What"s Going On?

[kimincm]

HELP! Bought my first computer recently,as you will no doubt be aware by the end of this,go easy,please.

System runs NOD32,as purchased.Puttering happily around the I-net,shock,surprise,VIRUS ATTACK DETECTED. Windows Antivirus tells me I"ve got 87 varieties of Trogan virus at the door.

It comes from a remote computer (blaster/ssasser.variant),no idea about that.

Window A.V. tells me spyware,ads,spam and ads splashed before your eyes while on the I net.

Funny thing,NOD did not warn me and the only that kept jumping up every three minutes was Virus attack window telling me to just "CLICK HERE" and everything will be "just fine and dandy".

DUMMY me,I click.We can fix this little problem for you with one of our three package deals ranging from

$29.95 to $79.95,by the way,the only way I could get off the payment page was shutdown.

Sounds far fetched,but that"s how it happened.

Anybody know anything this? Oh yes, the three minute alerts have just stopped.

Trouble gone or bored warning me for the last three hours.

[surface]

Download adaware and spybot, install and run a full scan with both.

Download and install the firefox web browser.

In firefox, click on Tools, Add-ons, then search for and install NoScript. While surfing with firefox, you can then allow specific sites (i.e. sites you know/assume to be safe) to run scripts in your browser. Do not allow scripts globally, that will defeat the purpose.

Use firefox to browse the web from now since your still a bit green to be surfing with Internet Explorer.

[GungaDin]

Spybot

http://www.download.com/Spybot-Search-Dest...4-10122137.html

Make sure you update it before running it, take your time and follow the instructions.

Ad-aware

http://www.download.com/Ad-Aware-2008/3000...cdlPid=10844457

same deal.

All free.

AVG free is good, but it might conflict with Spybot, try it after you have run Spybot.

http://www.download.com/AVG-Anti-Virus-Fre...cdlPid=10880275

Let us know how you get on.

[kimincm]

Spybot

http://www.download.com/Spybot-Search-Dest...4-10122137.html

Make sure you update it before running it, take your time and follow the instructions.

Ad-aware

http://www.download.com/Ad-Aware-2008/3000...cdlPid=10844457

same deal.

All free.

AVG free is good, but it might conflict with Spybot, try it after you have run Spybot.

http://www.download.com/AVG-Anti-Virus-Fre...cdlPid=10880275

Let us know how you get on.

[kimincm]

Thanks surface and GungaDin,have run Spybot 43 errors destroyed and Adaware 243 infections deleted. BUT the Windows A.V. window still keeps jumping up every 2-3 mins, it recognises 0 threats but recommends I purchase against future attacks,my only attack at present is thier continual attack of the desktop.

I imagine I have to uninstall but being very green this is something I"m not up on for on,from fear of doing some harm.

Everything seems to be running fine,when I can see it.

THANKS.

[Guest Reimar]

It's your "unpaid" Virus program which creates the problems! That problems would be gone after to purchase the prog!

It's nothing else as scamming!

Without to sit in front of your computer is quite difficult, if not impossible, to tell you how to get that prog out. Best solution, in my point of view for an computer newbie would be to do a clean new installation of the whole system, which means also formatting of your hard disk! Maybe you let some shop do that for you for a small fee and you tell them to just install nothing else than the progs you list for them.

For anti virus I suggest to use Avast Home, which is free and excellent. Spybot Search and Destroy is fine too. Also use Advanced Windows Care (you can download from this forum's Download) for to keep yous system clean

If you don't know what other software you should use, give us an idea what you like to do with your computer and you'll get a lot infos.

Cheers.

[baco]

I had the same problem download malewarebytes from malewarebytes.org

install, then update and then run the quik scan and follow the instructions.

helped me.

good luck

[Cuban]

Best solution, in my point of view for an computer newbie would be to do a clean new installation of the whole system, which means also formatting of your hard disk! Maybe you let some shop do that for you for a small fee and you tell them to just install nothing else than the progs you list for them.

With all due respect this is a little extreme.

GungaDa's post is spot on.

It may be a little pain to work arround the pop-ups asking for money in return for stopping the pop-ups - but it is possible to close the offending pop-up window - often this pop-up window will not offer any _ [] or [x] in the top right corner to 'help' you get rid of the interuption. If the pop-up is the active current window - you can use the keyboard buttons "Alt" which is just to the left of the Space bar and while the "Alt" button is pressed down, press the F4 button on the top row of the keyboard. This combination tells windows to close the current window or application.

As this is your first computer - I suggest you experiment a little.

I have seen this sort of thing on other Thai built systems here - normally comes in on the back of 'helper' stuff someone has downloaded from one of the social networking sites popular in Thailand. Threaten to sack the staff that did that on one of the office PCs - they were shocked I could tell who did it and when - file time stamps!

I've seen one version that shows a pop-up picture - it is an animation of an anti-virus application working that reports the infected files etc. with a click me icon off to a pay site - pure con.

Do not dispair - this is not a serious problem - take an hour or so to get it sorted out.

If no joy - PM me.

[Guest Reimar]

Best solution, in my point of view for an computer newbie would be to do a clean new installation of the whole system, which means also formatting of your hard disk! Maybe you let some shop do that for you for a small fee and you tell them to just install nothing else than the progs you list for them.

With all due respect this is a little extreme.

GungaDa's post is spot on.

It may be a little pain to work arround the pop-ups asking for money in return for stopping the pop-ups - but it is possible to close the offending pop-up window - often this pop-up window will not offer any _ [] or [x] in the top right corner to 'help' you get rid of the interuption. If the pop-up is the active current window - you can use the keyboard buttons "Alt" which is just to the left of the Space bar and while the "Alt" button is pressed down, press the F4 button on the top row of the keyboard. This combination tells windows to close the current window or application.

As this is your first computer - I suggest you experiment a little.

I have seen this sort of thing on other Thai built systems here - normally comes in on the back of 'helper' stuff someone has downloaded from one of the social networking sites popular in Thailand. Threaten to sack the staff that did that on one of the office PCs - they were shocked I could tell who did it and when - file time stamps!

I've seen one version that shows a pop-up picture - it is an animation of an anti-virus application working that reports the infected files etc. with a click me icon off to a pay site - pure con.

Do not dispair - this is not a serious problem - take an hour or so to get it sorted out.

If no joy - PM me.

If the OP is an Newbie as told from him, than it's not extreme. Maybe you think back to the time you started! You hadn't know much too I believe, if you not one of that humans claiming to be perfect! The last I wouldn't start arguing with!

Cheers.

[Cuban]

The last I wouldn't start arguing with!

Not arguing mate - but the OP said it's their first computer. This is a Thai forum so reasonable to assume that the OP is sitting at home with a system bought for 15,000 baht or so - no support documents - iffy install of Windows XP and no OEM install / repair CDs. Little experiance of such fake anti-virus con ticks and the desire for an understandable quick fix.

Those are the goal posts that have been set - you are suggesting digging up the grass and starting again.

If the OP is an Newbie as told from him, than it's not extreme.

The problem he is suffering does not warrent formatting the HDD and installing everything from scratch - I'm sorry if you feel that is the only solution but it is not.

I would suggest that the task of reinstalling the OS is currently beyond what a 'newbie' should be advised to do, without a bit more support in relation to having a means to carry out a clean boot - install an OS and programs to get him back to where he is now.

Maybe you think back to the time you started!

Yes - indeed all of us that have been playing with computers since they began will have learnt through from, system reset pulse from PSU stable flag to Program Counter = 0000, read instruction, PC = PC +1 etc. Even coding PICs is more akin to Excel than coding in Hex these days. If the OP does not feel happy doing a ground up install, why on earth should he be advised it's the solution.

With a rouge application popping up a message on your computer in front of you now - will you reach for the Windows/Linux install disks or clean/remove the offending item ?

You hadn't know much too I believe, if you not one of that humans claiming to be perfect!

I can't read any such implication in my post in this thread.

I have broad computing experiance (as I expect you and others here have) and an understanding of the OPs situation - I'm happy to learn from others including your posts on computing issues etc. However I don't think that 'wipe and reinstall' is the correct approach to this particular problem.

[kimincm]

A BIG THANKS to all who"ve made a comment on my drama. Firstly a couple of direct relies

GungaDin---All downloads you recommended went fine,two things arose,firstly AVG antivirus didn"t want to instal while I was running an antivirus program,no problem I just put this on hold.

Confused in Spybot,told me errors had been destroyed but still there were still problems in

start up programs "add ons." the window asked me, "allow change" or "disallow change".

The confusion,I could look real stupid here but it won"t be the first or last time, so soldier on. Does

"allow change" mean I" allow" the change found to exist or I "allow" Spybot to make changes to these programs.

Cuban---You"re right,no exit if you go to the "we can help you" page, you"re also right about experimenting I have learn"t a lot in the last couple of days.

Reimar---Your right if all fails.

baco---All hasn"t failed yet, we"ve got your suggestion and as soon as this is posted I"m running with it.

THANKS

[kimincm]

baco. had a look around malewarebytes.org as you suggested,could you be abit more specific about program name,malewarebytes in search box,no results.

Thanks.

[Guest Reimar]

The last I wouldn't start arguing with!

Not arguing mate - but the OP said it's their first computer. This is a Thai forum so reasonable to assume that the OP is sitting at home with a system bought for 15,000 baht or so - no support documents - iffy install of Windows XP and no OEM install / repair CDs. Little experiance of such fake anti-virus con ticks and the desire for an understandable quick fix.

Those are the goal posts that have been set - you are suggesting digging up the grass and starting again.

If the OP is an Newbie as told from him, than it's not extreme.

The problem he is suffering does not warrent formatting the HDD and installing everything from scratch - I'm sorry if you feel that is the only solution but it is not.

I would suggest that the task of reinstalling the OS is currently beyond what a 'newbie' should be advised to do, without a bit more support in relation to having a means to carry out a clean boot - install an OS and programs to get him back to where he is now.

Maybe you think back to the time you started!

Yes - indeed all of us that have been playing with computers since they began will have learnt through from, system reset pulse from PSU stable flag to Program Counter = 0000, read instruction, PC = PC +1 etc. Even coding PICs is more akin to Excel than coding in Hex these days. If the OP does not feel happy doing a ground up install, why on earth should he be advised it's the solution.

With a rouge application popping up a message on your computer in front of you now - will you reach for the Windows/Linux install disks or clean/remove the offending item ?

You hadn't know much too I believe, if you not one of that humans claiming to be perfect!

I can't read any such implication in my post in this thread.

I have broad computing experiance (as I expect you and others here have) and an understanding of the OPs situation - I'm happy to learn from others including your posts on computing issues etc. However I don't think that 'wipe and reinstall' is the correct approach to this particular problem.

Red,red,red,red:Cuban, I didn't meant that, it was just a site note to those who claiming to be so!

***********************

I don't have a problem with you suggestion but maybe I think a bit different! As an Computer Newbie with an new Computer, I like to work with it, me think(!) and not have to start to figure out problems I don't know how to handle! And I still think that the easiest way for tho OP to get the computer back working normal, would be my suggestion!

Hour many time is past already since that problem start's?! How much time will be need more for to solve the problem?! I don't mean your time or mine! Try to see that problem with an view as Newbie.

Cheers.

[bartender100]

It sounds like you have this virus Spyware.IEPass.thief its common at the moment, i just got rid of it on my nephews laptop. Spyware Doctor did the trick, but that is not a free virus protector.

But, if you PM me i can tell you where to find it for fr**

[kimincm]

People,people,let"s lighten up,please.

I"m in Thai on retirement visa,I"ve got time to burn and boredom to match.

In my last posting I asked a question about Spybot maybe it sounds silly but it"s real to me,anyone like to comment on it.

THANKS again.

[katana]

Windows Antivirus tells me I"ve got 87 varieties of Trogan virus at the door.

It comes from a remote computer (blaster/ssasser.variant),no idea about that.

Window A.V. tells me spyware,ads,spam and ads splashed before your eyes while on the I net.

Funny thing,NOD did not warn me and the only that kept jumping up every three minutes was Virus attack window telling me to just "CLICK HERE" and everything will be "just fine and dandy".

DUMMY me,I click.We can fix this little problem for you with one of our three package deals ranging from

$29.95 to $79.95,by the way,the only way I could get off the payment page was shutdown.

Sounds far fetched,but that"s how it happened.

Anybody know anything this? Oh yes, the three minute alerts have just stopped.

Trouble gone or bored warning me for the last three hours.

Windows Antivirus seems to be a rogue anti malware tool.

Looking on Google there seem to be sites giving instructions on how to remove it:

eg

http://www.2-spyware.com/remove-windows-antivirus-2008.html

[baco]

here is a link where you can download malwarebytes

http://www.download.com/1770-2001_4-0.html...htype=downloads

download install then update and then first run quick scan and follow the instructions

succes

[Indi]

With respect , what Reimar suggests (total format/ reinstall) is quickest/best option for this so called "Windows Antivirus" XP Antivirus 2008/2009" etc" which are ALL pure malwares(very difficult to remove/ cure totally).

You can use Google and get hundreds of sites telling you they have the cures for it - over half of them are suspect sites themselves. How will you know ? I suggest you visit this forum and post your HJT logs there(its FREE of charge service, slow but FREE) :

http://www.bleepingcomputer.com/forums/forum22.html

Indi

[kimincm]

here is a link where you can download malwarebytes

http://www.download.com/1770-2001_4-0.html...htype=downloads

download install then update and then first run quick scan and follow the instructions

succes

baco Right now,your the MAN.Success.

Next step installation AVG Antivirus, doesn"t recommend instillation while NOD32 running

Uninstal or can I turn it off to the satisfaction AVG?

It really is pleasure to be able to see the screen all the time.

Thanks everybody for the input.

[baco]

not forget to do also a full scan

[katana]

Next step installation AVG Antivirus, doesn"t recommend instillation while NOD32 running

Uninstal or can I turn it off to the satisfaction AVG?

It's normally not a good idea to run 2 antivirus softwares at the same time, since they can conflict and make you less secure. So choose one only.

[Thanh-BKK]

Hi

I would NOT recommend AVG - during the last week i had the pleasure to fix THREE laptops which each had not just one but quite a bunch of nasties despite having updated AVG on them. Avast! however found each of the viruses.

Next, this "Windows AntiVirus" is NOT an "anti" virus, but actually a virus! It is harmless, does not destroy any data - but pretends your computer is infected with a ton of stuff that's not really there. It may even look like (!!!) your computer is freezing/crashing (BSOD) however that is a SCREENSAVER (!!!!!) which can not be changed because the menu has been disabled!

I've done one machine with that crap on it and it is tricky indeed, very tricky, to revert changes that virus makes - for one, it disables the screensaver and the wallpaper menus (that message you see on the screen is not an actual message that you could click, but a wallpaper!) and also it disables running regedit!

Regedit is required to do a whole bunch of registry hacks which in turn take control away from the virus and back to the user, i do not recommend anyone attempting this who never done it - better backup your data (if any) and do a reformat/reinstall. It took me about one hour to get that computer back to normal, and i know a thing or two about viruses. By the way that one was running AVG as well.

Advice: if you suddenly, while surfing the web, see a thing popping up informing you you "may have spyware/viruses" and invites you to "click here to check your computer", DO NOT CLICK THAT !!! Same goes for "click here to check for performance problems" or ANYTHING "click here". D_O N_O_T C_L_I_C_K ! ! !

If you have your very first computer and maybe don't have any experience with them yet, better ask someone "in the know" to install a Linux-type OS for you. For you as a "computer newbie" Linux is as easy (or difficult) to learn as Windows, but one thing for sure - THAT kind of crap does NOT happen on Linux.

Best regards.....

Thanh

[AsiaCheese]

Quick side-note: Microsoft & some US authorities are mounting an attack on "scareware" companies like the one mentioned (i.e. companies claiming to "analyze" your computer to find viruses, spyware, adware etc., and when running their stuff claiming they've found xxx nasties, but you have to buy their useless stuff for $$$ to "remove" the nasties...).

Always stick to the "proper" stuff: get yourself Avira (http://www.free-av.de/) -- there's a free version which is good, and pay versions that do more. Or invest around US$ 50/year and get Kapersky's antivirus solution -- by far the best I know (doesn't bog down your system like Norton, which also tells you to go sit in a corner while it's taking over your brain...). I use both, one on a notebook, the "expensive" one on the bigger "non-fun" machine. Over many years, I've had 1 (in words: one) virus for which I had myself to blame, and eradicating it cost me a week's effort and lost data...!

Never ever click an "Ok" button that pops up from something you don't know/trust...

[kimincm]

Hi

I would NOT recommend AVG - during the last week i had the pleasure to fix THREE laptops which each had not just one but quite a bunch of nasties despite having updated AVG on them. Avast! however found each of the viruses.

Next, this "Windows AntiVirus" is NOT an "anti" virus, but actually a virus! It is harmless, does not destroy any data - but pretends your computer is infected with a ton of stuff that's not really there. It may even look like (!!!) your computer is freezing/crashing (BSOD) however that is a SCREENSAVER (!!!!!) which can not be changed because the menu has been disabled!

I've done one machine with that crap on it and it is tricky indeed, very tricky, to revert changes that virus makes - for one, it disables the screensaver and the wallpaper menus (that message you see on the screen is not an actual message that you could click, but a wallpaper!) and also it disables running regedit!

Regedit is required to do a whole bunch of registry hacks which in turn take control away from the virus and back to the user, i do not recommend anyone attempting this who never done it - better backup your data (if any) and do a reformat/reinstall. It took me about one hour to get that computer back to normal, and i know a thing or two about viruses. By the way that one was running AVG as well.

Advice: if you suddenly, while surfing the web, see a thing popping up informing you you "may have spyware/viruses" and invites you to "click here to check your computer", DO NOT CLICK THAT !!! Same goes for "click here to check for performance problems" or ANYTHING "click here". D_O N_O_T C_L_I_C_K ! ! !

If you have your very first computer and maybe don't have any experience with them yet, better ask someone "in the know" to install a Linux-type OS for you. For you as a "computer newbie" Linux is as easy (or difficult) to learn as Windows, but one thing for sure - THAT kind of crap does NOT happen on Linux.

Best regards.....

Thanh

Only yesterday everything was fine,don"t get me wrong,everything seems fine,one thing though, every time I want to shut down,what"s sitting on top of the shut down tab,a Windows Antivirus logo.

The standby tab is blacked out,so I have,shutdown++or restart. Spybot-no problems,ADAdaware-no problems,but something is hanging around.I guess we"ll see what we see.

[GungaDin]

Hi

I would NOT recommend AVG - during the last week i had the pleasure to fix THREE laptops which each had not just one but quite a bunch of nasties despite having updated AVG on them. Avast! however found each of the viruses.

Thanh

AVG free

• Popularity: #1 in Antivirus Software (out of 298 products)
  

• Editor's Rating: 5.0 stars
  
• Average User Rating: 4.0 stars (out of 16,360 votes)
  
• Downloads: 129,755,727 users can't be wrong!
  

Nothing wrong with Avast, either!

Edited September 29, 2008 by GungaDin

[monkfish]

First try system restore!

This will restore your computer to a previous date before you got the virus.

Choose a date before you got the virus though!

The simple solution

[Thanh-BKK]

Hi

I'm not damning AVG, i just have repeatedly had to fix machines where AVG just plain failed - or, in two instances, where AVG itself actually became the problem by seeing "viruses" where there were none - in legitimate applications such as Nero, MSN messenger or, as funny as it sounds, in itself! That was some botched update which did that stunt.

And of course, newest viruses won't be caught by yesterday's AV update, however the ones that slipped through AVG were picked up by Avast... which i don't think updates much quicker.

Norton, btw, also couldn't catch the last ones, and did NOT find ANY of the thumb-drive nasties (AdobeR.exe! That b!tch! It was found by Avast and AVG).

And i have to admit, having used Windows from 1998 to 2008 (a full ten years), i had one single virus, but that one for real - wiped out 15 gigs of data by overwriting the whole HDD with gibberish, that was on Win98 and came through IRC chat - on a machine that was on and online 24/7 without any form of protection Ever since i used Norton, stuck with the 2003 version later (least intrusive!), tried AVG and then Avast and then stuck to that (easiest on Vista). However since a few months now i'm full time on Linux and only care that i don't "click here" when i'm invited to do so

Best regards, and virus-free computing......

Thanh

[GungaDin]

Thanh.

I'd like to run Avast, but it conflicts with AVG.

When I did run it, it updated itself 3 times a day.

----------

A couple of tips for the OP...

1. Never open email from sources you don't know.

2. use Gmail to filter out the <deleted> but don't rely on it too much.

3. NEVER go to porn sites.

4. NEVER download a zip file from LimeWire.com (music)

Happy surfing.