Trying to manually clear a virus

[Booldawg]

daughter clicked on a link on FB she shouldnt and now whenever her laptop stats up it takes her onto a webpage that says its a message from Metropolitan and Strathclyde police and she should pay x amount of money!

The only way to startup is by safe mode else it will invoke the virus.

Her laptop is ancient and think the antivirus has expired or never worked. I did google the virus and there was a manual solution that didnt work. I've done the Trend House call sweep but it didnt pick anything up and AVG wont install in safe mode.

Is there any other way to clear this virus apart from a re-install? (I dont really want to do this as the laptop is 2nd hand and didnt come with the windows xp CD)

[MarkRae]

http://www.malwarebytes.org/

[ChuckFickens]

Download malwarebytes on another computer, stick it on a memory stick or CD, boot the infected machine in safe mode with networking, install malwarebytes in safe mode and run a full scan after letting it update.

Note...

If it's XP you'll need to connect via Ethernet cable for networking to work in safe mode, if it's windows7 wireless should work in safe mode... (not sure about vista TBH.... try it and see)

[MarkRae]

Indeed though, thinking about this a bit further, it doesn't actually sound like a virus per se. If by "whenever the laptop stats up" the OP means whenever IE (or whichever browser) starts up, then it's probably nothing more than the browser's startup page having been changed. Easy to do, and even easier to fix.

However, if the OP really does mean whenever the laptop starts up, then it's probably just something that's been added to the Windows startup routine. Again, easy enough to fix...

[Booldawg]

ok thanks all. I will give that a go! spent 3 hours trying last night. This is why she is banned my my laptop!

[sandyRoe]

booldawg, I have a Windows XP disc that I no longer use. If you'd like it e-mail me at [email protected]

[Booldawg]

I did think about that Mark, but it seems to let you boot up IE which takes you to your home page - for about 3 seconds then displays this page which locks out any kind of mouse/keyboard use.

Thanks Sandy - what version of XP do you have? I'm sure I have XP Pro on a disc but her laptop runs XP home - not sure if theres a difference?

[ChuckFickens]

Sandy, Although it's a nice offer, unless you are supplying the license sticker with the CD then you'd need to make sure the CD you have is exactly the correct version to match the license sticker Booldawg has otherwise it won't work.

[sandyRoe]

Its windows XP home edition. There's a product key, a long string of numbers, on the back of the envelope.

[Booldawg]

Thats very kind of you Sandy. If I cant shake this virus off I'll take you up on that offer!

[Booldawg]

I should be able to use her product code as you can usually get that from the 'properties' tab on my computer (I think)

[MarkRae]

No, the product code isn't the same as the 25-digit activation code...

[Booldawg]

A big thanks to all on this thread, the malwarebytes worked a treat. To think I spent over 3 hours last night trying different solution that didnt work!