Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

This may be the wrong place to ask?

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » Archives » General Discussion (1/22-2007 thru 12/14/2010) Donate to DU
 
kentuck Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Jan-31-10 03:03 AM
Original message
This may be the wrong place to ask?
Has anyone had any experience with Internet Security 2010? Is it spyware, a worm, a trojan, or something different?
Printer Friendly | Permalink |  | Top
denbot Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Jan-31-10 03:16 AM
Response to Original message
1. I had to pay someone to root that sucker out for me.
Once upon a time I could track those little bastards down but I no longer have the skills.
The guy I took my computer to said that I S 2010 is part mel ware, part virus. He tracked it down and then installed different virus and spy-ware programs.

He said that this little bastard gets in to your registry and renames it's self, then replicates in various parts of your OS. Nasty stuff and beyond my ability to defeat.
Printer Friendly | Permalink |  | Top
 
blogslut Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Jan-31-10 03:17 AM
Response to Original message
2. It's a baddie
Edited on Sun Jan-31-10 03:27 AM by blogslut
It is fake security software that once installed, takes over your system and holds it hostage.

Here's instructions on how to get rid of it:

http://www.geekpolice.net/malware-removal-guides-f12/remove-internet-security-2010-removal-guide-t16909.htm

Printer Friendly | Permalink |  | Top
 
Sebastian Doyle Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Jan-31-10 03:19 AM
Response to Original message
3. It is one of the worst things you can get on your computer
First of all, do not click on any of the pop up windows the virus brings up. If you have to turn your PC off, it will hurt far less than anything that allows this piece of shit to install itself.

Here's a tutorial on removing it...

http://www.howtogeek.com/howto/9487/how-to-remove-internet-security-2010-and-other-roguefake-antivirus-malware/
Printer Friendly | Permalink |  | Top
 
denbot Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Jan-31-10 03:23 AM
Response to Original message
4. BTW he said the more times you restart your computer the deeper it gets imbedded.
This guy operates out of his garage working on computers as a sideline so I don't know if he is an expert, but has my dad used to say "A one eyed man is king in the land of the blind". My feeling is to restart your computer as little as possible.

Malwarebytes' anti-melware and Avira Antivirus are the programs he installed on the infected machine if that helps.
Printer Friendly | Permalink |  | Top
 
WillowTree Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Jan-31-10 03:37 AM
Response to Original message
5. Another resource.
Printer Friendly | Permalink |  | Top
 
DeadEyeDyck Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Jan-31-10 03:55 AM
Response to Original message
6. Sucks being you
This is among a very nasty class of viruses. Actually, it is not a virus but a program that you inadvertaqntly installed. Usually via an e-mail attachment.

I am in the IT field so I have a beyter advantage than most.

I had just checked into a hotel to visit a client and was reading my email. I was tired and violated the cardinal rule of not clicking on a link in an email from an unknown source. I knew seconds after I did it that it was bad. Then the pop-corn machine started with the pop-up notices and warmings. I shut down my computer imediately and decided on a plan. I also called my client and said that my entire visit might be a bust.

Since I knew I had not done ANYTHING on the computer that day, I could do a date search on all files since midnight. I started up in safe mode and did the search. I managed to find a new folder and deleted the files. I was ablo to delete all but one registered DLL. Here is a trick though. Do not delete it. Rename it.

I rebooted in safe mode and deleted the last file that I had renamed. Thinking I was out of the woods, I re-started as normal and for awhile, all was well but within an hour, it began to return. I found the same directory I had previously deleted. It re-emerged like "Jason" from Holloween. Knowing how the recycler works, I knew where the copy was hiding. I went back into safe-mode and repeated the steps above but this time I went to a command prompt and entered the recycler. It is a hidden folder that starts with s and has a GUID name. There is one for every profile. It's attribute is hidden and system and any files in it are hidden, system and read-only. So you need to set the attributes to -h-s-r so that the files can be deleted. It is a pain and it all has to be done at the command prompt. I found a copy of the mal-ware in EVERY recycler. It took me until 4 AM but I managed to clear it all out.

I then restored a set point to the previous day to remove any residual registry changes. I met with my client as scheduled, totally exhausted but also elated that I beat it.

Since then, I have installed PCTools. Not only do they guard against this type of malware, they have the best removal tools.

The trick it to shut down the moment you detect the threat. Don't worry about a legal shut down. Hold that power button for 5 seconds. From there on out, only operate in Safe Mode until it is cleaned.

Windows 7 is far more secure than any other Windows. They have really made some significant advances. I recommend it for everyone.
Printer Friendly | Permalink |  | Top
 
fl_dem Donating Member (444 posts) Send PM | Profile | Ignore Sun Jan-31-10 08:38 AM
Response to Reply #6
8. I've had to do this
I'm not IT but do know enough to get me into trouble..LOL I was quite surprised that I won the battle, though it took me four days. I did the same thing, searched files/folder created or modified for the dates in question, however I isolated all files by moving them into quarantine then deleted the file, as they continue to move and rename themselves, in the exceptions of one file a systguard (culprit) which wouldn't allow me to delete due to being in use, I alt/ctrl/dlte located it, ended the task and quickly deleted it while it was not running.

I wish the people who create these bugs/mal and spyware would use that talent to create good instead of havoc. Such a waste of talent.
Printer Friendly | Permalink |  | Top
 
Bitwit1234 Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Jan-31-10 08:30 AM
Response to Original message
7. Unless you click on to a link
in the corrupted email, can this virus or whatever get into your computer. No matter how safe it looks unless I know the person and then I will delete the email if I don't think the link is a good one. Maybe I miss out on some stuff but I would rather just go thru and delete these emails than take a chance. I got caught one time when a fellow researcher's name was on an email and I clicked on to the link..too late I realized I had been took. But that was some time ago and virus were so bad. One question. Can't you just go back and restore your computer to a time before the virus took over or is it still in there. I don't have any special files that it would hurt to delete. Any thing I have I can locate and redo so going back to a restore is not a problem. But would that work. I am not computer savvy.
Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Fri Apr 26th 2024, 04:27 PM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » Archives » General Discussion (1/22-2007 thru 12/14/2010) Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC