Warning on Malware

HornyHenry

Horned Toad
Joined
Apr 20, 2004
Posts
1,664
Do NOT go to W E B S E X WORLD.COM and click on anything there!
Besides having popups you can't get rid of, a video I clicked on yesterday contained one of those nasty, fake anti-virus programs. You know the kind: It says you are infected and it is running a scan for you. Just "Click here" to remove the viruses. Most of you know never to click ANYWHERE on these popups, but this one even blocked CTL-ALT-DEL Task Mgr from working.
It puts a file in your Programs folder and one in your Registry in HKLM/Software/Windows/Current Version/Run that has some name like akjhashd.exe or puqeriu.exe -Could be any letters. This will start it up each and every time you start your PC!
The program is "avscan.exe"
And I have good AV and Malware programs and firewalls in my PC!
(Yeah, I know, how good could they be?)
So this must be pretty bad to get past my protection efforts.
I know what to do, but the average user would not, so
DON'T EVER GO TO THAT SITE, no matter how tempting.
And thanks to Manu and the Lit crew for protecting us so well!:heart:
 
Last edited:
I've gotten those fake anti virus popups twice and both times had the presence of mind to yank the electric cord out of the socket immediately.
 
If you don't like your computer, that would work

I've gotten those fake anti virus popups twice and both times had the presence of mind to yank the electric cord out of the socket immediately.

But it's too late by then. You still have to get rid of it later.(If your PC isn't hosed)
I have a thing on my desktop that lets me shutdown if something like this happens.
Then you can to to SAFE mode, or restore to a previous time.
 
But it's too late by then. You still have to get rid of it later.(If your PC isn't hosed)
I have a thing on my desktop that lets me shutdown if something like this happens.
Then you can to to SAFE mode, or restore to a previous time.
I had to have a wizard come fix the damn thing.
 
[rant]

If you own a computer, you need an antivirus program that self updates and active protection, an antimalware program that you keep updated at least weekly and scan weekly, antimalware patching program(s), and good surfing habits. Also the only use for IE is to download a different internet browser, like Mozilla Firefox, Google chrome, etc.

Most of your malware comes from using sites like myspace and facebook. That's not to say they're bad sites, but its the features. All the features and third party crap you can do with social networking sites leaves giant holes to be exploited.

I do tech support for work and malware repair as a hobby and it just amazes me the amount of people that do not have basic virus protection, yet use their computers for things like online banking bill payments, taxes and every other thing that relates to your personal information.

If you're one of these people, and no offense is meant to you if you are, you might as well empty your bank accounts into mine and save your self some time and frustration wondering what happened when (not if) you discover someones cracked your personals.

[/rant]
 
Last edited:
[rant]

If you own a computer, you need an antivirus program that self updates and active protection, an antimalware program that you keep updated at least weekly and scan weekly, antimalware patching program(s), and good surfing habits. Also the only use for IE is to download a different internet browser, like mozilla firefox, google chrome, etc.

Most of your malware comes from using sites like myspace and facebook. That's not to say they're bad sites, but its the features. All the features and third party crap you can do with social networking sites leaves giant holes to be exploited.

[/rant]

I do tech support for work and malware repair as a hobby and it just amazes me the amount of people that do not have basic virus protection, yet use their computers for things like online banking bill payments, taxes and every other thing that relates to your personal information.

If you're one of these people, and no offense is meant to you if you are, you might as well empty your bank accounts into mine and save your self some time and frustration wondering what happened when (not if) you discover someones cracked your personals.
I have all that shit except good surfing habits.
 
I don't know how the people who create those things sleep at night ,& how do they not get their asses sued?
 
Actually 9 times out of 10 you downloaded the program yourself and agreed to what it did to your computer without even realizing it.
 
Kind of like how the people who own the news companies also make missiles?

More like how the people who demand money every week to protect your business from vandals are also the ones riding around at night throwing cinderblocks through the plate glass.
 
real quick, wiki has good info on malware http://en.wikipedia.org/wiki/Malware

Like I mentioned above, the majority of stuff comes from using social networking sites. Its not specifically facebook or myspace that puts the crap on your computer, but the third party add-ons. Facebook and myspace and any other social networking site guarantees nothing when you use third party add-ons and software for the exact reason that some are used for the exact reason of putting malware on your computer. When you click on the link or whatever way you get this third party add on you've already basically agreed that you want whatever it is you want to work on your facebook or myspace, whatever. That includes any cookies that are needed to make it work, any temporary files each time you access it, any software your computer needs to be compatible with the third party add=ons. Also when you go to a website most have a terms of use that go along with them. The majority of the time they're basic stuff that really doesn't matter in the long run. It is the same kind of thing. They're only responsible for their site. You click an ad, its their problem not the website. Get redirected off the site from a link, we aren't responsible for the content and the anal rape your computer will experience.

The other way is people using file share software like limewire. The most popular use of file share software has been music sharing. First and foremost its illegal. I won't start up the debate on that, but I mention it because you mentioned that people putting junk on your computer should be illegal and suable, and it is. However if you're a music sharer, its kind of hard to start a lawsuit when you were first and foremost in the wrong.

The problem with file sharing software is you have no idea what you are downloading, for the most part, until you download it. With file sharing software that I've seen and used (legally I might add, RIAA doesn't have shit on me) it tells you the extention type, the size of the file, and the name the person put on it. its easy enough to tell an mp3 file is an mp3 file. However most file share is now folders and compression because of speed and bandwidth issues. If you only know you're downloading a folder, you have not a clue whats in it until downloaded and by that time, you're computer is already crashed.

With better torrenting software the problem of file types is removed, somewhat. I use uTorrent and whenever its assigned a torrent file it will display everything on that torrent and lets you filter what you want and don't want. Doesn't help if the file in the torrent is compressed but that's what your virus scanr and malware scan software is for before decompressing.
 
I've gotten those fake anti virus popups twice and both times had the presence of mind to yank the electric cord out of the socket immediately.

Not really a good Idea, if it installed anything on your computer, rebooting is the best way to get it into your registry. After all one of the steps you need to do when you install any program or update it is restart your computer for it to make the necessary changes.

What I have done in the past and has worked; when I see one of those pop ups is to FIRST disconnect from the internet.

My Dell has a physical switch on the side to do this or right click the internet icon in the task-bar in the lower right corner and do it .

Then run your AV software to check for problems.

I figured this out after paying 99.00 to have one removed.

Essentially they are like Vampires; they can't come in unless you invite them, by clicking on something in their screen, or downloading shit when you know better.
Anyhow it worked for me twice, so until it stops working it is the best advice I got
 
Things like this get past your security because they don't name them the same each time. It assigns random characters at times to the names of the files, so your viral software, though updated regularly, cannot find it. You should have something that stops every action on your computer without approval.

A1eyeblind, they get you like that, they are getting very good. If you pay them, most of the time they do remove the malicious software THEY put on your computer. But in a few months, they'll do it again, saying you need to upgrade. OR they just steal your CC number. I hope you called your CC company and disputed the charge.
 
Things like this get past your security because they don't name them the same each time. It assigns random characters at times to the names of the files, so your viral software, though updated regularly, cannot find it. You should have something that stops every action on your computer without approval.

A1eyeblind, they get you like that, they are getting very good. If you pay them, most of the time they do remove the malicious software THEY put on your computer. But in a few months, they'll do it again, saying you need to upgrade. OR they just steal your CC number. I hope you called your CC company and disputed the charge.

I didn't pay them...I went through my AV software co. It is not their fault if you download it, which is what happens when you click anything on their screen. If you download it you essentially give it permission to install on your computer...

As I said I avoided the whole thing at later times by disconnecting from the internet, then to be on the safe side running AV scan.

They get past your security because you download it, clicking on their screen.
 
Last edited:
Here's some good advice: don't use Internet Explorer at all.

It has some serious holes. Use one of the other browsers. They aren't entirely safe, but for the most part they're better.

I've been rootkitted twice; both times through IE. That doesn't mean it can't happen through other browsers, but just that I haven't seen it, yet.

Safe Mode was of no use, because the virus had made itself an essential part of the system that Windows loads in Safe Mode.

I'd built the computer without a floppy drive, thinking it wasn't needed, so I had to break it open, hook up a floppy drive, and boot from a DOS disk with an operating system that could read NTFS. (I actually found such a thing on the Internets... hell of a deal!) From there, I was able to delete the system driver that was loading before Safe Mode, boot to Safe Mode, and take care of business.
 
Back
Top