ukash infection

[ahmedilyas]

no idea how. last night all was ok, did not download anything at all.
this morning, I woke up to find my remote computer being infected with the ukash virus/trojan!

all my Windows is updated as is my AV (symantec SBE) - no idea how i got this infection. The worst part is that I wont be home for another few days and have got important things on the computer.

how does one get infected with this virus and how can I remove it? I am based in the UK.

it doesnt make sense what happened in those 9 hours between last night and this morning.... i cant CTRL+ALT+DELETE but can do an ALTGR + Del however any key presses or switching between tasks/apps does not work.

 

[Layback Bear]

I can't tell you how it happened except you could of got it at another time and a timer was installed with the virus. Use this, it works for many of people. Just follow the instruction. It is easy to do but does take some time.
http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

 

[ahmedilyas]

thanks.
well I am running WS2008R2 - so im hoping this will work with it (same kernel pretty much as Win7)

but im so annoyed and frustrated i cant do anything remotely until i get home in 4 days time. its my main system

 

[Layback Bear]

If it does find virus ect. let us know which ones. As far as I know it should work.

 

[ahmedilyas]

i will do for sure.

damn it. cant do anything remotely.

 

[ahmedilyas]

I take it there is currently no way of doing this remotely via RDP? Even to kill that process of the trojan? Anything at all remotely?

 

[Layback Bear]

Not as far as I know.

 

[ahmedilyas]

ok im home now. im currently using the Windows Defender offline on the usb stick and its doing a quick scan.

it just told me that the preliminary scan results show that malicious or potentially unwanted software may exist (im hoping that it is the ukash virus/trojan)

once, hopefully, removed - what are the next steps to see if anything has been either jepordized OR if it still exists on the system?

 

[ahmedilyas]

so it found win32/karagany.i. I pressed remove and said actions were successfully carried out. now doing another quick scan again and seeing if it picks up anything else.

other than that - anything else I need to do? is there another way I can scan the system to see if there are traces of the virus or its varient?

to me, from what ive been reading - does not sound like the ukash virus....