restoring wipes EVERYTHING and starts with preparing setup again

i would delete all toolbars/uninstall them and download avast anti-virus trail and run boot scan

If you absolutely cannot loose the files do not preform a system restore, you'll loose everything. Download Malwarebytes trail and make sure it's up to date. Then download Microsoft Security Essentials make sure that is up to date also. Restart the computer into safe mode and run a full scan with both the programs.

Do not move the files to a USB and then back to a clean system, there's a possibility that the files could be infected too.

[ Register or Signin to view external links. ]
[ Register or Signin to view external links. ]

ImWestyy wrote Hello TTG,
I've got a problem. My mums computer has recently received a few viruses, meaning the computer is slow as hell, and constantly comes up with loads of ****!
I don't know where they have come from - end of that.

I was thinking about restoring the system back, but what are the consequences of this?
Or, should I put the important files on an external HHD, restore the computer to default, then out the files back on the system?

My mum doesn't know a lot, but I'm not sure which one to do, AS I CANNOT LOOSE THE FILES!

Any help would be great, + rep!
Cheers

you should try the first three apps in this handy thread ;)
i would use rogue killer first to ensure that all infected services are ended before you try to go about removing them.
Forums/t=4581088/advanced-virus-r...tools.html
also if you have a restore point you can revert back to it but you will lose any unsaved data in between when the restore point was made and now.
microsoft security essentials is a joke!!!!

vokal wrote -snip-
microsoft security essentials is a joke!!!!

Uhm, says who? MSE is one of the top free anti virus programs out there, care to elaborate?

But I do agree with the rootkit, download TDSSKiller and run it also.

[ Register or Signin to view external links. ]

Use Malwareytes. Nuff said.

Pinguicula wrote

vokal wrote -snip-
microsoft security essentials is a joke!!!!

Uhm, says who? MSE is one of the top free anti virus programs out there, care to elaborate?

But I do agree with the rootkit, download TDSSKiller and run it also.

[ Register or Signin to view external links. ]

sure i have had to repair 100's of infected systems from 98-7 and on more than one occurance i have installed secondary more in depth apps and have had MSE installed and updated while the secondary app (malwarebytes, eset, clam, avast, Rogue killer, TRk), and many other scanners and have had them find unwanted previously undetected issues (trojans,rootkits,browser exploits,infected process's, droppers , and crytped installers) that MSE never noticed and had been on the systems for quite awhile funny thing with that i noticed was that when a different scanner found something and had a window pop up MSE responded a few moments later saying it had also found the same thing.
i am not saying its not a good light security app, but when it comes down to some of the nastier things floating around on the internet it should not be relied on absolutely.
also No amount of AV is going to protect you from making bad decisions when it comes to installing sketchy software or unsafe web browsing.
most pc users these days are sheep and wouldn't know a good AV from a infected .exe

vokal wrote -snip-
sure i have had to repair 100's of infected systems from 98-7 and on more than one occurance i have installed secondary more in depth apps and have had MSE installed and updated while the secondary app malwarebytes, eset, clam, avast, Rogue killer, TRk and many other scanners and have had them find unwanted previously undetected issues (trojans,rootkits,browser exploits,infected process's, droppers , and crytped installers) that MSE never noticed and had been on the systems for quite awhile funny thing with that i noticed was that when a different scanner found something and had a window pop up MSE responded a few moments later saying it had also found the same thing.
i am not saying its not a good light security app, but when it comes down to some of the nastier things floating around on the internet it should not be relied on absolutely.
also No amount of AV is going to protect you from making bad decisions when it comes to installing sketchy software or unsafe web browsing.

Interesting, my experience with MSE is completely different in fact I've had it block most IE exploits and some drive bys. I sometimes get notifications from it before Malwarebytes, what other software were you running that notified before MSE "copied" it?

Pinguicula wrote

vokal wrote -snip-
sure i have had to repair 100's of infected systems from 98-7 and on more than one occurance i have installed secondary more in depth apps and have had MSE installed and updated while the secondary app malwarebytes, eset, clam, avast, Rogue killer, TRk and many other scanners and have had them find unwanted previously undetected issues (trojans,rootkits,browser exploits,infected process's, droppers , and crytped installers) that MSE never noticed and had been on the systems for quite awhile funny thing with that i noticed was that when a different scanner found something and had a window pop up MSE responded a few moments later saying it had also found the same thing.
i am not saying its not a good light security app, but when it comes down to some of the nastier things floating around on the internet it should not be relied on absolutely.
also No amount of AV is going to protect you from making bad decisions when it comes to installing sketchy software or unsafe web browsing.

Interesting, my experience with MSE is completely different in fact I've had it block most IE exploits and some drive bys. I sometimes get notifications from it before Malwarebytes, what other software were you running that notified before MSE "copied" it?

eset was the main one i remember doing that but i have had it happen with network deployed AV's as well on more than one termianl at a time, Kaspersky Business trendmicro and Symantec where the main ones i noticed it doing that on.i will point out that essentials is not a traditional AV in the sense of the other mentioned ones its more of a go along with a AV type of tool .

vokal wrote -snip-
eset was the main one i remember doing that but i have had it happen with network deployed AV's as well on more than one termianl at a time, Kaspersky Business trendmicro and Symantec where the main ones i noticed it doing that on.i will point out that essentials is not a traditional AV in the sense of the other mentioned ones its more of a go along with a AV type of tool .

Hmm, well thanks for the information. Learn something new today