At my parents house and Ive screwed up their computer. Im not sure what their virus protection is but theyve got like 4 of them on the front screen. I ran "Trend Micro Antivirus" and removed all threats but Im still slow and getting this "Security Shield" anti virus spamming the hell out of my browser. I cant seem to get rid of it.
Any suggestions? Your help is much appreciated.
try trend micro's house call from their webpage. (i'm going to go out on a limb and suggest not using IE anymore. see if switching to Chrome makes things work better)
if that doesn't work, i usually boot from a Linux thumbdrive and scan with AVG for Linux. that's kind of a last resort though, especially if you aren't a Linux person. mounting the Windows partition can be a bit hairy
Its a nasty nasty malware. It is correctable, google it. Lots of work involved. It hit another home computer while we were out of town and our housesitter's daughter went somewhere, did something to get it. In fact if I remember correctly, researching it they ask you to send all sorts of personal information so dont fall for that, identity theft is part of their scam. I know it took some "hacking" to completely rid the computer of it.
Posse Sharpshooter
here are some instructions. just ignore the ads
http://www.bleepingcomputer.com/viru...ecurity-shield
it always helps to have a working computer working along the infected one...
Stopzilla?Originally Posted by yermom
here are some instructions. just ignore the ads
http://www.bleepingcomputer.com/viru...ecurity-shield
it always helps to have a working computer working along the infected one...
I talked to a technician and he said its already gone in and changed settings on the computer? Is this bc they dont have virus control?
What is the point of these things? Do they actually think by infecting the computer you'll buy something? Identity theft?
Ok nevermind. I found it. I'll give it a try tomorrow. Thanks guys.
Last edited by Blue; 2/9/2011 at 02:31 AM.
some people are used to having AVG or McAfee pop up and ask for money
basically i just don't install anything that pops up. if i want to install it, i go to their site and download/install it. otherwise bad ****e can happen
of course, that's if your browser asks...
rkill.com and malwarebytes on a flash drive
boot safe mode with networking
run rkill
run malwarebytes (have it run the update, then do a full scan)
use malwarebytes to remove all the badstuff
then go into internet settings, click connection tab, click lan settings, uncheck proxy server. Click OK
reboot
The above has been successful for every version of fake antivirus I've run across.
interesting. i've never heard of rkill before
here some some more info:
http://www.technibble.com/rkill-repa...l-of-the-week/
The larger question here: Why does every computer you touch go up in flames?
"Always" and "never" are words that should always be used sparingly and never without forethought. You're welcome.
I've seen a virus pop up an AVG looling page that when you click on it it pops up another thing asking if you want to install this software to fix the computer. Since AVG never handles things like that I ran a scan of the entire computer. Nothing. I figure all it was was a pop up that basically is asking if you'd like to download a nice virus to save your computer...lol. I'd like to be able to use the Patroit Act and some Govt resources to find people like this.
Some of this new stuff prevents Malwarebytes from running, although you can trick up a copy of Malwarebytes and that will work, but you can always run HijackThis from safe mode. That's what I'd do first.
rkill.com kills the fake avs so you can run malwarebytes.
The avs don't prevent it from running since its a .com instead of a .exe
I've had to remove that crap from my mother *and* mother-in-laws PCs. Plus tons of other sh!teware.
I've gotten so tired of fixing their machines that I've offered to pay 25% of the price if they'll buy Macs.
The SF.com Retard Remover...it makes the postards you have on ignore disappear completely:
http://173.203.71.50/sfcom_retard_remover.user.js
Get a Mac.
No more virus.
That's what I always want to say in these threads but I don't want to be that annoying Mac fanboy. But since we switched to Macs in 2009 we've been so much more productive and our internal IT costs have disappeared. They've paid for themselves many times over.
The SF.com Retard Remover...it makes the postards you have on ignore disappear completely:
http://173.203.71.50/sfcom_retard_remover.user.js
Yeah, the whole fanboy thing is annoying, but Macs are surprisingly maintenance free. I'd be out of a job if everyone used them.
Then again, the oxymoron is if everybody used them, I'd have a job because they'd be subject to attack constantly. And I'd use a PC.
Everybody talks about how expensive they are, but when you look at TCO of a mac versus a PC, they are almost always cheaper. It doesn't surprise me that your IT costs are lower now.
Macs don't make sense for most large businesses. The only way those businesses could get away with Macs is to run RDP sessions from their macs to a Windows terminal service, which makes for impossible TCO arguments in favor of Macs.
Blue's parents might not have to worry about that
i do find it pretty handy to at least have one Windows box around somewhere though
also check your registry for anything that says sysguard.exe and delete it (it may say trojansysguard or something else, but the sysguard.exe is the process that is hijacking your registry).
There's few things in the world that can't be fixed by the liberal application of duct tape.
Those who say winning isn't everything are the people you want to play against.
Posting Permissions
