The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.

Getting bombarded by viruses and trojans

Spoom182Spoom182 Registered User regular
edited January 2009 in Help / Advice Forum
A few hours ago, I was doing some google searching and clicked on a random site. I instantly got 3 or 4 messages telling me McAfee had blocked some trojans. Well, evidently it wasn't enough, since now every time I go online no pictures, show up, only text, and it shows that little square-circle-triangle sign where things should be. I ran the standard McAfee scan, restarted the computer, ran a MalwareBytes anti virus scan and that seemed to work. Unfortunately, about 2 hours later this another thing popped up. I think its one of those trojans that pretends to be an antivirus program and when you download it, it just massively fucks you over. It's called Anti-Virus 2009, and I think I've had a run in with it before, but I can't remember how to get rid of it. It's kind of a confusing situation right now, but if you guys could give me any advice it would be much appreciated.

Spoom182 on

Posts

  • SeñorAmorSeñorAmor !!! Registered User regular
    edited January 2009
    http://www.malwarebytes.org/

    It'll clear that right up for you.

    I would also suggest getting some decent A/V. There are many different testaments to what is good, but the common consensus is that McAfee is utter shit, which you have just found out. Scan the forums for what people suggest. (AVG is my choice)

    SeñorAmor on
  • Spoom182Spoom182 Registered User regular
    edited January 2009
    I ran 2 malwarebytes scans, and both came up with some results, but didn't totally clean it out. Granted, I don't have the most recent version.

    Spoom182 on
  • JaysonFourJaysonFour Classy Monster Kitteh Registered User regular
    edited January 2009
    If it'll let you grab an update, do that; if not, bite the bullet and take it in for cleaning, or if the infection is too bad, ready an orbital nuke salvo.

    Oh, and get an anti-viral that actually works.

    JaysonFour on
    steam_sig.png
    I can has cheezburger, yes?
  • AurinAurin Registered User regular
    edited January 2009
    From what I've seen of the Anti-Virus 200x crapola viruses... they make it extremely difficult to get your already installed programs to update. They usually block 99% of any tools online that you can download to get rid of it, as well.

    My advice: Nuke it from orbit. Back up what you absolutely must have, format, and reinstall. You'll take much less time doing that than trying to fight with the virus. And, yes, get some good antivirus software. I use TrendMicro, and it seems to do well.

    Aurin on
  • theclamtheclam Registered User regular
    edited January 2009
    Combofix is damned good at getting rid of browser hijackers. You can also use hijackthis to find it.

    theclam on
    rez_guy.png
  • SeñorAmorSeñorAmor !!! Registered User regular
    edited January 2009
    Spoom182 wrote: »
    I ran 2 malwarebytes scans, and both came up with some results, but didn't totally clean it out. Granted, I don't have the most recent version.

    Jesus I'm sorry. I don't know how I missed that in your OP.

    Try running Spybot too.

    SeñorAmor on
  • romanqwertyromanqwerty Registered User regular
    edited January 2009
    Can you just system restore?

    Granted its likely that the virus has blocked the function, but i've removed more than half of the virus' i've got with it and it takes very little time to try.

    romanqwerty on
  • CrashtardCrashtard Registered User regular
    edited January 2009
    I'd do what roman said and try a system restore. If that doesn't work, it's time for a format c: and reinstall windows.

    Crashtard on
    I pinky swear that we will not screw you.

    Crashtard.jpg
  • John MatrixJohn Matrix Registered User regular
    edited January 2009
    Crashtard wrote: »
    I'd do what roman said and try a system restore. If that doesn't work, it's time for a format c: and reinstall windows.

    Unnecessary. Go to www.bleepingcomputer.com and register on their forums. I recently had the same problem and was directed there by several members of the forums. Their response time is phenomenal.

    Start a post in the "Am I infected?" forum and they'll help you from there. I just totally cleaned my system of all viruses last night using their advice, it's squeaky clean now.

    John Matrix on
  • brandotheninjamasterbrandotheninjamaster Registered User regular
    edited January 2009
    OP,

    Have you tried running these programs in safe mode?

    brandotheninjamaster on
  • Thor1590Thor1590 Registered User regular
    edited January 2009
    A cousin of mine infected one of our laptops with Antivirus 2009, and the only way I found to get rid of it was to update malwarebytes on another computer and burn the folder onto a disc. Are you able to do that?

    Thor1590 on
  • theclamtheclam Registered User regular
    edited January 2009
    Modern viruses can infect the System Restore, so that it's impossible to restore back to a pre-virus state (and if you manage to clear off the rest of the computer, but neglect the System Restore, then you can get reinfected by using it).

    If you can plug your hard drive into another computer with an updated copy of malwarebytes, you can scan just that drive.

    theclam on
    rez_guy.png
  • TL DRTL DR Not at all confident in his reflexive opinions of thingsRegistered User regular
    edited January 2009
    theclam wrote: »
    Modern viruses can infect the System Restore, so that it's impossible to restore back to a pre-virus state (and if you manage to clear off the rest of the computer, but neglect the System Restore, then you can get reinfected by using it).

    If you can plug your hard drive into another computer with an updated copy of malwarebytes, you can scan just that drive.

    This is the easiest way if you have the gear. Otherwise I'd recommend bleepingcomputer followed by looking for a computer repair guy on Craigslist (assuming you're unable to backup and format). Just whatever you do, for the love of god, don't spend ten times what you should by taking it to Geek Squad.

    TL DR on
  • ceresceres When the last moon is cast over the last star of morning And the future has past without even a last desperate warningRegistered User, Moderator Mod Emeritus
    edited January 2009
    I use avast! and it is pretty awesome.. but it sounds like you're beyond that now.

    If you know what you're doing, HijackThis! in safe mode would be perfect.

    If you're still having problems tonight you can message me on AIM and I'll see if my husband can help when he gets home. He knows a good bit about this stuff.

    ceres on
    And it seems like all is dying, and would leave the world to mourn
  • EndomaticEndomatic Registered User regular
    edited January 2009
    theclam wrote: »
    Combofix is damned good at getting rid of browser hijackers. You can also use hijackthis to find it.

    Isn't combofix a fucking pain in the ass to setup? You should mention if it's true (I may be mixed up with some other thing).

    Endomatic on
  • Spoom182Spoom182 Registered User regular
    edited January 2009
    I thought I cleared it out (and thanks for the responses, but I forgot to check back here for a while once I thought I fixed it), but I'm getting McAfee notices that "generic.exe" or some file name like that is a trojan on my computer. I'm running a malwarebytes scan again, I'll see how it comes up, and I'll also check that bleepingcomputer site. Thanks

    Spoom182 on
  • ViscountalphaViscountalpha The pen is mightier than the sword http://youtu.be/G_sBOsh-vyIRegistered User regular
    edited January 2009
    Spoom182 wrote: »
    I thought I cleared it out (and thanks for the responses, but I forgot to check back here for a while once I thought I fixed it), but I'm getting McAfee notices that "generic.exe" or some file name like that is a trojan on my computer. I'm running a malwarebytes scan again, I'll see how it comes up, and I'll also check that bleepingcomputer site. Thanks

    make sure to disable "SYSTEM RESTORE" when you take a run at these trojans.

    Make sure you run it in safe mode as well as someone else suggested. Orbital nuking of ones partition is the only way to be 100% safe though. There are some pretty nasty bugs out there.

    Viscountalpha on
Sign In or Register to comment.