. (Read 14999 times)

Jdelacruz

Re: DAMN FBI VIRUS!
« Reply #20 on: August 30, 2013, 02:32:18 PM »
One thing you may want to try to do is download a rescue disk from another computer and burn it on to CD/DVD

Here's links to a couple

Kaspersky Rescue Disk 10
http://support.kaspersky.com/us/4162

Bitdefender
http://www.bitdefender.com/support/how-to-create-a-bitdefender-rescue-cd-627.html

Once burned on a disk set the infected computer to boot from CD.

These rescue disks run a live edition of linux so it doesn't even boot into Windows. If it is a laptop make sure you can plug in directly to your network for internet as it will need to go online to get the latest definitions.

Hope this helps.

Q

.
« Reply #21 on: August 30, 2013, 03:55:20 PM »
.
« Last Edit: September 15, 2016, 03:26:12 AM by Q »

Jl808

Re: DAMN FBI VIRUS!
« Reply #22 on: August 30, 2013, 11:22:59 PM »

Thanksfor all the suggestions and input  guys. My friend says that he was able to clean my hard drive, but he is going to keep checking over the next couple days. He was telling me of a pretty knarly virus that can go extremely deep into the operating system, to the point where even a reformat won't wipe it out. He doesn't think its that bad, but he wants to make sure.

Hmmm good to hear. Strange, I've never encountered a virus that a reformat could not remove. :/
I think, therefore I am armed.
NRA Life Patron member, HRA Life member, HiFiCo Life Member, HDF member

The United States Constitution © 1791. All Rights Reserved.

Q

.
« Reply #23 on: August 30, 2013, 11:45:01 PM »
.
« Last Edit: September 15, 2016, 03:27:49 AM by Q »

Jdelacruz

Re: DAMN FBI VIRUS!
« Reply #24 on: August 31, 2013, 07:04:56 AM »
I'm thinking your friend is talking about a boot sector virus.

A standard formatting (high level) of the disk won't get rid of that but a low level format goes deeper and wipes all sectors of disk.

Q

.
« Reply #25 on: August 31, 2013, 08:54:32 AM »
.
« Last Edit: September 15, 2016, 03:22:02 AM by Q »

230RN

  • Trade Count: (0)
  • Hero Member
  • *****
  • Posts: 1529
  • Total likes: 71
  • But they're [u]supposed[/u] to be military-style!
  • Referrals: 2
    • View Profile
Re: DAMN FBI VIRUS!
« Reply #26 on: August 31, 2013, 01:49:45 PM »
I agree with those who would like to draw and quarter the perpetrators of this set of viruses.

Don't know where I got it on mt Dell desktop, wasn't watching porn, but sometimes you click on a video without realizing what it is.

Been downloading my good files with safe mode, command, and xcopy to a thumb drive on a "when I get to it" basis. 

I heard that the i386 files (one for the system, the other for the drives) will restore one's system, but won't try it until all my good files are transferred to thumb drives.

Anyone know anything about that i386 method?
I do believe that the radical and crazy notion that the Founders meant what they said, is gradually soaking through the judicial system.

Q

.
« Reply #27 on: September 05, 2013, 02:08:59 AM »
.
« Last Edit: September 17, 2016, 12:50:11 AM by Q »

s15project

Re: DAMN FBI VIRUS!
« Reply #28 on: September 05, 2013, 03:11:08 AM »
The reasons why Spybot - Search & Destroy detects this software as malware are several ones:
There are anti-spyware tools like 1stAntivirus, AdsAlert, ADS-Remover, AdwareAlert, ADWAREBazooka, Adware-Patrol, AdWare Pro, AdwarePunisher, Adware Remover, AdwareSheriff, AdwareSpy, AdwareX Eliminator, AgentSpyware, Alfacleaner, Antispywaresoldier, Antivirus Gold, AntiVirusPro, BPS Spyware Remover, DiaRemover, Doctor-Adware-Pro, Easy-Spyware-Killer, ErrorGuard, ETD-Security-Scanner, EyeSpyNow, Goodbye-Spy, KillSpy, NoAdware, PC-Health-Plan, Pestbot, PSGuard, PurityScan, Registry Cleaner, Repair Registry Pro, ScanSpyware, Spionfrei, SpyAxe, SpyBlocs, SpyCleaner, Spycontra, Spydeface, SpyDestroy-Pro, SpyFalcon, SpyGuard, SpyHeal, Spyhunter, SpySherrif, SpySpotter, SpywareBomber, SpywareBot, SpywareCleaner, SpywareNO!, SpywareSoftStop, SpywareStormer, SpywareStrike, SpywareQuake, SpyQuake, Trek Blue Error Nuker, Trojan-Guarder, TrueSword, Virusblast, WareOut, WinAntivirusPro2006, WinFixer, WinHound, WorldAntispy, X-Con-Spyware-Destroyer, X-Spyware, XSRemover, YourSoft-AntiVS or YourSoft-AntiVT which have a very dubious or bad character. They state to be an anti-spyware tool but employ questionable advertising methods: In the form of a PopUp they offer a scan of your system. They refer you to an infection of viruses and spyware on your system which is actually not true, because the listed items are not really on your pc. After downloading the software you can only scan for the threats. If the threats (pseudo-infections) are detected you have to register first and pay (up to $30) in order to remove them. Some of these dubious anti-spyware tools do also create a toolbar in IE and create recurring PopUps.

Screenshots are availible at: http://board.protecus.de/showtopic.php?threadid=15694

More dubious anti-spyware tools you will find here:
http://spywarewarrior.com/rogue_anti-spyware.htm

Doesn't look promising for spyhunter software.  I don't run anything real-time except for Microsoft Security Essentials.  My shotgun combo is rkill to stop processes followed by malwarebytes if I can't figure out more specifically what's going on.  Much better if you can identify what's happening and find specific removal tools and info instead of settling in for the long slow scans.

A good site I like with tools and instructions for most things is www.bleepingcomputer.com

What's happening now?  Same fbi virus?

Q

.
« Reply #29 on: September 05, 2013, 03:26:24 AM »
.
« Last Edit: September 17, 2016, 12:50:19 AM by Q »

s15project

Re: DAMN FBI VIRUS!
« Reply #30 on: September 05, 2013, 03:45:18 AM »
Could be either he missed it/didn't get everything or it's on your external.  Hard to say without more info. Can you post a link to your thread on the malwarebytes forum.

Latest version of rkill and its variants should stop the running processes and give you a good chance at using other stuff to remove it.  Malwarebytes may not be all that good at removing all the traces of a zeroaccess rootkit.  I've only seen one instance of the zeroaccess rootkit and tdsskiller fixed that one up.  Seen good things about hitman pro too.   If you suspect your external being infected I'd scan it too.  Will only take time and it'll give you peace of mind.

Did you install anything or do updates since you got your computer back besides spyhunter? 

Q

.
« Reply #31 on: September 05, 2013, 01:35:17 PM »
.
« Last Edit: September 17, 2016, 12:50:40 AM by Q »

s15project

Re: DAMN FBI VIRUS!
« Reply #32 on: September 05, 2013, 10:17:53 PM »
From the logs it doesn't look unrecoverable depending on what's on the external.  But even the external should be recoverable once the system is clean or if there's another clean system to use against the external.

Although the nuclear option of re-partition, rewrite mbr, and format can be faster and less stress inducing given the amount of time invested already.  It also gives the peace of mind that there's nothing left behind.  I actually like to format every year or so.  It's a nice clean start and forces me to backup since I'm not the best with my own backup schedule.  If you slipstream in updates or at least the service packs to windows 7 that makes reinstall even faster.

230RN

  • Trade Count: (0)
  • Hero Member
  • *****
  • Posts: 1529
  • Total likes: 71
  • But they're [u]supposed[/u] to be military-style!
  • Referrals: 2
    • View Profile
Re: DAMN FBI VIRUS!
« Reply #33 on: September 06, 2013, 05:10:18 PM »
Got nailed with one on my W7 machine, pulled all power, including battery, let it sit overnight, booted in safe mode, went to repair, then it directed me to restore, then restarted.

Seems to be gone for now, anyhow.

Wasn't FBI, but a "Homeland Security" bug.  Didn't even bother reading it before I killed power to the machine.

No external drives on this machine.

Will do a quick MSE scan later.

I do believe that the radical and crazy notion that the Founders meant what they said, is gradually soaking through the judicial system.

Jl808

Re: DAMN FBI VIRUS!
« Reply #34 on: September 06, 2013, 06:28:18 PM »
Did you ever get your computer cleaned, Q?
I think, therefore I am armed.
NRA Life Patron member, HRA Life member, HiFiCo Life Member, HDF member

The United States Constitution © 1791. All Rights Reserved.

Q

.
« Reply #35 on: September 06, 2013, 06:50:59 PM »
.
« Last Edit: September 17, 2016, 12:52:06 AM by Q »

Q

.
« Reply #36 on: September 07, 2013, 03:28:02 PM »
.
« Last Edit: September 25, 2016, 09:09:30 PM by Q »

macsak

Re: DAMN FBI VIRUS!
« Reply #37 on: September 07, 2013, 05:20:30 PM »
jl is a good guy
http://2ahawaii.com/Smileys/extended/thumbsup.gif

Much mahalos to JI808 for going out of his way to help me out. He got everything up and going in no time.

Thanks again man  :shaka:

Q

.
« Reply #38 on: September 07, 2013, 05:25:20 PM »
.
« Last Edit: September 25, 2016, 09:09:36 PM by Q »

Jl808

Re: DAMN FBI VIRUS!
« Reply #39 on: September 07, 2013, 10:00:55 PM »

Much mahalos to JI808 for going out of his way to help me out. He got everything up and going in no time.

Thanks again man  :shaka:

Anytime, my friend.  Glad to be of help... Good to meet you in person today. :shaka:
I think, therefore I am armed.
NRA Life Patron member, HRA Life member, HiFiCo Life Member, HDF member

The United States Constitution © 1791. All Rights Reserved.