Topic: HIDEOUS VIRUS!!!

[Industrial Cafe]

ok, so following the instructions I got rid of 3 virus infected files and 4 files infected with malware programs.

[mlinder]

And it's working now?

[Industrial Cafe]

yessir.  I hope it doesn't rear it's ugly head again.

[mlinder]

Keep me informed, I can help if it continues to nail you.

[Industrial Cafe]

k

[MickeyX]

I just got smacked with this one. I opened something on this site, I have to go back to see what it was, and it just slammed me. I couldn't boot into safe mode. It seems it must disable the F8 function on start up for my XP?? Anyway, I tried a few things, like getting really pissed off  and then some how I got it to let me go back in time in system restore to a previous saved good spot. It bought me the time necessary to download the fix from Microsoft. Hopefully that will do it for me but I doubt it. Damn nasty pests. I need a Mac. 

Mark, is there anything I can do when I wake up in the morning besides this to keep it away? I've got regular updates from Windows but I'm wondering if, since I use Firefox all the time now, it isn't giving me my updates. Should I be going on Explorer every now and again to make sure they update?

I need a decent security system too. This one sucks. Is McAfee good? I've heard good stuff but want to know from some of you who use it.

Okay, I'm calmer now so maybe I can fall asleep finally.  Effin' bugs. Call the Orkin Man!!! 

[Retro Rocket]

Hi Mickey, i use Kasperskey anti virus and it is great. It won,t let anything open before showing a warning and giving you the option to negate it, nothing ever gets onto my puter that shouldn't be there.

Mick

[Industrial Cafe]

I just got smacked with this one. I opened something on this site, I have to go back to see what it was, and it just slammed me.

wonder what it was?

[Glenn Stauffer]

I just scanned all the files on the forum site for viruses and none were found.  That doesn't mean there aren't malicious links posted here or links to sites that are infected with malware.  I'm curious what you opened here when you ran into your most recent problems.

[Industrial Cafe]

hey Glenn, virus scanners don't find it, I had to scan with http://www.combofix.org/download.php

[Laminar]

I just got smacked with this one. I opened something on this site, I have to go back to see what it was, and it just slammed me. I couldn't boot into safe mode. It seems it must disable the F8 function on start up for my XP?? Anyway, I tried a few things, like getting really pissed off   and then some how I got it to let me go back in time in system restore to a previous saved good spot. It bought me the time necessary to download the fix from Microsoft. Hopefully that will do it for me but I doubt it. Damn nasty pests. I need a Mac.  

Mark, is there anything I can do when I wake up in the morning besides this to keep it away? I've got regular updates from Windows but I'm wondering if, since I use Firefox all the time now, it isn't giving me my updates. Should I be going on Explorer every now and again to make sure they update?

I need a decent security system too. This one sucks. Is McAfee good? I've heard good stuff but want to know from some of you who use it.

Okay, I'm calmer now so maybe I can fall asleep finally.   Effin' bugs. Call the Orkin Man!!!  

I use Avast! free antivirus on my Windows machines. It updates with new virus definitions regularly and has prevented me from opening webpages because of detected malware. I've never had a virus as long as I've run Windows.

[Inigo Montoya]

Industrial, another option is to download a bootable virus scanner and install it on to a cd or flash drive. I know kaspersky has one and so does bit defender. I have not tested it much but I think the kaspersky one allows you to do temp updates if you boot the pc to the cd with a network cable plugged in but again, I havent tested it completely.

[mlinder]

Noooo, IC, that's the wrong download!
That's a fake one!

Thats why yo have to get it at http://download.bleepingcomputer.com/sUBs/ComboFix.exe

IC, please remove the link you've got up there!

[mlinder]

I'm going to write  tutorial, with proper links, for removal of the prevalent set of malware that is attacking machines right now.
Don't have time this second, but will get to it, and hopefully a mod can stickey it.

[MickeyX]

Ah, so I clicked on that link that is in azuredesigns thread about New Zealand, here in the open forum. Something on that page, in the link, got me. I will now go back and load some more stuff. It's still working ok but I know it'll come back.

This one hit our work computer in our breakroom. I kept telling people to stop clicking on the virus thing. They kept loading it and letting it go saying it's fixing our virus. I tried to explain that IS the virus. It locked it up tight. I called IT and they worked on it for DAYS to get it back and to keep the rest of our system clean. Little pest. It came back multiple times after that and the same people would run it again. They take beautiful xrays, just dumb as dirt about viruses I guess. 

[mlinder]

Ah. I'm running linux, so don't have to worry about it (hello, Inigo, lmao.)

[MickeyX]

I did a quick check last night before I fell asleep and it said I was clear. I just ran the combofix that mark put up a few posts ago. It ran alright and said I was clear too. I hope that does it.

[Laminar]

Ah. I'm running linux, so don't have to worry about it (hello, Inigo, lmao.)

[mlinder]

Ah. I'm running linux, so don't have to worry about it (hello, Inigo, lmao.)

That image is broken

[bucky katt]

i use NOD32 and do daily scans, i dont click on attatchments in emails i dont recognize, i dont go porn sites (thats what magazines and video tapes are for) i'm REALLY careful about anything i download too.

[kirkn]

Well, my daughter's computer got infected earlier this week with something just like this.  It kept loading "Internet Security 2010" and all the same dire warnings and pop-ups.

I followed mlinder's advice from the very first page, and that worked like a champ!  You guys are the best!  Thanks.

The report that ComboFix generated at the end was 3 pages of text!!

Thanks!

Kirk

[Industrial Cafe]

WOW.

[kirkn]

Well, I was so pleased with the ComboFix as used on my daughter's computer, I tried to use it on my own, as a pre-emptive deal.  But, I have Vista, and when I launched it, it just gave me a note that it doesn't work on Vista.

Any other helpful places to find a Vista-friendly version?

Kirk

[mlinder]

Well, I was so pleased with the ComboFix as used on my daughter's computer, I tried to use it on my own, as a pre-emptive deal.  But, I have Vista, and when I launched it, it just gave me a note that it doesn't work on Vista.

Any other helpful places to find a Vista-friendly version?

Kirk

I'm guessing you are running the 64 bit version of Vista? If so, no, there is no version of combofix that works with 64 bit.

[Inigo Montoya]

It appears to maybe be beta for 7 too. It is only for compatibility testing and should not be used on a live machine.