Jump to content
Sign in to follow this  
Digitrade

MALWARE Virus

Recommended Posts

Digitrade

I was doing some listings last night, when I suddenly had this screens appearing on my computer. It said that someone is trying to steal my passwords and that a new anti-virus program needs to be installed.

From there you can not do anything on your computer. All of a sudden I had porn shortcuts on my desktop, "danger" signs would pop up everytime you try to click on anything. I stressed!

Luckily I know a guy in IT, and he came to my house. He told me that this type of virus is called "Malware", and it will bypass even your anti-virus program that you have installed on your PC. He fixed my PC in safemode and installed an anti-malware program on my computer.

What is not good, is that he told me that he fixes computers daily with this problem. The virus is everywhere.

He also gave me some good advice that I want to share with you. Just google the word "malwarebytes", and install a free anti-malware program on your PC. Maybe MacMuffin can share some ideas with us as well?

Share this post


Link to post
Share on other sites
kyle2

The best program I have found to date which has a 100% detection rate is Avira, it is free as well, just add dot com to the name Avira and you'll get to the site. Whats really handy is that if something is attacking your PC, there is a warning beep that goes off and a screen appears telling you whats going on. It updates itself constantly and actually gets rid of any type of malware, virus, spy program and so forth, very handy, been using it for nearly 3 years now.:wink:

Share this post


Link to post
Share on other sites
jacque31
I was doing some listings last night, when I suddenly had this screens appearing on my computer. It said that someone is trying to steal my passwords and that a new anti-virus program needs to be installed.

From there you can not do anything on your computer. All of a sudden I had porn shortcuts on my desktop, "danger" signs would pop up everytime you try to click on anything. I stressed!

Luckily I know a guy in IT, and he came to my house. He told me that this type of virus is called "Malware", and it will bypass even your anti-virus program that you have installed on your PC. He fixed my PC in safemode and installed an anti-malware program on my computer.

What is not good, is that he told me that he fixes computers daily with this problem. The virus is everywhere.

He also gave me some good advice that I want to share with you. Just google the word "malwarebytes", and install a free anti-malware program on your PC. Maybe MacMuffin can share some ideas with us as well?

 

To me it sounds more like "scare-ware", program gets installed on your computer, giving you the impression that there is a virus on your computer. In reality, people make this program to let you think there is a virus on your computer, gives warnings the whole time, even change your back ground image with images of warnings and what not. Then you need to follow their instructions and immediately download "anti-virus" to clean your computer. You pay for it and they get the money - the whole time there was nothing on your PC! Just a program creating the illusion. What also gave it away very easy was that there would pop up warnings and a lot of them all the time. This happened because of the "anti-virus you installed. Happened to me once as well and when I saw you are taken to a site to pay I immediately knew this was one of those little guys. Very irritating to say the least.

Share this post


Link to post
Share on other sites
Guest Guest

thats called hoaxes etc

 

Its also spyware

Share this post


Link to post
Share on other sites
jacque31
thats called hoaxes etc

 

Its also spyware

 

Nope spyware gathers information without knowledge by the user. Definitely not the same as a hoax or scare-ware. Also a hoax is a prank with no harm caused by it. Scare-ware is a tactic to let the user cough up some money. So 3 completely different things in my opinion. Either way very frustrating indeed :rolleyes: !

Share this post


Link to post
Share on other sites
Digitrade

To me it sounds more like "scare-ware", program gets installed on your computer, giving you the impression that there is a virus on your computer. In reality, people make this program to let you think there is a virus on your computer, gives warnings the whole time, even change your back ground image with images of warnings and what not.

 

Exactly as you said. I had screens pop-up giving me instructions to proceed with a credit card payment. It automatically installed some sort of an anti-virus program and started doing "scans" of infected files. The thing is, everytime you click on the red cross to close the screen, another filthy icon would pop-up on my desktop. I did not loose any work on my computer, but it basically shuts down everything, and you can not do a thing about it.

Edited by Digitrade

Share this post


Link to post
Share on other sites
RISadler

I use Spybot-SD, as its primary function is just to inform me if a programme misbehaves. Then I get "under the hood", track down the sucker and remove it piece by coded piece. :ninja:

Share this post


Link to post
Share on other sites
Cali Craft and Gems

I've always been very good with regards to keeping nonsense off my pc due to the amount of important information on it.

 

BUT! This morning when trying to access a supplier's website, things went wrong! That darn Malware thing has found it's way to my pc and I can't do a darn thing! I unplugged my connection to the modem immediately, and am now accessing the net from hubby's pc to see what I can do.

 

Any BoBber's in the know - please help...

 

PS. Downloading Avira - let's see what happens!

Edited by Cali Craft and Gems

Share this post


Link to post
Share on other sites
RISadler
Any BoBber's in the know - please help...

 

Like doing surgery over the telephone without a diagnosis. Recently I had to remove "Smitfraud-C.gp" from a machine and all I can say is that eventually I had to boot from a Linux "LiveCD" to delete the virus files. Vicious critter was protecting itself even in Windows Safe Mode.

Share this post


Link to post
Share on other sites
Cali Craft and Gems

This darn "thing" even over-rode the Avira software... now to phase two which is getting my hands on the 'malwarebytes' - if that does not work, then the pc will be making a flying exit through the window! I seriously do not have the time nor energy for this nonsense! (sick as a dog, plus have a show to prepare for in the next week plus the regular BoB stuff and parcels!)

Share this post


Link to post
Share on other sites
kyle2

I had a persistant monster like that once, I ended up installing the avira program on a clean computer with all the updates and after it was running, took the hard drive from the infected PC and placed it in the clean PC as a slave drive. Avira picked up the problem on startup and got rid if the b@gger. 2 sweeps with the antivirus sorted the problem. Sometimes installing the antivirus after the fact creates more problems and the virus actually manipulates the installation of the antivirus.

The idiots who write these things need their t@sticles removed with a rusty spoon.

Share this post


Link to post
Share on other sites
RISadler
The idiots who write these things need their t@sticles removed with a rusty spoon.

 

I agree. The time I've wasted due to badly written AV programmes could have been spent on much better things.

Share this post


Link to post
Share on other sites
Cali Craft and Gems

It is now over 3 hours that I've been wasting trying to sort this c*** out! As if I really have the time to spare! Grrrr!

Share this post


Link to post
Share on other sites
jacque31
It is now over 3 hours that I've been wasting trying to sort this c*** out! As if I really have the time to spare! Grrrr!

 

I understand your frustration, at least it's not a few days yet like a had before. Struggled for about a week and a half. Had to save everything, reinstalled Win, recopy everything and so forth. The thing was I tried all AV programs, tried manually to delete it. But this one made copies every time, and one the computer was booted, in any mode it would "respawn" again. Very very frustrating.

Hope you get the sucker. I you are still struggling - a good tip is to check what the virus name is, google the "virus name + removal", that should get you more info on it, how it behaves, other people's dealings with the same virus, removal techniques ect. Or post the name here, and people can have a look also.

Good luck!

Share this post


Link to post
Share on other sites
Vinyl Lady Decals

Phew, this is bad.

If nothing else works, maybe you should bite the bullet and take to a professional, they usually have extra tools that most people don't have access to.

Share this post


Link to post
Share on other sites
mellowred

I'm not a computer fundi, but am I right in thinking that most viruses access your computer via your e-mail or corrupted flash drivers or disks and not through visiting normal websites?

 

Tanaka's recommendation "Mailwasher" is fantastic as if a mail looks vaguely suspicious I just don't download it.

 

I nearly transferred a virus from a clients computer to mine via my flash driver. Luckily AVG caught it - taught me a lesson - never open anything without scanning. Takes a couple of seconds and can save days, not to mention the expense of an expert.

Share this post


Link to post
Share on other sites
Virgotec

RISandler

 

As soon as I access that link you supplied, my AVG tells me "Accessed file is infected".

 

Just thought I'd let you know.

Edited by Virgotec

Share this post


Link to post
Share on other sites
Vinyl Lady Decals

Hi Mellowred

 

In the past this was the norm, but sadly, not anymore.

Even visiting legitimate website (not porn, etc) can lead to infection.

There is a new type of infection method called the drive-by download which I think this one falls into; which is taking the internet by storm.

The bad guys inject malicious code into normal web pages and the visitor does not even have to do anything except visit the webpage to be infected.

It downloads automatically in the background.

One of the methods used is to use the banner advertisements on websites which sometimes rotate. The malicious code is in the ad which is why its a good idea to have an add-on like Adblock + on Firefox so the ads don't show at all which will help to stop them from showing in the first place. The New York Times website was hit this way a few months ago - can you imagine how many were infected?

The scareware like these fake antivirus are bad, but I'm much more scared of the spyware that can steal your credentials.

Share this post


Link to post
Share on other sites
Vinyl Lady Decals
RISandler

 

As soon as I access that link you supplied, my AVG tells me the file is infected.

 

Just thought I'd let you know.

 

My Zonealarm Browser Security also blocked it calling it a suspicious site.

Share this post


Link to post
Share on other sites
RISadler
As soon as I access that link you supplied, my AVG tells me "Accessed file is infected".

 

My Zonealarm Browser Security also blocked it calling it a suspicious site.

 

It's because the page contains the first few lines of code from the virus and the complete "infection" JavaScript code. Seems the AV companies don't want you to see this information. (Read my signature.)

Share this post


Link to post
Share on other sites
mellowred

Hi Tananka, Thanks for that warning.

 

I use the free version of IObit 360 Security and AVG Free. MajorGeeks recommend both, but would appreciate any comments on IObit from any of the PC fundis.

Share this post


Link to post
Share on other sites
Vinyl Lady Decals

RI Sadler

 

It's because the page contains the first few lines of code from the virus and the complete "infection" JavaScript code. Seems the AV companies don't want you to see this information. (Read my signature.)

 

Ok, I thought that might be it, but wasn't sure, yip your signature is how we need to look at the safety of the internet, that's for sure.

 

Mellowred

 

I keep myself up-to-date with the IT security bulletins at work as I find it fascinating reading. I've really learnt alot.

I haven't heard of IObit, but won't touch AVG.

 

One of the reports I read was from a company overseas who tested about 30 antivirus solutions.

According to their report AVG was one of the worst at catching the viruses, it only caught about 2% of virusses it was tested against.

The report said that Avira Antivir and Avast are the best and both have free versions, these to caught about 98% of virusses.

 

I've read that it's best to use a multilayer approach and I do that now.

I have my Zonealarm security suite which has antivirus, anti-spyware and two-way firewall, it also blocks malicious websites - not free unfortunately although they do have a free firewall. In conjunction with this, I use Avira Free Antivirus and they seem to complement each other well.

I also use Spybot S&D which asks you before allowing strange software to execute, it blocks it if you say no.

Every now and then, about every two weeks, I run my system through several online scanners as well, to be on the safe side.

This approach seems to be working well.

There are new tricks that the bad guys come up with all the time.

At the end of the day, they're actually after our money in whatever form they can get it, whether it stealing passwords and banking details or installing fake antivirus and trying to force you to buy from them as what started this thread - of course, you can never fall for that and actually buy from them to get control of the PC again as then they'll have credit card details which they can do anything with including selling it on the bad guy underground.

Edited by Vinyl Lady Decals
Added detail

Share this post


Link to post
Share on other sites
Cali Craft and Gems

I finally managed to nail the sucker after about five or six scans - kept on deleting anything that was "infected" (25 files) and also managed to trace and delete the "anti-virus" it loaded on automatically which had blocked the system.

 

Thankfully I've got a wonderful IT guy as a best friend and he calmed me down when I first noticed the nonsense! I downloaded Avira and Malwarebytes, and so far all is running ok.

 

Just the day I should have stayed in bed to get better I was swearing at the pc instead! No wonder my throat is killing me! LOL (thankfully no-one else was at home - I was really losing my cool and my patience was wearing very thin!) :embarrest:

Share this post


Link to post
Share on other sites
Vinyl Lady Decals

Glad you came right Cali.

Share this post


Link to post
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
Sign in to follow this  

×