Page 1 of 2

under attack

Posted: Mon Apr 25, 2011 10:30 am
by LWTCS
Can't get past all the warning screens to even get my security updated.
The rep from my provider says i gotta remove the issues before i can install the norton tool. Or some damn thing.
Shit I'm a dirty ass construction bum. Dunno wtf to do.
I'm on the hand held now strugglin like an sob

Re: under attack

Posted: Mon Apr 25, 2011 10:45 am
by Husker
You can try something other than norton. If an AV is not able to start off under fire (when infected), and at least get the system to a semi-stable state, then it is not worth much.

Also, you could try AVAST (free). It may also work.

NOTE, once you get cleaned up, do not try to run 2 AV's on the same machine. Often they will fight with each other, and it will end up not being a good thing.

Jim.

Re: under attack

Posted: Mon Apr 25, 2011 10:58 am
by rad14701
I've had as good a luck with MS Security Essentials as I have had with any commercial security software... That plus manual scans with Malwarebytes Antimalware at least once a week... I do more repairs on systems with purchased security softwares than I do with Free packages, believe it or not... Of course you can always spend the extra to register some of the Free ones and have a bit of extra protection... Stay away from the porn sites and you won't have half as many problems... Just ask my customers... :lolno:

Re: under attack

Posted: Mon Apr 25, 2011 11:18 am
by LWTCS
Actually i clicked on a website that had some info about liquid entrainment. Soon as i clkcked all these warning screens started poppin up.
Got a bad feeling about this as i am friggin clueless.

Re: under attack

Posted: Mon Apr 25, 2011 12:03 pm
by rad14701
LWTCS wrote:Actually i clicked on a website that had some info about liquid entrainment. Soon as i clkcked all these warning screens started poppin up.
Got a bad feeling about this as i am friggin clueless.
I've been seeing a lot of viruses hitting computers due to DNS poisoning in recent months... Some bastard throws up a fake server, poisons the DNS system, and hits unknowing internet users as they attempt to reach their destination... I've had several customers get hit when attempting to go to the yellowpages.com site... But that's not the only site being targeted... One day it's kids sites and the next day crafts and then something else on the next...

There's one virus out there right now, and I just got a call from a customer that got hit by it, that makes you think all of your user files are gone... Fortunately, they are just hidden... But it's still a mystery as to what else is going on because this virus is so new that it's entire payload isn't known... It could just be setting people up for the next wave of infection because in order to fix the original problem you almost have to un-hide files that should remain hidden...

My take on all of this is that if you take one or two of these idiots out and shoot them in the head and show it on television in hopes that maybe some of the other idiots will decide they don't want to be spreading viruses...

Re: under attack

Posted: Mon Apr 25, 2011 12:28 pm
by Oxbo Rene
Download "Hiren's boot CD" From another computer (Internet), lots of free stuff to help (has automatic CD writer included).

I got hit the other day.
Ole lady's sewing machine broke, I was on a sewing machine repair site looking at video's about threading bobbins, etc, then wham ! !
Pop-up comes up warning "You have no firewall, your computer is at risk, etc, automatically started scanning my computer
for viruses, found 25 ! ! Then says I can buy their program for $59.95 yr ! !
What threw me was that it said/looked like "Windows Security Center" or something similar, enough that I was sitting
here wondering perhaps my windows security stuff was doing the thing, but was wary when the $59.95 yr showed up.
I have AVG (paid), so escaped back to desktop, was going to scan with AVG, there was no AVG !!
Icon was gone, went to program files, AVG directory, double click on .EXE file = NADA ! ! AVG was completely disarmed! ! !
I did a system restore back to a week ago, got AVG back, ran scan, it found 1 virus, then bout half way through the scan, computer re-boots.
Comes back, I keep trying to scan, each time it re-boots half way through the scan, and, each time re-boots keep getting closer and
closer together, till finally, computer don't do nothing but re-boot all the time.
Not having a rescue disk, took it to friend at computer shop, he got it going and kinda (on the sly) left that
"Hiren's boot CD" in my CD drive. I guess that's what he used, he didn't really say (just an employee there).

Last couple days I've gotten e-mail from a couple of ooooold e-mail addresses from long ago of folks I corresponded with, when I
opened them = spam.
Wonder what that's all about ????????

I'm done .......................................

Re: under attack

Posted: Mon Apr 25, 2011 12:43 pm
by rad14701
Yeah, crafts and sewing sites are getting hit hard, amongst others... I pull the drives and start the cleanup on my known clean test machines and then boot the customers PC into safe mode with the drive reinstalled for another round, disable everything in startup using msconfig, and then do another round or three of various scans... It usually takes two days of almost continuous scans to say that a PC is completely devoid of threats...

Not how I want to be making a living but something I have to do to keep my customers up and running... I don't like repeat infections because they make it look like the viruses are winning and I can't have that... And you just can't wipe out a mission critical PC and think you can redo it and have it be exactly the way it was before by reinstalling everything... Less than 1 in 20 of the PC's I work on requires such drastic measures, and probably fewer than that...

I even have one customer from Florida that flies up here to NY whenever she needs computer work done that she doesn't trust people in Florida to do... She drops the PC off, travels to Ohio to visit with her son while I repair her PC, comes to pick it up when it's done, and returns to Florida... How's that for a pricey computer repair...??? :wtf: I'm waiting for her to fly me down to Florida... :wink: Never been there but would gladly go on someone else's dime... :thumbup:

Re: under attack

Posted: Mon Apr 25, 2011 12:59 pm
by Manback
Larry buddy, here's my take on it.

Get a Windows CD, reboot with the CD in the drive, and boot from the CD. Reformat your disk and reinstall windows. Get McAfee and you should never have problems again. But yeah, if you don't reformat often it's probably about time ya did anyway. I haven't had a virus of any sort for years and I don't do anything fancy at all; I just let McAfee run in the background, and don't click on stuff that tells me I need to install stuff. Hope thishelps

Re: under attack

Posted: Mon Apr 25, 2011 1:07 pm
by Uncle Jesse
My personal recommendations are Avast anti-virus and Malwarebytes Anti-Malware for malware scanning and removal.

Both are free and I've used them widely.

http://www.avast.com/download-software
http://www.malwarebytes.org/products/malwarebytes_free

Re: under attack

Posted: Mon Apr 25, 2011 1:10 pm
by rad14701
Manback wrote:Larry buddy, here's my take on it.

Get a Windows CD, reboot with the CD in the drive, and boot from the CD. Reformat your disk and reinstall windows. Get McAfee and you should never have problems again. But yeah, if you don't reformat often it's probably about time ya did anyway. I haven't had a virus of any sort for years and I don't do anything fancy at all; I just let McAfee run in the background, and don't click on stuff that tells me I need to install stuff. Hope thishelps
I disagree with that advice, but that's coming from my professional standpoint... I don't even agree with the McAfee recommendation because I hate that software based on years of experience with working on PC's running it... Virus removal is, quite honestly, over 50% of what I do these days... It is not uncommon to be removing viruses from four or more computers at a time... I want to choke the life out of those virus writing bastards with my bare hands...!!! :twisted:

Re: under attack

Posted: Mon Apr 25, 2011 1:20 pm
by Manback
That's cool Rad, I'm in my final year of a compsci degree but you probably know better.

At the end of the day I think McAfee (specialists, and a large corporation) probably know more about virus removal than you, is all I'm saying.

With regard to your years of experience.. as I stated, I have years of experience with it too, and my take on it is positive. Kaspersky is a good free one also Larry.

There's no need to get viruses very often, alot of people seem to get alot of them but it's usually what they're browsing that's the problem.

Re: under attack

Posted: Mon Apr 25, 2011 1:34 pm
by LWTCS
I cant even get past my security center screen. The avast site seems to load and then boom the xp security alert screens start plpin up every where.
feel lile a kindergardener that has not learned to tie his shoes yet

Re: under attack

Posted: Mon Apr 25, 2011 1:35 pm
by Bushman
Manback wrote:That's cool Rad, I'm in my final year of a compsci degree but you probably know better.

At the end of the day I think McAfee (specialists, and a large corporation) probably know more about virus removal than you, is all I'm saying.

With regard to your years of experience.. as I stated, I have years of experience with it too, and my take on it is positive. Kaspersky is a good free one also Larry.

There's no need to get viruses very often, alot of people seem to get alot of them but it's usually what they're browsing that's the problem.
I have Kaspersky but have to pay a yearly fee, I'm not sure where you get it for free?

Re: under attack

Posted: Mon Apr 25, 2011 1:38 pm
by rad14701
Manback wrote:There's no need to get viruses very often, alot of people seem to get alot of them but it's usually what they're browsing that's the problem.
It only takes a few porn addicts to keep me busy... :roll:

A couple decades of this, from back before the internet was the internet, tends to jade a person... I can remember back to when about the only way to get a virus was from a shareware 5.25" floppy disk... Back when there was virtually no way to contract a virus from a modem based Bulletin Board System... Back when Captain Crunch whistles and Blue Boxes were popular ways of hacking telephone switching systems... Geez, I'm old... :problem:

Re: under attack

Posted: Mon Apr 25, 2011 2:02 pm
by rtalbigr
I've been using Panda for a number of years now and the only problems I have is when something finally wears out. I've rebuilt my computer about 5 times (usually the motherboard but my hard drive crashed last time)and with the last three I always re-install the Panda, even when my OS offers some free McAfee or some other security. I have it set up to scan nightly and I have not had any malware, spyware, worms, etc. It updates daily, sometimes twice daily. I do use two firewalls, the Panda and also Microsoft. Knock-on-wood.

Big R

Re: under attack

Posted: Mon Apr 25, 2011 2:05 pm
by Uncle Jesse
Kaspersky is good but it's a pay-to-play solution. Still, it's good.

Re: under attack

Posted: Mon Apr 25, 2011 2:22 pm
by LWTCS
Fark even in sace moxe the xp sscurity screen wont let me get to anythi.ng.
Should i change my security settings since i am already compromised? Damn hand held
was trhing to spell safe mode fark!!!! !!! !

Re: under attack

Posted: Mon Apr 25, 2011 3:15 pm
by Oxbo Rene
I got XP too, safe mode was useless ............
I got to it twice before the whole thing went useless ......

Re: under attack

Posted: Mon Apr 25, 2011 3:22 pm
by LWTCS
I'm dead in the water. Hangin on witj my big fat fuggin tbumbs pressin all the fuggon buttons on the hand held

Re: under attack

Posted: Mon Apr 25, 2011 3:24 pm
by LWTCS
Pissed off and getting pissed up

Re: under attack

Posted: Mon Apr 25, 2011 3:37 pm
by Samohon
Larry.
Start the computer.
Repeatedly press the F8 key on the keyboard before the windows logo.
Start windows in safe mode.
Enter your password (if you have one)
Click Start and type Restore (This will let you restore from a previously automatically saved restore point...)
Choose the last restore point when your system was fine.
Let the computer restore your system.
Get rid of your current AV and FW and download Avast and install...

I use a Linux system (OpenSuse) when I come on-line for this very reason...

Hope it works for ya...
Let us know how you get on man...

Re: under attack

Posted: Mon Apr 25, 2011 3:39 pm
by Manback
Trust me Larry - get your copy of Windows, whack it in, and reformat.. you'll lose everything, including drivers.. but your compy will run like it hasn't for a long time

Re: under attack

Posted: Mon Apr 25, 2011 3:46 pm
by rad14701
Samohon wrote:I use a Linux system (OpenSuse) when I come on-line for this very reason...
I run Ubuntu Linux servers and workstations for my own business and personal use... :thumbup: What's a virus...??? :think:

Re: under attack

Posted: Mon Apr 25, 2011 3:54 pm
by Samohon
rad14701 wrote:
Samohon wrote:I use a Linux system (OpenSuse) when I come on-line for this very reason...
I run Ubuntu Linux servers and workstations for my own business and personal use... :thumbup: What's a virus...??? :think:
Yeah, Rad, gotta hand it to that Torvalds fella, sure knew what he was doing... :clap: :clap: :clap:

Now if he can just get a few of those virus hackers down to the village square, reckon you and I would have front row seats... :thumbup:

Re: under attack

Posted: Tue Apr 26, 2011 9:23 am
by LWTCS
Cant get past any of the securty screens to login on and down load anything.

Re: under attack

Posted: Tue Apr 26, 2011 9:36 am
by warr87
rad14701 wrote:
Samohon wrote:I use a Linux system (OpenSuse) when I come on-line for this very reason...
I run Ubuntu Linux servers and workstations for my own business and personal use... :thumbup: What's a virus...??? :think:
I got hit with a virus last week. Took a bit to fix my computer. I'm very careful with what I do, i used to be very into internet security. At the moment I only have a laptop so I'm stuck with damn Vista. Can't wait to get a desktop computer again and have a dualbooting Ubuntu/Windows system (Windows for some of my academic stuff, i.e. journal articles, conferences, etc. plus games when I have the time). I never had a problem with Linux! The computer runs so much better, and no viruses!

Re: under attack

Posted: Fri Apr 29, 2011 8:29 pm
by Oxbo Rene
Hey LWTCS;
Got hit with a virus "AGAIN" today ! !
Same problem (couldn't do much of anything) but this time, before it got too bad, too late--->
I went to safe mode, restored back to a week ago, then was able to open "My Computer" go to CD drive with (Hiren's boot CD in it)
and even though the double click function on mouse arrow wouldn't start any program I could "select" the program, then hit "ENTER" and that would engage the program.
Ran "Malwarebytes Antimalware 1.50.1" and it found several things infected, after scan was complete, had it remove em, and now =
everything's OK again ! ! ! ! ! !
Just thought I'd throw this info at ya ............

Re: under attack

Posted: Sat Apr 30, 2011 4:10 am
by LWTCS
Thanks all for chimming in.....
Was in panick mode for a little bit there.

A million thanks to Rad for walking me through all the BS crap that surely would have me still stumbling around to this very minute..

Finally stretching my fingers out on a real keyboard.

Re: under attack

Posted: Sat Apr 30, 2011 7:20 am
by Ono Nadagin
for future help..

if you have access to another working comp and a flash drive download the newest version of Malwarebytes to it from
http://majorgeeks.com/download.php?det=5756" onclick="window.open(this.href);return false;" rel="nofollow
they also have a little video tutorial on the page for it.

once you have the installer program on your flash drive go to your computer thats giving you problems and reboot into safe mode ... this is done by repeatedly hitting f8 on your keyboard as soon as you start the comp this must be done before the windows logo comes up.... once you are into the option screen that allows you to pick the version of safe mode you wish to use pick safe mode w/ networking.... w/networking is chosen to allow you to update Malwarebytes with the latest malware definitions so that the program can remove the latest threats found on the internet.

So once you have booted up into windows safe mode go to 'My Computer" to see the flash drive listed put the flash drive in the comp and an icon for it will appear in the "My Computer" screen you just opened prior to inserting the flash drive.. I recommend this so you dont have to guess what the flash drive is named, it will simply be the new icon that appears after you insert it.

Once you open the flash drive by double clicking its icon in "My Computer" look for the icon for Malwarebytes it will named "mbam-setup.exe" What you want to do now in case you have been seriously infected by a mean malware program is right click on the "mbam-setup.exe" and you will get a little drop down menu that has "rename" as one of its options... we want to select the "rename" option this will let us remove just one letter from the "mbam-setup.exe" name... I generally just remove the 1st M making it "bam-setup.exe"... We do this because malware programmers are mean and clever little punks and they code into their malware the ability to stop certain process names(programs) like Malwarebytes and other cleaning programs from running thus making them impotent and unable to be launched/started by a computer owner insuring that their malware stays on the comp.

now after we have renamed "mbam-setup.exe" to "bam-setup.exe" we can now double left click it to start the installation process this only takes a few minutes tops, you will be asked in the install process if you want a desktop icon and if you want to start the program and update the program after the installation is complete. Say yes to all

Once installed it will update itself with the newest threat definitions so it will be able to find and remove the latest known malware on the internet and every malware threat that came before them.

Now you will see the program itself running on your desk top and it will be on the screen you need to run a scan for malware... this program is very good at what it does so you will be best served by picking the 'Quick Scan" option and telling it to start its scan.... this will take 15-30 min tops

Once it is done with the scan it will report to you what it has found threat wise... to see the threats left click the "show "results" button that will have appeared on the bottom right of the programs window.
You will now see the list of malware infections on your computer, and at the bottom right of the programs screen there will be a "remove All" button ... click this and all the malware will be removed and you will be prompted to restart your computer... Do so and let it boot up into a freshly cleaned out and smooth running normal non safe mode version of your Windows operating system.

While this is not a 100% guarantee to get you back up and running smoothly I would as a guy that makes a fair portion of his living off of building repairing and maintaining computers for the last 20yrs would be very surprised if it did not work.... and if it does not then repeat the above instructions but download Avast Free antivirus and apply the same instructions on safe mode and renaming its installer and then installing and running it and it should get any virus off that is causing you problems... but 99.99999 percent of the people that call me out to fix such issues DO NOT have viruses they have malware infections.

Best of luck
Ono

Re: under attack

Posted: Sat Apr 30, 2011 8:12 am
by Oxbo Rene
Tx's Ono;
Yeah, I'm running AVG (paid) antivirus/firewall, etc and it's completely useless against these recent, apparently "malware", as opposed to "virus", attacks.....