Freaking Antivir Scam

stdreb27

Active Member
Originally Posted by meowzer
http:///forum/post/3296999
So how do I find out for sure????
It let me download the program....just 1/2 way thru scanning it quits
Run it in safe mode.
Originally Posted by SCSInet

http:///forum/post/3297203
I'm shocked by the number of people who operate like malware is just "part of" using a computer.
If your user accounts on your computers were set up properly you'd have nearly zero problems with malware.
Stop running day-to-day with user accounts that have administrative privileges. Use administrator accounts only when needed to install something, and you'll elminate nearly all of your problems.
I dunno, I have great faith in the destructive power of my (former) end users... But yeah, the company I worked for, had computers as an afterthought. I've literally been called up by the owner half way around the world asking me how to shut down a laptop...
 

slice

Active Member
Originally Posted by Speg
http:///forum/post/3297207
seriously :( it would open up www.p**no.com.... I was like "babe...if I did go to that stuff it would be something a little more interesting than p**no.com"
Yep, there are many little bots like this. A co-worker brought her daughter's PC in to work so I could clean it from this very thing. It had so many, you could not close them fast enough...machine was worthless until it was cleaned.
 

speg

Active Member
Originally Posted by Slice
http:///forum/post/3297215
Yep, there are many little bots like this. A co-worker brought her daughter's PC in to work so I could clean it from this very thing. It had so many, you could not close them fast enough...machine was worthless until it was cleaned.
Yeah, I can't wait to show this to the wife...not sure she totally believed my story :) will be nice to have some backup!
 

slice

Active Member
Originally Posted by Speg
http:///forum/post/3297221
Yeah, I can't wait to show this to the wife...not sure she totally believed my story :) will be nice to have some backup!
yeah, its true. You have registery issues. The worst of these will pop up on your desktop even without your browser being open.
I use:
malwarebytes anti-malware
http://www.malwarebytes.org/
Search & Destroy
http://www.safer-networking.org/en/home/index.html (be sure to enable "tea timer", it will block all registery changes unless you specifically permit them)
Good general anti-virus
http://free.avg.com/us-en/homepage
Ccleaner (crap cleaner)
http://www.piriform.com/ccleaner (cleans up all those little piles of doo-doo)
all free and used pretty much in that order.
a $40 router (hardware firewall) with unused ports closed is also a very good idea...
 

reefraff

Active Member
I'd like to see someone track down one of those jerks that pull that stuff. You could probably kill one of those people and be found not guilty
 

aquaknight

Active Member
I had a virus that hacked administrator rights, and wouldn't allow most of the programs to run, even malwarebytes when logged in as the admin on safe mode.
The only thing that worked, was ComboFix. They only recommend to use Combofix if instructed to, but used it twice without losing my data. When downloading, make sure you save it as 'svchost.exe' so the virus doesn't know what it is. If you've run out of the options, ComboFix should work.
 

scsinet

Active Member
Originally Posted by AquaKnight
http:///forum/post/3297446
I had a virus that hacked administrator rights, and wouldn't allow most of the programs to run, even malwarebytes when logged in as the admin on safe mode.
They are out there, but they are not common.
Here's a true story.
I manage an IT department that serves about 150 users, 120 of which are in our US office where I work. Most people were used to getting malware on a fairly regular basis... some users got it several times a year, others several times a week. On average, we were cleaning at least several machines daily and dealing with a major virus outbreak in the office that brought our systems to a standstill about once a year. This was seriously impacting everyone's productivity.
We tried practically begging people to only use their PCs to for business internet use, but nobody would listen. We made the (highly unpopular and controversial) decision to remove their administrative privileges on the machines for people and force them to run with regular user accounts.
This was six years ago. Since then, we should have dealt with over 1000 machine cleanups and at least half a dozen major virus outbreaks.
Number of machine cleanups? 3. We had one a few years ago, one last year, and one a few months ago.
Number of virus outbreaks? 0
The moral of the story is that removing administrative privleges from the user account you use day to day to does not guarantee that you'll neverbe infected, but it removes more than 99% of the chances of a problem and damage to your machine.
BTW... perhaps your administrative user account had a simple password. Malware can still run when you aren't an admin, it just can't make any changes to your OS. However, it can run a enumerate your accounts and run a dictionary attack against your administrative user account. Make sure any user account that has admin priviledges has a complex password.
 
Top