antivirus 2010

[shppr01]

Malwarebytes is good at removing most of those rogues.

It doesn't do anything about Norton, though.

+1 Malwarebytes helped me. I have it on a flash drive just in case

[Masherbrum]

I'd just go to ESET's ordering page and buy one of their license packs. They're running a special right now for 25% off. Most here will recommend ESET Smart Security. However, it's up to you since the only difference between Smart Security and NOD32 is the loss of the anti-spam and firewall modules.

When you buy the product you can either insert the registration code into your current installation of ESET. Or you can uninstall your current installation of ESET, download the one provided in the registration e-mail, then install ESET. Depending on which version of the software you currently have, I'd opt for the second method.

Denny explained it well CAP.   ESET is painless to "upgrade" from the Trial Version.   

[sluggish]

I'd like to give my recommendation to ESET also.  You can get a discount for multiple machines too.

[CAP1]

Denny explained it well CAP.   ESET is painless to "upgrade" from the Trial Version.   

on this machine(at home) i had installed the trial version like i mentioned earlier.......but my in laziness, i never upgraded....and since i never touched it, i don't remember that password.
 i think he mentioned un-installing it, then go to their purchase page....which is my plan.

 last night, was spent running pretty much everything on this machine...superantispyware, malewarebytes, and spybot search and destroy. thankfully, the only things showing up on this machine were tracking cookies.

 tomorrow, i'm going to talk to gary, and more than likely listen to the suggestion from someone here, and have that machine re-formatted. the only thing on that one that;s important, is my invoicing program, as it has all of my customer files. i back up that program every 3 or 4 days, so once the reformat is done, it'll be easy to reinstall.


 thank ALL of you guys for your advice and help with this!!!

it seems i got off somewhat easy, compared to what some others have suffered.


john

[MrRiplEy[H]]

Once again I want to stress that once you get infected you can _not_ trust that system again before you reinstall.

You have no way of knowing if the antiviruses missed something or if your hosts file has been replaced with one linking directly to hacked pages - or if your key system files have been rootkited.

You're a fool if you continue using the computer relying on disinfection. Trust me. Gaming computer you could still maybe allow that but business? Really.

[CAP1]

Once again I want to stress that once you get infected you can _not_ trust that system again before you reinstall.

You have no way of knowing if the antiviruses missed something or if your hosts file has been replaced with one linking directly to hacked pages - or if your key system files have been rootkited.

You're a fool if you continue using the computer relying on disinfection. Trust me. Gaming computer you could still maybe allow that but business? Really.

that's why i'll be on the phone to gary tomorrow.....to get the thing taken care of.

and i DO appreciate your advice sir!!

john

[Denholm]

...the only thing on that one that;s important, is my invoicing program, as it has all of my customer files. i back up that program every 3 or 4 days, so once the reformat is done, it'll be easy to reinstall...

Good man!

[MORAY37]

run combofix after malwarebytes.  it usually finds a few extra things

Run Combofix as a last ditch effort, prior to wiping the hard drive.

I had a very similar attack to my system as you did, CAP, and combofix worked in the end.  I used spyware and malware from a few different outlets, all of which worked initially, but the infection invariably came back after a week or two.

Look into it (ComboFix) if you have the same issue and it comes back: it saved me a reformat.

[Denholm]

If it finds its way back even after all the scans he's performed, a reformat is definitely necessary. Not just to eradicate the bug, but to keep the business safe.

[CAP1]

If it finds its way back even after all the scans he's performed, a reformat is definitely necessary. Not just to eradicate the bug, but to keep the business safe.

the business is what's most important to me. getting my own business, although a thousand times harder than i had imagined it would be, has put the enjoyment back into my job. i was at a point that i didn't care about much, as long as i got my paycheck every week. now it's fun again, and i need to stay in business in order to keep it that way. i cannot risk my customers stuff, nor can i risk finding my bank account empty one day.


 it'll probably be a small pain in the ass, but i'm gonna go with the reformat route.

[trigger2]

2 programs, malwarebytes:
http://www.malwarebytes.org/mbam.php

SmitFraudFix:
http://siri.geekstogo.com/SmitfraudFix.php

Problem solved.

Well, minus the symantec crap.

[Twister2]

Pretty funny. My wife calls me at work and reports that our laptop has the exact problem.  I Was trying to fix it after i got home got frustrated and browsed the boards and found this post. I downloaded malewarebytes and I believe it is fixed. Anyone know how this one is being spread?

[CAP1]

Pretty funny. My wife calls me at work and reports that our laptop has the exact problem.  I Was trying to fix it after i got home got frustrated and browsed the boards and found this post. I downloaded malewarebytes and I believe it is fixed. Anyone know how this one is being spread?

on sat. night, after superantispyware, and malewarebytes both reported nothing, i needed to run the lsp.fix that someone told me about here.
 once i did that, i updated my spybot search and destroy, and ran that. that found about 6 more things.
 after that, it seemed good.

 this morning, i ran malewarebytes again....and once again, it found one thing. it was trojan.fake.
 superantispyware found nothiung.


my computer dude's coming on wed. to pick up the computer, and he's gonna reload everything.....

 as for how it's gettin spread, i've no clue. when it hit me, i was here on this bbs, and in my photobucket account, in 2 seperate windows.

[Masherbrum]

on sat. night, after superantispyware, and malewarebytes both reported nothing, i needed to run the lsp.fix that someone told me about here.   once i did that, i updated my spybot search and destroy, and ran that. that found about 6 more things.  after that, it seemed good.

 this morning, i ran malewarebytes again....and once again, it found one thing. it was trojan.fake.
 superantispyware found nothiung.

my computer dude's coming on wed. to pick up the computer, and he's gonna reload everything.....
as for how it's gettin spread, i've no clue. when it hit me, i was here on this bbs, and in my photobucket account, in 2 seperate windows.

More than likely from a friend's address book or a previously visited site. 

[MORAY37]

Don't you know my girlfriend's laptop got gobbled today by this "windows 2010 " root kit? Probably the same one that got you.

Combofix killed it within 5 mins of the first sign of infection....of course this was done through window after window of bad grammatical "your computer is infected..." windows. Actually forced an image onto her background (same horrible grammar lol)....dunno if i've seen that before.  It also wouldn't let any of her spyware or malware finish their scans, which i found interesting as well.

There's nothing important on her computer (just lesson plans,she's a teacher) so I made her change any passwords for external stuff.  I don't think a full wipe is in order, in this case.

Anyway, Combofix killed it.  Just FYI.