Author Topic: Virus warning (Read 1859 times)

AWkrull · « **on:** October 09, 2005, 02:01:26 AM »

I was attacked by a Trojan Virus on Wednesday night. It took over my entire registery and I had to eventually re-format my hard drive and start all over. Seeing how I am an idiot, I didnt have back-ups:mad: When I got infected, I tried deleting everything as fast as I could, and was successful until I ran into an Icon displaying Spyware Sheriff. When I tried to delete this it told me that I didnt have the authority to do that. I find it very strange that I could delete anything else but that, and it offered to remove my spyware for $34.95. I guess it was ok to let me buy it but not ok to remove it. My feeling is that the virus was created and launched by whoever that company is. I have since found out that this is not an isolated incedent. According to the gossip on the internet I am not the only one that this has happened to by this "anti spy-ware company".
My advice to all who are concerned: be very wary if you get a "userinit logon error" when you boot up your computer. I recieved this and 2 days later....virus!

nirvana · « **Reply #1 on:** October 09, 2005, 03:16:01 AM »

Spyware Sheriff is the company? You should try and find whoever set it up and throw a pie in their face. But seriously, have you wrote customer support to Norton or McAffee or any of those folks?

Silat · « **Reply #2 on:** October 09, 2005, 03:25:04 AM »

Krull a list of my security recommendations .. All free...........

If you have hijacker problems:
I recommend you or anyone else who has a problem with hijackers go here http://help.lockergnome.com/ .Register. You will then be able to post. By post I mean post a HIJACKTHIS log. After you register click on "PROBLEM SOLVERS" forums. Then click on "HIJACKTHIS LOGS". Post your problem in the HIJACKTHIS FORUM. An expert will get to you within a few days to guide you to a clean machine

You may submit your HijackThis log files to any of the below Forums for
expert analysis. I personally like http://help.lockergnome.com/
Note that all Forums require Registration prior to posting

(http://aumha.net/viewforum.php?f=30)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://castlecops.com/forum67.html)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://www.spywarewarrior.com/viewforum.php?f=2)
(http://forums.spywareinfo.com/index.php?showforum=18)
(http://www.wilderssecurity.com/forumdisplay.php?f=24)
(http://boards.cexx.org/viewforum.php?f=1)
(http://www.malwarebytes.biz/forums/index.php?showforum=5)
(http://forum.gladiator-antivirus.com/index.php)
(http://www.dslreports.com/forum/security)

http://www.spywareinfo.com/~merijn/downloads.html - Download Hijackthis. Put it in a new folder named "Hijackthis". Put the folder on c drive. This is important for proper logging of info when you get hijacked. Do not use this program unless you completely know what you are doing. FREE

http://www.javacoolsoftware.com/downloads.html - download and install : SpywareBlaster and SpywareGuard FREE
http://customblockinglist.cjb.net/ - Spyware Blaster Custom Blocking List Free!

http://www.safer-networking.org/index.php?page=download - Download and install Spybot - Search & Destroy FREE

http://www.intermute.com/products/cwshredder.html - CWShredder Download the standalone version. FREE

http://www.lavasoftusa.com/support/download/ - Download the free version of Adaware and install. Or pay for the advanced version if you want. FREE

http://www.microsoft.com/athome/security/spyware/software/default.mspx - Windows AntiSpyware (Beta) FREE

ANTI VIRUS PROGRAMS
http://free.grisoft.com/doc/Get+AVG+FREE/lng/us/tpl/v5 - AVG
If you don't have an antivirus program and don't want to pay for one then get AVG . It is free and good. FREE
http://www.avast.com/eng/down_home.html - AVAST
To use the Home Edition, you should register it. After the installation you have 60 days to do the registration. The registration process is very easy and will take you only a couple of minutes.
http://www.free-av.com/ -ANTI-VIR another antivirus FREE

WINDOWS CLEANER
http://www.ccleaner.com/ - Crap Cleaner. Windows system cleaner like Window Washer FREE

HOST FILE INFORMATION
https://netfiles.uiuc.edu/ehowes/www/resource.htm - IE-SPYAD (IE Restricted zone list) Free!

If you dont have an antivirus you can do free scans at
Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/
http://housecall.antivirus.com

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Panda ActiveScan - Free online scanner
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Computer Associates:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

DialogueScience:
http://www.antivir.ru/english/www_av/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

BitDefender
http://www.bitdefender.com/scan/license.php

Freedom Online scanner
http://www.freedom.net/viruscenter/index.html

ClamWin
http://www.clamwin.com/index.php?option=content&task=view&id=21&Itemid=56

All the downloaded programs need updating regularly.

Lew/+Silat

ghi · « **Reply #3 on:** October 09, 2005, 08:00:11 AM »

I had my sistem infested with Trojan virus twice in last 3-4 months, with Northon, AddAwarre,spywhare on all the time. But i couldn't clean up, i had to reinstall windows. First simthom was kind of multiple mouse click at every single click, it would open 100s of same pages, initial thoght is a cockie.
Since i instaled Karpevsky antivirus program i got better protection

ALF · « **Reply #4 on:** October 09, 2005, 08:07:49 AM »

For those with a little tech knowlege, you can remove almost any file by:

starting a dos box

going to the task manager and ending task on explorer.exe

manually jumping around the diretories in the dos box, remembering all the fun with filenames longer than 8 characters using the ~1 thingy, and that if you want to delete a file with a space in the name, you just put the name in quotes in the dos box.

This manual mode works for some of the nasties out there, since often you can get rid of all but one file in windows and that one bastage sems to re propagate the whole infection. Keep in mind you may still need to remove some registry keys as well.

x0847Marine · « **Reply #5 on:** October 09, 2005, 10:31:29 AM »

Quote

Originally posted by ghi
I had my sistem infested with Trojan virus twice in last 3-4 months, with Northon, AddAwarre,spywhare on all the time. But i couldn't clean up, i had to reinstall windows. First simthom was kind of multiple mouse click at every single click, it would open 100s of same pages, initial thoght is a cockie.
Since i instaled Karpevsky antivirus program i got better protection

I've using the free (Home) version of Avast for years, not one issue.

http://www.avast.com

BBQ_Bob · « **Reply #6 on:** October 16, 2005, 01:28:43 AM »

Quote

Originally posted by x0847Marine
I've using the free (Home) version of Avast for years, not one issue.

http://www.avast.com

Right, also AVG is pretty good and free, I also recommend that you use Microsoft's Anti-Spyware program I feel it is the best one out there.

OOZ662 · « **Reply #7 on:** October 16, 2005, 03:37:17 AM »

I had one of them proxy-server-in-China dweebs poking my computer a couple months ago and caught a Trojan late last month. Norton dealt with both easily.

llama · « **Reply #8 on:** October 18, 2005, 03:41:14 PM »

Needless to say, I assume you have a good backup system in place now...

If not, then let me strongly suggest Norton Ghost and an external USB hard drive. With this combination, you can back up hundreds of gigabytes in, well, depending on the system, between an hour and a few hours. Start it and then go to bed, and you'll be good to go.

-Llama