Forum menu
laptop infected wit...
 

[Closed] laptop infected with malware?????

 jedi
Posts: 10249
Full Member
Topic starter
 
[#2666967]

windows recovery and i cant get rid. i tried system restore but it says it has no restore points. my desktop and some folders are gone.

aarrgghhhhhhh can anyone help? ๐Ÿ™


 
Posted : 16/04/2011 7:22 am
 Drac
Posts: 50604
 

Spybot search and destroy and SuperAnti spyware.

Done!


 
Posted : 16/04/2011 7:24 am
 jedi
Posts: 10249
Full Member
Topic starter
 

tried that ๐Ÿ™


 
Posted : 16/04/2011 7:26 am
 Drac
Posts: 50604
 

What's it doing any messages?


 
Posted : 16/04/2011 7:30 am
Posts: 9238
Free Member
 

I used this lot on a USB stick (i.e. downloaded on a clean PC) to clean a colleague's laptop recently. Seemed to do the trick:

http://www.betanews.com/article/Tip-Use-CD-or-USB-stick-to-clean-up-malwareinfected-PCs/1300465661


 
Posted : 16/04/2011 7:31 am
 jedi
Posts: 10249
Full Member
Topic starter
 

do i just click the link and it starts?
is there no way of a system restore even though it says no restore points?????? arrrrrrrrrrgghhh


 
Posted : 16/04/2011 7:32 am
 jedi
Posts: 10249
Full Member
Topic starter
 

keeps saying hard drive failure and another says ram is ****ed or something


 
Posted : 16/04/2011 7:34 am
Posts: 9238
Free Member
 

Click here, click download then install

http://www.downloadcrew.com/article/20864-superantispyware_portable_scanner


 
Posted : 16/04/2011 7:44 am
 Drac
Posts: 50604
 

Seatools will test you HD http://www.seagate.com/www/en-us/support/downloads/seatools

There's a one on crucial site for testing RAM.


 
Posted : 16/04/2011 8:13 am
Posts: 0
Free Member
 

tony, bear in mind that all of those warnings you are getting are fake; there's nothing wrong with your laptop other than that it's infected with the "windows recovery" rogue. your desktop and folders etc are all still there; the infection just hides them but you can recover them all!
system restore will be unusable though; you need to use malwarebytes (and superantispyware, to be safe!).
read this carefully, follow it and you'll be sorted.

http://www.bleepingcomputer.com/virus-removal/remove-windows-recovery


 
Posted : 16/04/2011 8:45 am
 Drac
Posts: 50604
 

That's what I suspected Xherbivorex but he's said nothing about the messages 'windows recovery' virus normal comes out with.

Edit: Oh seems I'm out of touch with errors it reports.

Good call Xher.


 
Posted : 16/04/2011 8:47 am
Posts: 1184
Free Member
 

this happened yesterday to mine.
on another computer, simply download some malware software onto a usb. Then plug it into your laptop and run a full scan.


 
Posted : 16/04/2011 8:50 am
Posts: 78478
Full Member
 

Rkill, MBAM. Herby's link explains this in detail.


 
Posted : 16/04/2011 12:09 pm
Posts: 78478
Full Member
 

And, for god's sake people, update your machines.

Windows update, Java, anything made by Adobe. You can even automate most of that with [url= http://secunia.com/vulnerability_scanning/personal/ ]Secunia[/url]


 
Posted : 16/04/2011 12:11 pm
Posts: 18593
Free Member
 

Thank you for the explanation, Xherivorex, my wife's laptop did the same last week with the addition that it refused to connect to the Net saying a new IP was needed. I guessed it was malware so disinstalled Norton, and installed AVG and Spybot which brought the system restore back to life. That allowed a restore to before all the nonsense stazted (which solved the IP problem). Nice to have confirmation of what the problem was. A warning then, Norton does not stop it.


 
Posted : 16/04/2011 12:11 pm
 emsz
Posts: 0
Free Member
 

[i]And, for god's sake people, update your machines.[/i]

I remember you saying this before Cougar, I've set mine to update automatically now!! :mrgreen:

Been fine for ages, Ta


 
Posted : 16/04/2011 12:13 pm
Posts: 28
Free Member
 

And, for god's sake people, update your machines.

Windows update, Java, anything made by Adobe. You can even automate most of that with Secunia

Amen brother!

If you don't change your computing behaviour and properly protect your machine ( good anti-virus/firewall/Secunia ) then cleaning up your PC this time is just pissing in the wind.

Oh, and there is a good chance that your PC is now sending out the sort of spam that everyone finds so annoying.


 
Posted : 16/04/2011 12:26 pm
Posts: 78478
Full Member
 

It's really frustrating. It won't help with zero-day stuff, but a large number of infections take hold through exploits that have been patched for months. For example, the Slammer epidemic that levelled half of the Internet a few years back, that had been isolated and patched for [i]six months[/i] before the worm was written. The patch which would've prevented Code Red had been out for a month, and if you still need convincing then just look at Conficker:

http://en.wikipedia.org/wiki/Conficker

Conficker broke in November 08. "Conficker has since spread rapidly ... with more than seven million government, business and home computers in over 200 countries now under its control." The vulnerability it exploits was patched in... anyone...? Bueller? October 2008.

Patch your damn computers, or switch them off. (-:


 
Posted : 16/04/2011 12:28 pm
Posts: 0
Free Member
 

mate, you and i both know we're pissing in the wind trying to convince the vast majority of people to keep up to date with patches and so on!


 
Posted : 16/04/2011 12:36 pm
Posts: 18593
Free Member
 

My wife's machine was no doubt typical of a company/public service computer in that it had all the usual M$ software and Norton. She was actively discouraged from messing with it or adding things. Only when it wouldn't do anything at all did she give me carte blanche to install whatever would make it go again. The tax payer will no doubt go on paying for Norton for as long as she has the machine despite the fact I've removed it.


 
Posted : 16/04/2011 12:36 pm
Posts: 78478
Full Member
 

And then they go "well, I was only downloading some porn off bittorrent, and I haven't updated my computer since dinosaurs roamed the Earth, and [i]I don't understand how this happened. [/i]Microsoft is crap, isn't it."

Get in the sack.


 
Posted : 16/04/2011 12:39 pm
Posts: 78478
Full Member
 

it had all the usual M$ software and Norton.

I appreciate that this is an unpopular standpoint, but there's nothing wrong with either of those companies' products that setting up correctly wouldn't fix.


 
Posted : 16/04/2011 12:40 pm
Posts: 0
Free Member
 

Yes I know I'll get severely flamed for suggesting this, can't all be the same in this mortal realm though. Where choice exists [and doesn't cost a penny] why not explore it?

Give Ubuntu a try sometime, you don't have to get rid of windows and I'm not saying you should

Whilst viruses exist for Linux, there are less of them and Unix-like systems tend to be harder to compromise

Many people are afraid to try because windows is so heavily ingrained and dismiss an alternative despite having ever tried it. To those who say its too difficult. Its not difficult, its like anything it requires some patience and learning, how many things can you do in this life and put 0 effort into?

Yes [I fully expect] various people will now try to pick holes in what I've said. This talk always opens a big fat can of worms.


 
Posted : 16/04/2011 12:40 pm
Posts: 78478
Full Member
 

Nearly two dozen posts! You're late.


 
Posted : 16/04/2011 12:42 pm
Posts: 18593
Free Member
 

So if Norton is so great why did a computer with fully paid up Norton, all scanner running and automatic updates each time the thing was connected to the Net have something over 200 nasties that Spybot found and another 50 or so that AVG signalled, one of which it can't remove because it's so embedded in the operating system? I Googled the viruses and they were classics that have been around for ages.


 
Posted : 16/04/2011 12:46 pm
Posts: 78478
Full Member
 

TBF, it's not bad advice. You can try Linux from a USB stick without installing anything (which has to be its killer feature). If you like it, great.

I just get a bit bored of the same drum being beaten, is all. There'll be an Apple evangelist along in a bit too, no doubt. Is there anyone, anywhere, who when given this recommendation goes "Linux? Wow, I'd never heard of that..."


 
Posted : 16/04/2011 12:53 pm
Posts: 0
Free Member
 

If you have precious folders it might be prudent to get the Hdd out so you can recover later? then look to chuck new hdd in. If you get up and running at least you can use data recovery to get files back (disk drill or similar) I had the same thing with a couple of mates pcs, booted into safe, avg got rid of them. All done. A couple of extra options anyway.


 
Posted : 16/04/2011 12:53 pm
Posts: 5807
Free Member
 

Its not difficult, its like anything it requires some patience and learning

You're trying to punt the linux learning curve at people who haven't even learned to enable Automatic Updates? Good luck.


 
Posted : 16/04/2011 12:54 pm
Posts: 78478
Full Member
 

So if Norton is so great why did a computer etc blah blah

You want me to speculate on a computer I've never seen, based on vague anecdotal information and a complete lack of details other than the name of a company who have made hundreds of products over the years?

Ok then.

Perhaps it was an old version of Norton. This is more common than it should be in corporate environments as major upgrades are horsework.

It was probably badly configured. It's rare to find it optimally configured anyway, and the fact that you're (stupidly) running a home solution in a corporate environment (otherwise it'd be Symantec AV, not Norton) would further imply that there's no central configuration being done by IT, in which case all bets are off.

Norton is an anti-virus product, not an anti-spyware product (or at least, Norton AV is, which is what I'm discussing; the new versions pertain to be anti-spyware products, but they're not mature yet). Therefore comparing it to Spybot, a dedicated anti-malware product, is disingenuous.

An infection could have specifically targeted Norton and nobbled it. This gets more common as you look at bigger products; the smaller companies are less likely to be directly attacked by a virus author because there's fewer copies installed.

AVG found things which Norton didn't, because you ran it after Norton. This doesn't mean that it found more infections than Norton, just different ones. Had you been running AVG first and then removed it and installed Norton, you'd likely have had similar results. Malware specialists recommend a variety of disinfection tools for this very reason.

You reinstalled an AV solution. Had you uninstalled Norton and then reinstalled Norton, you might have had similar results.

No AV is 100%. Whether you found fifty infections or fifty thousand doesn't have any bearing on the effectiveness of a given AV product; it only takes one to slip through the cracks, and once the system is compromised then it's game over. Perhaps it was something Norton didn't recognise; perhaps it did recognise it and the user overrode Norton's suggestions because they really wanted to play Elf Bowling and her mate had emailed it to her and he's a copper so it's bound to be safe. Once an infection takes hold it can take out your protection and then sit there happily downloading dozens of other nasties which in turn can then do the same thing and they multiply like bacteria.

That's off the top of my head, I could probably come up with more theories if pressed but I CBA.

I never said Norton was "great," incidentally. I just think it gets a bad press which is largely undeserved. Personally it wouldn't be my first choice of solution, but it's alright so long as it's configured with a bit of care, which 99 times out of 100 it's not.


 
Posted : 16/04/2011 1:27 pm
Posts: 78478
Full Member
 

Oh, and,

My experience of public service computers are that it was probably several years old and hadn't seen a Windows Update since it was built. That's like leaving all your doors and windows open and then when your bikes get nicked complaining that your burglar alarm didn't work.

... which was my original point. (-:


 
Posted : 16/04/2011 1:33 pm
Posts: 78478
Full Member
 

over 200 nasties that Spybot found

Thinking about it, doesn't Spybot flag up advertisers' cookies as malware? That's your 200 'nasties' right there, they're called false positives.


 
Posted : 16/04/2011 1:36 pm
Posts: 18593
Free Member
 

#notes not to take a blind bit of notice of anything Cougar ever writes about computers#


 
Posted : 16/04/2011 3:39 pm
Posts: 341
Free Member
 

I use adaware, spybot, pc tools spyware doctor, and avg anti virus software all free to down load, and they do their stuff.


 
Posted : 16/04/2011 5:21 pm
Posts: 341
Free Member
 

Strangely clicking on cheshire west and chester website , i get an aol popup saying the site is infected and best wishes if i want to connect


 
Posted : 16/04/2011 5:22 pm
Posts: 10336
Full Member
 

#notes not to take a blind bit of notice of anything Cougar ever writes about computers#

More fool you then. It was a bit of an extended rant but a quality rant at that and correct afaik.


 
Posted : 16/04/2011 5:35 pm
Posts: 18593
Free Member
 

But you don't know do you Leffeboy, unless you've hacked my wife's computer and found what's in the virus vaults.


 
Posted : 16/04/2011 7:16 pm
Posts: 91168
Free Member
 

Many people are afraid to try because [s]windows is so heavily ingrained and dismiss an alternative despite having ever tried it[/s] Linux is only of any use to geeks

There, FTFY ๐Ÿ™‚

(Speaking as a geek who installed several different distros for different things and fettled them, then gave up for desktop use cos it was just pointless)

Btw, Cougar is to PCs what iDave is to exercise physiology ๐Ÿ™‚ Although seriously, full respect to Cougar for tirelessly responding to EVERY PC problem thread with excellent and patient advice.

What a hero.


 
Posted : 16/04/2011 7:33 pm
Posts: 78478
Full Member
 

notes not to take a blind bit of notice of anything Cougar ever writes about computers

OH NOES!!

But you don't know do you Leffeboy

Given that you've not given us any information at all, that's hardly surprising.

full respect to Cougar

Bless you, thankyou. The cheque's in the post. (-:


 
Posted : 16/04/2011 9:23 pm
Posts: 13811
Full Member
 

+1 full respect to Cougar

I'll take PP gift thanks ๐Ÿ˜‰


 
Posted : 16/04/2011 10:23 pm
Posts: 18593
Free Member
 

If you read my posts you'll find all the information you need, Cougar. You're not very good at interpreting what you read and see on the television though are you. Remember your perceptive comments when concerns were first expressed that that the Fukoshima atom plant was in a dangerous state after the tsunami:

[i]ZOMG NUCLEAR REACTORZ R EXPLODIGN IN JAPAN ITS CHERNOBBLE ALL OVR AGN WONT SOMEINE THINK OV TEH CHILDREN?!

I'm really, really starting to hate our media services. Bunch of scaremongering, lying bastards. [/i]

The media were being honest and subsequent events showed they were in no way scaremongering. You, however, went off on a rant without stopping to consider the information being provided, just like your post above.


 
Posted : 16/04/2011 11:32 pm
Posts: 0
Free Member
 

Restart in safe mode and run them again,tony.Do as much as you can in safe mode with what you have already downloaded in the past.I have avg and spybot and they seem to do the job if it ever goes dodgy.


 
Posted : 17/04/2011 12:31 am
Posts: 0
Free Member
 

molgrips have you used Ubuntu..

did you find that to be really hard to use ? ๐Ÿ˜ฏ

I'd say its one of the easiest OS to use - have you used synaptic for instance?

Linux-from-scratch or Gentoo are probably the "geeky" ones that come to mind


 
Posted : 17/04/2011 10:28 am
Posts: 91168
Free Member
 

I have not used Ubuntu, no.

The issue I have with it isn't ergonomics as such, it's all the other stuff. Like having to research hardware more carefully to make sure it's supported, having to use Open Office instead of MS Office which has all sorts of foibles, having to figure out alternatives to the stuff everyone else uses and so on.

The distros I used (I forget which) had lovely UIs but they were all packed with their own geek favourite selection of tools which were all random and just not as well sorted as a mainstream alternative.


 
Posted : 17/04/2011 10:31 am
Posts: 78478
Full Member
 

If you read my posts you'll find all the information you need, Cougar.

Would you be so kind as to point out where you told us, say, which version of Norton she was running, the OS in question, or any examples of the infections you found? Information which is critical for giving you an explanation that is more than merely speculation, as I pointed out and you ignored. I obviously must've missed this informative post that you're referencing.

When you go to the doctor, and the doctor asks what's wrong, do you reply "don't you know, I thought you were a doctor"?

The media were being honest and subsequent events showed they were in no way scaremongering.

Wow, thread derail much? Are you [i]that [/i]short for a point?

The media were making shit up and got lucky. At the time that edit was made, no-one here really knew what was going to happen. I stand by my rant.


 
Posted : 17/04/2011 10:38 am
Posts: 0
Free Member
 

I have not used Ubuntu, no.

The issue I have with it isn't ergonomics as such, it's all the other stuff. Like having to research hardware more carefully to make sure it's supported, having to use Open Office instead of MS Office which has all sorts of foibles, having to figure out alternatives to the stuff everyone else uses and so on.

๐Ÿ˜ฏ

No research required, stick the live CD in or usb pen drive and see for yourself. It will probably find everything you have.

What hardware are you expecting to have an issue with?

MS office only required for business. At home what does OO not do for you?

Does windows ship with everything you need straight off the bat? Probably not. So like any OS you have to choose and install the stuff you need.

You don't have to like it. But at least try it before saying things like that.

[no offence intended]


 
Posted : 17/04/2011 10:43 am
Page 1 / 2