Smith & Wesson Forum

Advertise With Us Search
Go Back   Smith & Wesson Forum > General Topics > The Lounge

The Lounge A Catch-All Area for NON-GUN topics.
PUT GUN TOPICS in the GUN FORUMS.
Keep it Family Friendly. See The Rules for Banned Topics!


Reply
 
Thread Tools Display Modes
  #1  
Old 12-12-2011, 05:37 PM
Airpark Airpark is offline
Banned
 
Join Date: Apr 2009
Posts: 603
Likes: 57
Liked 1,205 Times in 201 Posts
Default Interesting VIRUS

THIS is going around...two friends have just emailed me that it appeared on their systems also.

Watch for it.

(This morning) Just got done getting rid of ....Win32-Fake.Alert-bo..a very interesting virus. It told me virtually every system and file on my computer was infected with something.

It blocked everything and would only let me respond to it. Had to work around, set up AVAST and do re-boot and finally eliminated it.

Looked real, authentic, etc. However to me the tip offs were that it wanted $59.95 for a year, $69.95 for two years and $79.95 for "LIFETIME" and I know of no reliable save security system for sale for a one time lifetime charge.

Also it said "Your credit card will only be charged one time."

Reckon what would have happened if I had actually subscribed to it.

Last edited by Airpark; 12-12-2011 at 07:19 PM. Reason: Update to fact that this is active VIRUS
Reply With Quote
  #2  
Old 12-12-2011, 07:26 PM
rags's Avatar
rags rags is offline
SWCA Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: May 2008
Location: S&W Ohio
Posts: 7,404
Likes: 13,899
Liked 8,019 Times in 2,495 Posts
Unhappy

I had that little nasty also. I would recommend downloading Malwarebytes and see if it finds any other traces of it. Somehow it got by McAfee. Unfortunately, sometimes ads are carriers of this kind of Mal-ware.

What pisses me off is some kid in his underwear, in his parents basement, is writing this **** and spreading it around!
__________________
RIP Shipmate
Reply With Quote
  #3  
Old 12-13-2011, 08:39 AM
williamlayton's Avatar
williamlayton williamlayton is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: May 2011
Location: Deer Park, Texas
Posts: 3,357
Likes: 1,057
Liked 2,608 Times in 1,104 Posts
Default

Mine was the Win7.
Nasty, I'm telling you.
Blessings
__________________
TEXAS, by GOD
Reply With Quote
  #4  
Old 12-13-2011, 10:40 AM
Maximumbob54's Avatar
Maximumbob54 Maximumbob54 is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Oct 2010
Posts: 7,200
Likes: 9,079
Liked 1,921 Times in 1,043 Posts
Default

Quote:
Originally Posted by -rags- View Post
I had that little nasty also. I would recommend downloading Malwarebytes and see if it finds any other traces of it. Somehow it got by McAfee. Unfortunately, sometimes ads are carriers of this kind of Mal-ware.

What pisses me off is some kid in his underwear, in his parents basement, is writing this **** and spreading it around!
I always want to get a little bit Arabic in my treatment of these clowns that are nothing more than a plague on the society around them.
Reply With Quote
  #5  
Old 12-13-2011, 11:16 AM
glenncal1 glenncal1 is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: May 2009
Posts: 2,709
Likes: 2
Liked 3,506 Times in 997 Posts
Default

I have it on my laptop, I think I am going to have to take it in for removal. It is preventing me from even running the malabytes which i have on that computer.
__________________
Jim
Many K and N Frames
Reply With Quote
  #6  
Old 12-13-2011, 01:24 PM
snowman snowman is offline
Member
Interesting VIRUS  
Join Date: Jan 2003
Location: Rural NW Ohio
Posts: 3,387
Likes: 5,180
Liked 2,444 Times in 1,097 Posts
Default

I'm glad I found this thread. I'm having to use a friend's machine due to what sounds like what you folks are discussing. It's one of those things that interrupts you with dire warnings that your machine is infected, then won't let you do anything else until you buy the supposed security software. Is that what you're experiencing?

Mine won't let me run anything but my email program.

Andy
Reply With Quote
  #7  
Old 12-13-2011, 02:22 PM
m19fan's Avatar
m19fan m19fan is offline
US Veteran
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Sep 2009
Posts: 13
Likes: 0
Liked 0 Times in 0 Posts
Default

We also had it. Malwarebytes works great to get rid of it.
Reply With Quote
  #8  
Old 12-13-2011, 02:36 PM
CelticSire's Avatar
CelticSire CelticSire is offline
US Veteran
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Apr 2003
Location: Texas, USA
Posts: 1,110
Likes: 1,829
Liked 1,171 Times in 310 Posts
Default

Quote:
Originally Posted by glenncal1 View Post
I have it on my laptop, I think I am going to have to take it in for removal. It is preventing me from even running the malabytes which i have on that computer.
Try starting your computer in SAFE mode and running your removal software
Reply With Quote
  #9  
Old 12-13-2011, 05:36 PM
medxam medxam is offline
US Veteran
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: May 2004
Location: Jacksonville, NC, USA
Posts: 1,008
Likes: 120
Liked 413 Times in 193 Posts
Post

Just cost me $98.50 to get my wife's laptop cleaned up from this bugger!
__________________
Doc Garrett
Dead Man's Doctor
Reply With Quote
  #10  
Old 12-13-2011, 07:17 PM
Fishslayer Fishslayer is offline
US Veteran
Absent Comrade
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Jan 2010
Location: San Diego, PRK
Posts: 9,233
Likes: 11,531
Liked 11,249 Times in 3,916 Posts
Default

Sounds like something I was dealing with earlier this year. It also disabled my control panel and prevented system restore by wiping out the restore points.

I started in Safe mode and ran AdAware & Malwarebytes multiple times.

It had gotten by MS Security.
Reply With Quote
  #11  
Old 12-13-2011, 07:40 PM
Bicky Robby's Avatar
Bicky Robby Bicky Robby is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Jun 2011
Location: Smack dab in the middle
Posts: 303
Likes: 0
Liked 7 Times in 5 Posts
Default

Stopped it for ya.

__________________
NRA Certified Instructor

Last edited by Bicky Robby; 12-13-2011 at 07:42 PM.
Reply With Quote
  #12  
Old 12-13-2011, 07:53 PM
snowman snowman is offline
Member
Interesting VIRUS  
Join Date: Jan 2003
Location: Rural NW Ohio
Posts: 3,387
Likes: 5,180
Liked 2,444 Times in 1,097 Posts
Default

Quote:
Originally Posted by m19fan View Post
We also had it. Malwarebytes works great to get rid of it.

It won't let me run Malwarebytes. What did you do?

Andy
Reply With Quote
  #13  
Old 12-13-2011, 11:00 PM
Airpark Airpark is offline
Banned
 
Join Date: Apr 2009
Posts: 603
Likes: 57
Liked 1,205 Times in 201 Posts
Default

Andy what I had to do was click on AVAST...it would not let me start it...so I right clicked and got to the start button and clicked on it and ran AVAST and it cleared it out.

Hope this helps..it can be a bugger. Had friend who worked about two hours to get rid of it....he has the MS Essentials security software.

I reallly like AVAST.
Reply With Quote
  #14  
Old 12-13-2011, 11:50 PM
MKT's Avatar
MKT MKT is offline
SWCA Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Sep 2005
Location: Temecula, CA
Posts: 1,165
Likes: 11
Liked 88 Times in 56 Posts
Default

I just went through this too, took most of Friday and a part of Saturday but I beat it.

This virus also attacks your anti-virus program, for me it shut down McAfee hard and killed my firewall. Restart the computer and when the firts splash screen comes up start hitting F8, keep tapping that key until you force the computer to safe mode. I first ran safe mode to clean as much as I could then rebooted and came up in safe mode with networking so I could access on-line systems. A combination of Spy-bot S&D, Malwarebytes and system restore all in safe mode got me back about 85%. Be sure to right click Spybot and Malwarebytes to select "run as administrator". The last thing was the system restore.

While in normal mode the virus took control of the control panel so I had to restore from safe mode. Once I could start normally the McAfee firewall would not stay on for more than a few seconds and the trojan remains scattered about the infected programs would reactivate. A little searching revealed that McAfee needed to be removed and reinstalled, but McAfee is almost as difficult to clean as a virus. Due to the subscription you have to uninstall McAfee, then run an additional McAfee removal tool (MCPR.exe) which rids the system of the tendrils of McAfee scattered on the computer. If you don't, when you try to reinstall McAfee, their system will register it as another subscription rather than a reinstall. After all that I now have a clean, working PC. All it cost me was a bit of my time.

When you download replacement copy of McAfee, before you do that be sure to uninstall Malwarebytes and Spybot. McAfee does not play well with them. They can be reinstalled after a successful installation of McAfee.
__________________
Non illegitimae carborundum
Reply With Quote
  #15  
Old 12-13-2011, 11:56 PM
glenncal1 glenncal1 is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: May 2009
Posts: 2,709
Likes: 2
Liked 3,506 Times in 997 Posts
Default

I got rid of it (I hope) by following the instructions on this website:

Bleeping Computer - Computer Help and Discussion

I had to download the FixNCR.reg on another computer and copy it to my laptop with a jumpdrive.
__________________
Jim
Many K and N Frames
Reply With Quote
  #16  
Old 12-14-2011, 12:13 AM
TACC1 TACC1 is offline
US Veteran
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Apr 2008
Location: Wautoma, WI 54982
Posts: 4,114
Likes: 6,564
Liked 799 Times in 499 Posts
Default

There is no end to the good stuff I learn here.
I'm sorry you people had to go thru all the hoopla, but
I sincerely thank you for passing on the warning and clean-up
procedures. TACC1
Reply With Quote
  #17  
Old 12-14-2011, 12:34 AM
Reddog's Avatar
Reddog Reddog is offline
Absent Comrade
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Mar 2000
Location: So. Central Kansas
Posts: 968
Likes: 727
Liked 413 Times in 165 Posts
Default

I'd like to know if anyone running Norton Antivirus was infected with this? I am and haven't seen any sign of it?
Dick
Reply With Quote
  #18  
Old 12-14-2011, 01:33 AM
Reddog's Avatar
Reddog Reddog is offline
Absent Comrade
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Mar 2000
Location: So. Central Kansas
Posts: 968
Likes: 727
Liked 413 Times in 165 Posts
Default

Thanks, Bob!
Reply With Quote
  #19  
Old 12-14-2011, 03:40 AM
Fishslayer Fishslayer is offline
US Veteran
Absent Comrade
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Jan 2010
Location: San Diego, PRK
Posts: 9,233
Likes: 11,531
Liked 11,249 Times in 3,916 Posts
Default

Quote:
Originally Posted by snowman View Post
It won't let me run Malwarebytes. What did you do?

Andy
Try starting in Safe mode. Start the computer & hit F8. Use the keyboard arrows & Enter vice the mouse.
Reply With Quote
  #20  
Old 12-14-2011, 08:02 AM
Maximumbob54's Avatar
Maximumbob54 Maximumbob54 is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Oct 2010
Posts: 7,200
Likes: 9,079
Liked 1,921 Times in 1,043 Posts
Default

Everyone is making darn sure their OS is as up to date as possible, right?
Reply With Quote
  #21  
Old 12-14-2011, 10:45 AM
john4970 john4970 is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Jul 2008
Location: Michigan
Posts: 105
Likes: 0
Liked 17 Times in 9 Posts
Default

I picked up the win32 virus a few weeks ago. It got around Kaspersky software. I was able to perform a 'system restore' and cleared all the bad stuff out. Kaspersky identified the virus, but could not clear it.
Reply With Quote
  #22  
Old 12-14-2011, 12:10 PM
dcxplant's Avatar
dcxplant dcxplant is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Jun 2011
Location: Scottsdale, AZ
Posts: 1,284
Likes: 401
Liked 845 Times in 405 Posts
Default

I hate Windows...
Reply With Quote
  #23  
Old 12-14-2011, 02:51 PM
m19fan's Avatar
m19fan m19fan is offline
US Veteran
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Sep 2009
Posts: 13
Likes: 0
Liked 0 Times in 0 Posts
Default

snowman,
I had to remove the security program first the upload Malwarebytes. I will see if I can find the instructions.
Reply With Quote
  #24  
Old 12-14-2011, 02:55 PM
m19fan's Avatar
m19fan m19fan is offline
US Veteran
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Sep 2009
Posts: 13
Likes: 0
Liked 0 Times in 0 Posts
Default

Malwarebytes dot com for the free removal or you can buy full version.
good luck
Reply With Quote
  #25  
Old 12-14-2011, 02:56 PM
m19fan's Avatar
m19fan m19fan is offline
US Veteran
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Sep 2009
Posts: 13
Likes: 0
Liked 0 Times in 0 Posts
Default

Malwarebytes Anti-Malware - Free software downloads and software reviews - CNET Download.com
cnet has the same version and you can read the reviews. This is a serious virus that can be transferred through email and other downloads.

Last edited by m19fan; 12-14-2011 at 02:58 PM. Reason: +information
Reply With Quote
  #26  
Old 12-15-2011, 02:20 AM
goldenlight goldenlight is offline
Member
 
Join Date: Oct 2007
Location: USA
Posts: 1,158
Likes: 2,291
Liked 394 Times in 221 Posts
Exclamation

I'm fighting a rootkit virus right now, on my primary computer.

They are NASTY devils, but other people have fought them before, and there is help to be found on the Internet.

I spent several days researching the particular virus that is inhabiting my computer. One thing it does is prevent you from running or installing any software.

I found a registery repair utility for my OS that defeated this.

I am running anti-virus and anti-malware scans, even as I type this, on my infected computer. The software found a LOT of infected items.

Below are the URLs that I found very useful. You'll have to dig through them, to find the information for your problem, and you particular OS.

I would VERY HIGHLY recommend saving these links, against future need!

Perhaps put them into a MS Word files, which allows for clickable hyperlinks, and burn it onto a CD-ROM. Then you can open the links in an uninfected computer.

In order to disinfect a badly infected computer, you really need to have another computer with access to the Internet, and the ability to burn CD-ROMs available to you.

That way, you can get copies of the software you will need, ESPECIALLY the registry repair utility, onto the infected computer.

I spent a LONG time digging this information up, so save yourself the trouble, and save them for WHEN (not IF) you need it!

Some of these links are specific to my OS and specific virus, but you should be able to find information for your particular virus, and OS, at the same link(s) at different places on the website.

Spyware Warrior: Rogue/Suspect Anti-Spyware Products & Web Sites

|MG| Malwarebytes Anti-Malware 1.51.2.1300 Download

SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Bleeping Computer Downloads: ComboFix Download

Malwarebytes won`t install, run or update – How to fix it | My Anti Spyware

Virus Removal Support

FileHippo.com - Download Free Software

Bleeping Computer Downloads: RKill

RKill - What it does and What it Doesn't - A brief introduction to the program

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help

Remove XP Antivirus 2012, removal instructions

How to remove XP Security Tool 2010, XP Defender Pro, and Vista Security Tool 2010 (Uninstall Guide)

XP Security 2012 (Virus Removal Guide)

Good luck, if you ever need to do this.
Reply With Quote
  #27  
Old 12-15-2011, 11:50 AM
snowman snowman is offline
Member
Interesting VIRUS  
Join Date: Jan 2003
Location: Rural NW Ohio
Posts: 3,387
Likes: 5,180
Liked 2,444 Times in 1,097 Posts
Default

Well, I don't know what the deal is, but I'm now able to use my machine again without having done anything about the problem. I suspect, however, that this is but a temporary respite; and that the virus or whatever it is will reappear and shut everything down. I hope not, but I wouldn't bet on something like that just disappearing, unless there has been a divine intervention.

Thanks to those of you who suggested ways to address the problem. I have to confess, though, that I don't really understand how to do much of what I've been told to do.

Thanks again to the OP for opening the thread.

Andy
Reply With Quote
  #28  
Old 12-15-2011, 12:58 PM
nicky4968's Avatar
nicky4968 nicky4968 is offline
Member
 
Join Date: May 2003
Location: Littleton, Colorado, USA
Posts: 1,788
Likes: 4,425
Liked 1,060 Times in 510 Posts
Default

Download Avast

Click "Scan"

Select "Boot Time Scan"

Re-boot.

This will go through your computer and wipe those bad things away before they can be re-loaded in your computer.

Takes a while.

Follow prompts.

Best of luck.
__________________
and what his trumpet saith
Reply With Quote
  #29  
Old 12-15-2011, 01:19 PM
snowman snowman is offline
Member
Interesting VIRUS  
Join Date: Jan 2003
Location: Rural NW Ohio
Posts: 3,387
Likes: 5,180
Liked 2,444 Times in 1,097 Posts
Default

Well, while my machine was mysteriously working I took the opportunity to update and run Malwarebytes and Microsoft Security Essentials, and together they eliminated the problem. I believe it was the latter which found "Win32".

Thanks again for all your help, friends, and to the original poster for alerting us.

Andy
Reply With Quote
  #30  
Old 12-15-2011, 01:59 PM
Silver77's Avatar
Silver77 Silver77 is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: Jul 2008
Location: Central Texas
Posts: 186
Likes: 28
Liked 8 Times in 5 Posts
Default

McAfee couldn't catch a cold! It came with AT&T internet. Our son, a software tech, installed one of the free programs found on CNET.com. He chose AVG free anti virus and it caught our virus first run and we haven't been bothered since. He says these armature virus writers could be considered artist in their communities that compete with one another in what they can devise, put out and how much havoc they cause. They display and brag about their ability to other like "artist".
Reply With Quote
  #31  
Old 12-16-2011, 09:34 PM
williamlayton's Avatar
williamlayton williamlayton is offline
Member
Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS Interesting VIRUS  
Join Date: May 2011
Location: Deer Park, Texas
Posts: 3,357
Likes: 1,057
Liked 2,608 Times in 1,104 Posts
Default

If I could I would invent a burgular alarm that would detect these incoming things and send a virus back at the sender.
Blessings
__________________
TEXAS, by GOD
Reply With Quote
Reply

Tags
platinum, sig arms


Posting Rules
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Virus? hittman77 FORUM OFFICE 2 04-23-2013 09:30 PM
Little bug virus Muddyboot The Lounge 6 07-08-2012 10:01 AM
Virus? ErnieDeBord The Lounge 4 05-20-2012 01:23 AM
Bad PC virus use your virus protection bushmaster1313 The Lounge 0 12-13-2011 11:28 PM
Anti-virus virus/malware, & backup Wayne02 The Lounge 19 12-30-2009 09:10 PM

Powered by vBadvanced CMPS v3.2.3
smith-wessonforum.com tested by Norton Internet Security smith-wessonforum.com tested by McAfee Internet Security

All times are GMT -4. The time now is 10:26 PM.


Smith-WessonForum.com is not affiliated with Smith & Wesson Holding Corporation (NASDAQ Global Select: SWHC)