popup telling me I had spyware or malware on my computer and to call for assistance. I didn't call because there was a spelling error, which is a tell-tale sign of a trick. I pressed esc. and it went away, and I haven't had a pop-up since, but I'm certain it's still in my computer somewhere and I don't know how to remove it.


Checking my files, Windows is still in Local Disk (C:), but I have spotted no vicious files inside. I almost want to believe the virus is gone, but that pop-up makes me less than certain. Any advice you could give me? It would be a real bummer if I had to go get my computer checked out, because then I would certainly lose rights to my computer which I desperately need for my schoolwork.

Continue reading...
 
Back
Top