Korean Job Discussion Forums

[moosehead]

for the second time now since I've been back stateside - in less than 5 months - I've been attacked by majorly nasty evil-doer codes

both times spybot has managed to clean up my pc but I'm perplexed as to why this is happening here - didn't in K - even tho I used it about the same amount of time and downloaded there as here.

thoughts? comments? advice?

[moosehead]

well in the midst of my attempts - going on 2 days now - to clean up my system, I went ahead and uninstalled utorrent.

I've been using Spybot Search and Destroy but so far haven't managed to get everything off; something's still got ahold of my display (it has a green background and a huge message telling me my machine is infected)

when I go to Display in the Control Panel, I can't access the option to change the background.

when I try alt+ctrl+del it tells me the Task Mgr has been disabled.

there's some major evildoer code on my machine!!

can anyone suggest another program that can do a good clean up? I've always used Spybot and this is the first time it's not been able to get the job done.

Help!!

[bassexpander]

what antivirus program do you run?

That virus is said to also come down with shareware.

[moosehead]

no antivirus - just spybot - have used it for several years - have had several pc's and (knock on wood) never been infected before.

my dad was here Thanksgiving, bless him he's 87 and can use a computer but not very well, I let him use my pc and left him alone while I was cooking - I think he probably clicked on one of those stupid popups because I do recall checking on him and finding a lot of windows open

spybot kept rescanning so I downloaded another one called Malware Destroyer or something like that - has good reviews - it cleaned off some stuff but now this stupid logon screen comes up asking me to log on!!! you know how the split screens are, windows logo on the left, user on the right - on the right it says Owner and asks for a freakin' password!!!!! OMG!!!

I'm so pissed!! I sent a detailed email to the tech support for this program.

have shut everything down for now, can't deal with it, got to cool off first am really pissed.

[bassexpander]

Honestly, install Avast's free home ediiton and run a bootscan (if the malware isn't so imbedded that it'll block the download).

www.avast.com

Avast is great free software. Beats out many of the paid programs. I run it on my machine and love it. Have for years.

Another program I run every month or so is the free version of malwarebytes.

http://www.malwarebytes.org/

[moosehead]

no, can't access my desktop.

one of the tech people from Malware Destroyer has been emailing me back and forth - turns out they are out of Iceland no less - guess not much to do there but play on the computer hey hey. very nice fellow. anyway we are going to chat over Skype on Tues and see what can be done. I'm swamped until then.

I'll post an update then.

Thanks Bassman for responding.

[bassexpander]

In my opinion, if you get far enough to siphon-off the files you can save, do it. Then reinstall Windows from scratch. You'll probably have too many damaged files to make a full save worthwhile (and you'll probably save time overall).

After you are done, please install Avast. It's really a great program, is free, and is not too tough on resources.

For another suggestion, try Microsoft Essentials:

http://www.softpedia.com/get/Antivirus/Microsoft-Security-Essentials.shtml

I've had OK luck with this program on my work machine so far.

[bassexpander]

This may be your solution:

Try making a disc like this on another computer and booting from it on the infected one:

http://www.techmixer.com/free-f-secure-rescue-bootable-cd-to-clean-virus-and-malware/

[moosehead]

yeah, I'm thinking I'm gonnna have to do a reinstall -

I can also probably manage a safeboot - we'll see - haven't tried yet, just too swamped w/other priorities right now.

I've put off my tek call until Wed - will update soon.

thanks again!

[moosehead]

[bassexpander]

Microsoft Essentials is not Spyware doctor. It's a new antivirus program that's free.

I would never pay a company to remove a virus.

[moosehead]

[FistFace]

Yeah, get some av program, dude. This worm seems to be very prevalent around my school. Microsoft catches it almost every day-

https://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Worm%3aWin32%2fHamweq.E


http://blogs.technet.com/mmpc/archive/2009/12/16/surveying-the-hamweq-age-threat-reports-for-msrt-december.aspx

ahn labs v3 does not catch that, either.

[moosehead]

well I sent an email to MS and they emailed me back wanting me to either go to a link they provided http://safety.live.com and scan, or to send a phone num and a time to call and they'll help me with it.

I tried booting up in safe mode and buggers!!! it comes up in Korean!! (which I can't read) - trying the various options tho doesn't help, it always goes back to Windows and the same stupid freakin' log on screen pops up - even tho I see my normal background for a couple of seconds first.

guess I'll have to do it over the phone w/them.

if anyone knows how I can boot up and bypass this screen I'd love to hear it.

[blackjack]

This normally works

boot in to safe mode, (the first one)

disable system restore (important)

run an antivirus (avg, avair avist)

run the anti spyware software (just download everything from cnet).

If this doesn't work then you will have to do a complete reinstall.