Warning

 

Close

Confirm Action

Are you sure you wish to do this?

Confirm Cancel
BCM
User Panel

Site Notices
Posted: 9/18/2009 8:31:28 AM EDT
Last week I got an email that gave me a virus. A virus blocker company came on and pretty much stole my computer. I had to buy the anti spy ware, and virus remover package from them to get their pop ups to stop comming on every few seconds. I called my credit card company and had the charges dropped.



Now my computer has a pop up about worms in my computer poping up every few seconds, and my window shot off onit's own now. 2nd time typing this as it shut off while I was in the middle of it.



I'm posting in stages now so I don't lose it all again.



I tried to deleat it with my control panel, but the golden sheild logo in my icons srction is not in the control panel so I don't know how to get rid of it.



Also I have the sound track from some TV show running on my computer randomly, with no way to shut them off without turning my my computer off.



What the fricken heck can I do to fix my pc?
Link Posted: 9/18/2009 8:35:19 AM EDT
[#1]
First thing is to find out what virus it is.

You can download HIJACK THIS tool and run a "report" only. This report will tell you whats loaded into your system.

http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html


Be very careful with this tool as it can and will remove anything you tell it to. Needed or not.

You can post the report here if you want and I can try and help you find out what it is.



Link Posted: 9/18/2009 8:37:28 AM EDT
[#2]
Your "virus blocker" is actually malware.  There's a special place in hell for companies like that.
Link Posted: 9/18/2009 8:43:17 AM EDT
[#3]
System restore turned on?





I dont really like system restore, but it may be worth a shot.
Link Posted: 9/18/2009 8:44:20 AM EDT
[#4]
format hard drive , cancel that card since they will be using it for some scams...
Link Posted: 9/18/2009 8:47:28 AM EDT
[#5]
That company whose ad your see on your desk top is the person who infected your computer.

Holy shit, I can't believe you paid them money.  Better change your credit card number asap.

I had that same bullshit virus a year ago, major pain in the ass to get rid of.

Good Luck
Link Posted: 9/18/2009 8:47:36 AM EDT
[#6]
you did what?

ZOMGWTFBBQ!!!

you never give those guys your CC number!

format c: is the only way to be sure of cleaning the system..
Link Posted: 9/18/2009 8:52:53 AM EDT
[#7]




Quoted:

format hard drive , cancel that card since they will be using it for some scams...


Card canceled, just got off the line with them. Thanks for all the help Arfcom.

Link Posted: 9/18/2009 8:54:23 AM EDT
[#8]
Quoted:
format hard drive , cancel that card since they will be using it for some scams...


Yep. Nuke the site from orbit, only way to be sure.
Link Posted: 9/18/2009 8:55:23 AM EDT
[#9]
Mt tabs keep shutting down.




This thing is now moved onto opening tabs at weird locations on it's own now.
Link Posted: 9/18/2009 8:56:02 AM EDT
[#10]




Quoted:

format hard drive , cancel that card since they will be using it for some scams...




How do I format hard drive?
Link Posted: 9/18/2009 9:00:09 AM EDT
[#11]




This is the link to a site that keeps opening it's self on my computer.
Link Posted: 9/18/2009 9:04:46 AM EDT
[#12]



This is the link to a site that keeps opening it's self on my computer.[/quote]

Please don't hot link a site that you already know is infected in some way

edit removed link
Link Posted: 9/18/2009 9:07:04 AM EDT
[#13]
Sorry, I didn't hot link it, I just copied the link is there a way to cold link it?
Link Posted: 9/18/2009 9:07:12 AM EDT
[#14]
I am not sure what is the distinction between malware and virus, but here it goes.

Download Malwarebytes Anti-Malware from http://www.malwarebytes.org/
Link Posted: 9/18/2009 9:10:25 AM EDT
[#15]




Quoted:

I am not sure what is the distinction between malware and virus, but here it goes.



Download Malwarebytes Anti-Malware from http://www.malwarebytes.org/


I down loaded it, now what do I do?

Link Posted: 9/18/2009 9:13:56 AM EDT
[#16]
Searcherfortruth,


You need to do a complete wipe and reinstall of your computer.


Now, it sounds like you aren't the most computer savvy person in the world.  We can walk you through it, but it might be better for you to contract a local guy to do it for you.


Not a dig on you.  I ain't the best accountant in the world, that's why i have someone else do anything more complex than two columns for me.
Link Posted: 9/18/2009 9:15:24 AM EDT
[#17]
Yeah.

If all of a sudden a program you didn't install pops up telling you your computer is infected and you need to pay them money to get rid of it, just hit the power switch.  If you click anything, it secretly installs its self.

ETA:

You might be able to get by doing this.

Download malwarebytes.

Then reboot into safe mode by restarting the computer and pressing F8 repeatedly immediately afterward.  You'll see a whole bunch of options.  Choose Safe Mode with Networking.

Then install malwarebytes.  You'll need to rename the executable because that virus runs a list of programs that it wont allow you to open.  Go to the Program Files folder, search for the Malwarebytes folder in there and rename mbam.exe to something like mbam2.exe.

Then double click that file and update it and run a thorough scan.  It should find that virus and other malware and allow you to nuke it from orbit.

Then reboot and see if that fixed the problem.

If you have a windows disc, check out this.  It builds a bootable CD packed with tons of great repair and diagnostic programs.  Next time you have trouble, just pop the disc in and boot from it.

And if you're surfing online and you see pop up dialog messages, don't click them.  They are probably scripts to install malware.
Link Posted: 9/18/2009 9:19:05 AM EDT
[#18]
Quoted:

Quoted:
I am not sure what is the distinction between malware and virus, but here it goes.

Download Malwarebytes Anti-Malware from http://www.malwarebytes.org/

I down loaded it, now what do I do?


Run it in safe mode.But what you caught may disable it or alter it's accuracy.
Link Posted: 9/18/2009 9:19:18 AM EDT
[#19]
Quoted:
Last week I got an email that gave me a virus. A virus blocker company came on and pretty much stole my computer. I had to buy the anti spy ware, and virus remover package from them to get their pop ups to stop comming on every few seconds. I called my credit card company and had the charges dropped.

Now my computer has a pop up about worms in my computer poping up every few seconds, and my window shot off onit's own now. 2nd time typing this as it shut off while I was in the middle of it.

I'm posting in stages now so I don't lose it all again.

I tried to deleat it with my control panel, but the golden sheild logo in my icons srction is not in the control panel so I don't know how to get rid of it.

Also I have the sound track from some TV show running on my computer randomly, with no way to shut them off without turning my my computer off.

What the fricken heck can I do to fix my pc?


This happened to my GF's computer.  Either you don't have a decent AV program, or you got duped by one of those popup windows that acts like it detected a virus and downloaded their "free scanner".  It was an orange and white shield in the system tray I believe.  Now, I'm pretty proficient in PCs, and I just could not get rid of that shit.  Start backing up pics, porn, documents - anything you don't want to lose - because you are probably going to have to wipe the hard drive...

Next time get a good AV program ( something with anti-spyware ), keep it up to date, and ignore anything that talks about possible virus infections unless you are certain it is your AV program that is telling you about it.  And forget free shit like Avast.  That's what my gf had and it shit all over it.
Link Posted: 9/18/2009 9:20:50 AM EDT
[#20]




Quoted:

Searcherfortruth,





You need to do a complete wipe and reinstall of your computer.





Now, it sounds like you aren't the most computer savvy person in the world. We can walk you through it, but it might be better for you to contract a local guy to do it for you.





Not a dig on you. I ain't the best accountant in the world, that's why i have someone else do anything more complex than two columns for me.


No offense taken, I know virtualy nothing about computers. I will take it in and have it redone!

Link Posted: 9/18/2009 9:21:24 AM EDT
[#21]



Quoted:


That company whose ad your see on your desk top is the person who infected your computer.



Holy shit, I can't believe you paid them money.  Better change your credit card number asap.



I had that same bullshit virus a year ago, major pain in the ass to get rid of.



Good Luck


This.



You got scammed.



 
Link Posted: 9/18/2009 9:22:49 AM EDT
[#22]
Sould I write down all my saved links in my favorites?
Link Posted: 9/18/2009 9:23:05 AM EDT
[#23]
Quoted:

Quoted:
I am not sure what is the distinction between malware and virus, but here it goes.

Download Malwarebytes Anti-Malware from http://www.malwarebytes.org/

I down loaded it, now what do I do?
Double click on the file that you just downloaded to install it.

If you get it installed, select the "quick scan," and click on the "scan" button about 3/4 down from the top, and let the "sucker" rip, it will probably take it awhile depending on the capacity of your C: drive. When it finishes seaching click on the button that says "remove." It should remove a whole bunch of stuff.

BTW: what virus blocking software are you using? And are be sure that all of patches to MS Windows OSand MS Explorer is current.

BUT DON'T UPDATE YOUR WINDOWS SOFTWARE UNTIL YOU CLEAR YOUR MACHINE OF VIRUSES
Link Posted: 9/18/2009 9:25:01 AM EDT
[#24]
Link Posted: 9/18/2009 9:26:58 AM EDT
[#25]
Quoted:

Quoted:
Searcherfortruth,


You need to do a complete wipe and reinstall of your computer.


Now, it sounds like you aren't the most computer savvy person in the world. We can walk you through it, but it might be better for you to contract a local guy to do it for you.


Not a dig on you. I ain't the best accountant in the world, that's why i have someone else do anything more complex than two columns for me.

No offense taken, I know virtualy nothing about computers. I will take it in and have it redone!


If you have anything on there you would not want your mother or wife to see you may get busted by the friendly local repair guy.
Link Posted: 9/18/2009 9:27:25 AM EDT
[#26]
Quoted:
Quoted:

Quoted:
I am not sure what is the distinction between malware and virus, but here it goes.

Download Malwarebytes Anti-Malware from http://www.malwarebytes.org/

I down loaded it, now what do I do?
Double click on the file that you just downloaded to install it.

If you get it installed, select the "quick scan," and click on the "scan" button about 3/4 down from the top, and let the "sucker" rip, it will probably take it awhile depending on the capacity of your C: drive. When it finishes seaching click on the button that says "remove." It should remove a whole bunch of stuff.

BTW: what virus blocking software are you using? And are be sure that all of patches to MS Windows OSand MS Explorer is current.

BUT DON'T UPDATE YOUR WINDOWS SOFTWARE UNTIL YOU CLEAR YOUR MACHINE OF VIRUSES


If this version of "Antivirus Pro 2009" is like the ones I've been hearing about, it's not going to let him install or run malwarebytes that easily.

I wrote what he should try to do in a post above.


HOLD IT OP, DON'T CALL THE LOCAL GEEK JUST YET
Link Posted: 9/18/2009 9:30:24 AM EDT
[#27]
Link Posted: 9/18/2009 9:34:30 AM EDT
[#28]
Quoted:
Now, it sounds like you aren't the most computer savvy person in the world.  We can walk you through it, but it might be better for you to contract a local guy to do it for you.


Especially considering that pulling yourself off the 'net usually helps to "calm the virus" while you get everything fixed. (well, that and if you have any other machines on a LAN with the infected machine, you run the risk of infecting them as well)
Link Posted: 9/18/2009 9:35:17 AM EDT
[#29]
Dude it's called MAL-WARE virus!

Download a program called "Spybot" it kills just about every computer virus known to man, it's FREE(Although they do ask for donations) constantly updated and even immunizes your computer against new ones or ones it has already removed.

An IT guy at local Computer shop put me on to them, like i said the best parts are :

1. FREE no cost download.

2. Kicks the living shit out of Norton's bogus protection.

Been usin' it for two years no complaints, the only thing is you have to keep it updated with further downloads when new defintions appear and run it manually it will not auto detect, you have to run it for it to scan the viruses and eliminate them.
Link Posted: 9/18/2009 9:36:57 AM EDT
[#30]
Link Posted: 9/18/2009 9:46:12 AM EDT
[#31]




Quoted:

Where in TX are you?


College Station

Link Posted: 9/18/2009 9:55:55 AM EDT
[#32]
tag for more arfcom wisdom
Link Posted: 9/18/2009 9:59:30 AM EDT
[#33]
You got a virus, and then you paid the virus maker to install more viruses.

Hopefully you learned to not ever do this again.

HIJACK THIS will definately get you on the right track, their forums are very helpful.

You can also try CC Cleaner, Ad-Aware, Trojan Remover, and Process Scanner.  All free and useful.  I'd download all of them and keep running them until they all come up clean.
Link Posted: 9/18/2009 9:59:54 AM EDT
[#34]
If this is the latest version of that particular virus, the only way you're going to get rid of it is to nuke your entire OS install.  Sorry dude.
Link Posted: 9/18/2009 10:04:22 AM EDT
[#35]
Quoted:
Dude it's called MAL-WARE virus!

Download a program called "Spybot" it kills just about every computer virus known to man, it's FREE(Although they do ask for donations) constantly updated and even immunizes your computer against new ones or ones it has already removed.

An IT guy at local Computer shop put me on to them, like i said the best parts are :

1. FREE no cost download.

2. Kicks the living shit out of Norton's bogus protection.

Been usin' it for two years no complaints, the only thing is you have to keep it updated with further downloads when new defintions appear and run it manually it will not auto detect, you have to run it for it to scan the viruses and eliminate them.
Get Spybot here straight from the official web site:
http://www.safer-networking.org/index2.html

Spybot also has a registery checker that advises you MOST but not all time when the registery is going be updated. If you are not installing any software, always click "DENY" if you get a message from Teatimer/Spybot.
Link Posted: 9/18/2009 10:13:07 AM EDT
[#36]
Again, what anti-virus software are you using, it is update to date?

I run AVG in "safe mode," and it wipes out a lot of tracking cookies and malware registery entries. You may have to run your AV software multiple times to clear out all of the viruses.

Also go to here and delete any temporary files:
(1) Go to C:\Documents and Settings\admin\Local Settings
(2) select the folder "Temp" by left clicking
(3) HOLD down the "shift" key and press "delete" key on your keyboard.(this will prevent any of the infected files to be deleted to your "Recycle" bin, and will instead be deleted immediately. Some viruses/malware are smart enough to look for those files in the recycle bin.)
Link Posted: 9/18/2009 10:17:54 AM EDT
[#37]
Quoted:
format hard drive , cancel that card since they will be using it for some scams...


Yes.  Cancel that credit card post haste.  Now.  Don't post again, don't think about it. Call your CC company and cancel that bastard now.  Tell them someone stole it if you have to.
Link Posted: 9/18/2009 10:18:07 AM EDT
[#38]
The only course of action left for you is to send this company your social security number and a signed/notarized power of attorney.

ETA: Contrary to popular belief, simply "formatting" the HDD does not necessarily get rid of the problem. You have to re-partition the drive in order to eliminate the possibility that the virus is resident in your partition table. This is not common but it does happen, and let me be the first to tell you how much it would suck to re-install your whole system only to find the virus was still there.
Link Posted: 9/18/2009 10:19:25 AM EDT
[#39]
I have had good success using SDFix and Combofix for these kinds of viruses.

But they're also good at defeating such countermeasures.  You may need to get out your Windows CD and erase your hard drive completely.
Link Posted: 9/18/2009 10:25:07 AM EDT
[#40]
I'm a NetworkAdmin guy.
What you described I've been dealing with on and off for the past few month.
Malwarebytes run in safemode, as suggested above, is your best bet.
Spybot is great normally but it didn't do it for me for this issue.

What concerns me the most is that you actually paid and installed(? )an additional program?
Is that true?
That might change things to the worse.
It might be treated as a "legitimate" program by Windows that antivirus and antispam programs will leave alone.
If you can go into "Add and remove programs" and uninstall what they told you to install before running Malwarebytes you might be lucky.

Honestly, if all you have on the PC is pictures and web links try to get them onto a CD and redo the computer.

If you're not that savy boot into mode and run malwarebyte (also run Windows update but the virus itself might not let you, kind of a catch22)


Good luck!
Link Posted: 9/18/2009 11:50:14 AM EDT
[#41]
Some viruses/malware will also disable the "system restore" function.

To re-enable this function:
(1) you must right click on "My computer," and select the "system restore" tabe.
(2) click on the "turn off System Restore (Disabled by Group Policy)"
Link Posted: 9/18/2009 9:52:47 PM EDT
[#42]
Unless hes already got something installed to get rid of it, then it may not let him install and use anything new. I have been done this road recently. It was a PITA, but I finally got it.




Close Join Our Mail List to Stay Up To Date! Win a FREE Membership!

Sign up for the ARFCOM weekly newsletter and be entered to win a free ARFCOM membership. One new winner* is announced every week!

You will receive an email every Friday morning featuring the latest chatter from the hottest topics, breaking news surrounding legislation, as well as exclusive deals only available to ARFCOM email subscribers.


By signing up you agree to our User Agreement. *Must have a registered ARFCOM account to win.
Top Top