virus

gursaran abott · Jun 18, 2008

Hi

My pc is infected with virus and shows messages the your system will crash
and tells me certain virus are found and to buy or upgrade the product
what did as a solution i restored my computer to earlier point when there
was no such activity
i wanted to know is that a good solution or is there something else i should
do to clean up my computer and keep it safe

Please advice

Thanks

Carey Frisch [MVP] · Jun 18, 2008

Get a free PC safety scan:
http://onecare.live.com/site/en-au/default.htm?mkt=en-au

--
Carey Frisch
Microsoft MVP
Windows Desktop Experience -
Windows Vista Enthusiast

---------------------------------------------------------------

Hi

My pc is infected with virus and shows messages the your system will crash
and tells me certain virus are found and to buy or upgrade the product
what did as a solution i restored my computer to earlier point when there
was no such activity
i wanted to know is that a good solution or is there something else i should
do to clean up my computer and keep it safe

Please advice

Thanks

db.Â·.. > · Jun 18, 2008

its likely a phony message
trying to manipulate you
in to downloading more
evil ware.

but i suppose the phony
message could be considered
as an infection as well.

my suggestion is similar
to carey's except her
version is for the standard
download.

i recommend this online
version instead:

http://onecare.live.com/site/en-US/default.htm

gursaran abott · Jun 18, 2008

That didnt answer my question

Can anybody advice

David H. Lipman · Jun 18, 2008

From: "gursaran abott" <[email protected]>

| Hi
|
| My pc is infected with virus and shows messages the your system will crash
| and tells me certain virus are found and to buy or upgrade the product
| what did as a solution i restored my computer to earlier point when there
| was no such activity
| i wanted to know is that a good solution or is there something else i should
| do to clean up my computer and keep it safe
|
| Please advice
|
| Thanks

You are infected with a Trojan (not a virus) to goad you to purchase a rogue anti malware
utility that will do nothing but empty your wallet.

Restoring your PC to a previous Restore Point is a semi-good solution. However you may
still be infected and not know it. Additionally you may have a vulnerability on your PC
that caused you to get the FakeAlert/ZLob type trojan in the first place.

You did to make sure ALL vulnerabilities are mitigated. The following URL at Secunia will
scan youir PC for vulnerabilities and idicate what needs to be fixed.

http://secunia.com/software_inspector

I also suggest posting to an Expert Forum to verify that your PC is indedd claen of malware.

1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...

{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

Richard in AZ · Jun 18, 2008

gursaran abott · Jun 18, 2008

Hi

what i trying to explain is i have done a system restore to a earlier point
and now i dont see that message or spyware
my question is " Is the system restore a good option"? or do i need to do
something else????
appreciate your response

Thanks

db.Â·.. > · Jun 18, 2008

ok, the system restore
point may have helped.

but the issue is not cut
and dry because of the
dynamics of a trojans and
infections. in today's world
it is an all out war against
virus and other attacks.

in your case you may have
a trojans that was activated
via a number of ways.

neither the trojan or
the ways to activate
them reveal themselves
to anyone until it is
too late.

at this point we are not
sure if your trojan is
newly installed or has
been installed for a very
long time and stored in
your system restores points.

so even though you may
have circumvented the
nuisance by a system
restore, that restore point
you used may have very
well restored/reinstalled
the trojan again and is
waiting to active again.

what you need to do is
to disinfect your system
because if you have a
nuisance then you have
an infection. and if you
have an infection then you
may have infection"S" yet
to make themselves known
to you.

therefore you will have to delete
all your restore points because
they may have been infected
and are preserving / hosting
the contamination.

after you disinfect your system
you can create a new restore
point that should be free
of infection.

though the above is a reasonable
method to resolve what seems
to be a simple infection, who
knows what all else may have
been installed on your system
either by a freeware having
malicious code and you allowed
to bypass your firewall or
perhaps the infections were
delivered to you via email.

the dynamics of infections are
wide and complex, thus this
is why a simple nuisance like
you mentioned should be
considered as a full fledge
attack on your system.

again my suggestion is
to disinfect your system
and delete all your restore
points.

then be sure to scan your
system regularly so that you
can attack the infection before
it attacks you, that is if you
get re-infected.

Richard in AZ · Jun 19, 2008

peter · Jun 19, 2008

Of course you need to do something else and everybody here has been pointing
you to a Virus Scanner...get it!!
You need an AntiVirus...AntiSpyware...AntiAdware Program and you need to set
it up to update its definitions daily if not every 3 hours.
You need to set theses programs up to run scans every 24 hours.
You need to get a decent Firewall.......and use it !!
You need to watch where you websurf..so you do NOT download that crap
again..
The biggest culprit for infestations is the idiot behind the
keyboard.......donâ€™t be one of them!!

peter

M.I.5¾ · Jun 19, 2008

gursaran abott said:
Hi

My pc is infected with virus and shows messages the your system will crash
and tells me certain virus are found and to buy or upgrade the product
what did as a solution i restored my computer to earlier point when there
was no such activity
i wanted to know is that a good solution or is there something else i
should
do to clean up my computer and keep it safe

The best solution by far is to restore the backup that you made of your hard
disc before this infection took place.

I already know the flaw in that advice.

virus

gursaran abott

Carey Frisch [MVP]

db.Â·.. >

gursaran abott

David H. Lipman

Richard in AZ

gursaran abott

db.Â·.. >

Richard in AZ

peter

M.I.5¾