2aHawaii
General Topics => Off Topic => Topic started by: Q on August 29, 2013, 01:01:48 AM
-
.
-
Haven't been unfortunate enough to be infected with that one. Have you looked here?
https://support.norton.com/sp/en/us/home/current/solutions/v71075396_EndUserProfile_en_us (https://support.norton.com/sp/en/us/home/current/solutions/v71075396_EndUserProfile_en_us)
Good luck!
-
If you know how long ago the virus appeared, you can also try using the Windows Restore feature. That will undo any changes/new programs loaded from the time you select to restore from to present.
Let me know if you need help trying that.
-
.
-
1. Go to Safe mode with networking
2. Download the free version of malwarebytes then scan your computer in safe mode.
3. Remove everything it finds.
4. Reboot PC.
-
When you do the system restore to clean a virus, you might have to disable the restore service or the virus can restore itself! The people who write these deserve life in jail...providing free tech support for the victims!
-
Kaspersky also has a free scan.
-
.
-
Done it 4 times already and still nothing.
Backtracked with 3 different programs, and the virus still keeps coming back.
Did you disable the restore feature? Some viruses can restore themselves if you don't.
http://windows.microsoft.com/en-us/windows7/turn-system-restore-on-or-off (http://windows.microsoft.com/en-us/windows7/turn-system-restore-on-or-off)
Try doing that, then repeat the cleaning procedures.
-
.
-
Want me to look? I'm curious how tough this malware is.
-
.
-
PM sent.
-
Man...I've been doing system restores for the past 6 hours. I have finally been able to log on in safe mode with networking, so hopefully this next solution solves the problem.
I think, you gonna have to format your hard drive by re-installing Windows, drivers, and all softwares again. You will lose everything though. Just put your Windows Operating System (XP pro, 7, etc) on the CD drive, then follow the instruction prompt.
-
.
-
Sounds challenging. I think I can TRY clear that up for you. Reply to pm.
-
I got rid of mine by restoring and then removing the virus. If you want to know where I got the malware removal let me know. I have to look it up because it's on my other pc. But Buddha JL sounds way more competent than me. Im not too good with computers.
-
As 808gmac said, I'd say the best thing to do is reformat the hard drive. Don't fear it. It's a piece of cake. Just do it and spare yourself all the madness of trying to do everything BUT that.
But make sure you only fry the bulk of the space, whatever it is, but leave the small partition it will ask you about reformatting as well. You'll know what I'm talking about when you get there. That small partition contains all your drivers. I've never heard of any virus affecting driver files in their partition - so try the reformat without that partition first. You will spend months shoeing yourself in the bagbeans if you think you can track down every driver you'll need to return your system to normal - and you'll wind up giving up!
When you're done, stay off HaunaPunaTuna.com and you'll be virus free :D
-
.
-
Believe it or not, I was browsing through stock and economic sites. Now my girl thinks I got my virus watching porn. I wish it would have; at least I would have gotten something out of it.
Lol. They always think that, don't they?!
-
One thing you may want to try to do is download a rescue disk from another computer and burn it on to CD/DVD
Here's links to a couple
Kaspersky Rescue Disk 10
http://support.kaspersky.com/us/4162 (http://support.kaspersky.com/us/4162)
Bitdefender
http://www.bitdefender.com/support/how-to-create-a-bitdefender-rescue-cd-627.html (http://www.bitdefender.com/support/how-to-create-a-bitdefender-rescue-cd-627.html)
Once burned on a disk set the infected computer to boot from CD.
These rescue disks run a live edition of linux so it doesn't even boot into Windows. If it is a laptop make sure you can plug in directly to your network for internet as it will need to go online to get the latest definitions.
Hope this helps.
-
.
-
Thanksfor all the suggestions and input guys. My friend says that he was able to clean my hard drive, but he is going to keep checking over the next couple days. He was telling me of a pretty knarly virus that can go extremely deep into the operating system, to the point where even a reformat won't wipe it out. He doesn't think its that bad, but he wants to make sure.
Hmmm good to hear. Strange, I've never encountered a virus that a reformat could not remove. :/
-
.
-
I'm thinking your friend is talking about a boot sector virus.
A standard formatting (high level) of the disk won't get rid of that but a low level format goes deeper and wipes all sectors of disk.
-
.
-
I agree with those who would like to draw and quarter the perpetrators of this set of viruses.
Don't know where I got it on mt Dell desktop, wasn't watching porn, but sometimes you click on a video without realizing what it is.
Been downloading my good files with safe mode, command, and xcopy to a thumb drive on a "when I get to it" basis.
I heard that the i386 files (one for the system, the other for the drives) will restore one's system, but won't try it until all my good files are transferred to thumb drives.
Anyone know anything about that i386 method?
-
.
-
The reasons why Spybot - Search & Destroy detects this software as malware are several ones:
There are anti-spyware tools like 1stAntivirus, AdsAlert, ADS-Remover, AdwareAlert, ADWAREBazooka, Adware-Patrol, AdWare Pro, AdwarePunisher, Adware Remover, AdwareSheriff, AdwareSpy, AdwareX Eliminator, AgentSpyware, Alfacleaner, Antispywaresoldier, Antivirus Gold, AntiVirusPro, BPS Spyware Remover, DiaRemover, Doctor-Adware-Pro, Easy-Spyware-Killer, ErrorGuard, ETD-Security-Scanner, EyeSpyNow, Goodbye-Spy, KillSpy, NoAdware, PC-Health-Plan, Pestbot, PSGuard, PurityScan, Registry Cleaner, Repair Registry Pro, ScanSpyware, Spionfrei, SpyAxe, SpyBlocs, SpyCleaner, Spycontra, Spydeface, SpyDestroy-Pro, SpyFalcon, SpyGuard, SpyHeal, Spyhunter, SpySherrif, SpySpotter, SpywareBomber, SpywareBot, SpywareCleaner, SpywareNO!, SpywareSoftStop, SpywareStormer, SpywareStrike, SpywareQuake, SpyQuake, Trek Blue Error Nuker, Trojan-Guarder, TrueSword, Virusblast, WareOut, WinAntivirusPro2006, WinFixer, WinHound, WorldAntispy, X-Con-Spyware-Destroyer, X-Spyware, XSRemover, YourSoft-AntiVS or YourSoft-AntiVT which have a very dubious or bad character. They state to be an anti-spyware tool but employ questionable advertising methods: In the form of a PopUp they offer a scan of your system. They refer you to an infection of viruses and spyware on your system which is actually not true, because the listed items are not really on your pc. After downloading the software you can only scan for the threats. If the threats (pseudo-infections) are detected you have to register first and pay (up to $30) in order to remove them. Some of these dubious anti-spyware tools do also create a toolbar in IE and create recurring PopUps.
Screenshots are availible at: http://board.protecus.de/showtopic.php?threadid=15694 (http://board.protecus.de/showtopic.php?threadid=15694)
More dubious anti-spyware tools you will find here:
http://spywarewarrior.com/rogue_anti-spyware.htm (http://spywarewarrior.com/rogue_anti-spyware.htm)
Doesn't look promising for spyhunter software. I don't run anything real-time except for Microsoft Security Essentials. My shotgun combo is rkill to stop processes followed by malwarebytes if I can't figure out more specifically what's going on. Much better if you can identify what's happening and find specific removal tools and info instead of settling in for the long slow scans.
A good site I like with tools and instructions for most things is www.bleepingcomputer.com (http://www.bleepingcomputer.com)
What's happening now? Same fbi virus?
-
.
-
Could be either he missed it/didn't get everything or it's on your external. Hard to say without more info. Can you post a link to your thread on the malwarebytes forum.
Latest version of rkill and its variants should stop the running processes and give you a good chance at using other stuff to remove it. Malwarebytes may not be all that good at removing all the traces of a zeroaccess rootkit. I've only seen one instance of the zeroaccess rootkit and tdsskiller fixed that one up. Seen good things about hitman pro too. If you suspect your external being infected I'd scan it too. Will only take time and it'll give you peace of mind.
Did you install anything or do updates since you got your computer back besides spyhunter?
-
.
-
From the logs it doesn't look unrecoverable depending on what's on the external. But even the external should be recoverable once the system is clean or if there's another clean system to use against the external.
Although the nuclear option of re-partition, rewrite mbr, and format can be faster and less stress inducing given the amount of time invested already. It also gives the peace of mind that there's nothing left behind. I actually like to format every year or so. It's a nice clean start and forces me to backup since I'm not the best with my own backup schedule. If you slipstream in updates or at least the service packs to windows 7 that makes reinstall even faster.
-
Got nailed with one on my W7 machine, pulled all power, including battery, let it sit overnight, booted in safe mode, went to repair, then it directed me to restore, then restarted.
Seems to be gone for now, anyhow.
Wasn't FBI, but a "Homeland Security" bug. Didn't even bother reading it before I killed power to the machine.
No external drives on this machine.
Will do a quick MSE scan later.
-
Did you ever get your computer cleaned, Q?
-
.
-
.
-
jl is a good guy
http://2ahawaii.com/Smileys/extended/thumbsup.gif (http://2ahawaii.com/Smileys/extended/thumbsup.gif)
Much mahalos to JI808 for going out of his way to help me out. He got everything up and going in no time.
Thanks again man :shaka:
-
.
-
Much mahalos to JI808 for going out of his way to help me out. He got everything up and going in no time.
Thanks again man :shaka:
Anytime, my friend. Glad to be of help... Good to meet you in person today. :shaka: