Interesting VIRUS

[Airpark]

THIS is going around...two friends have just emailed me that it appeared on their systems also.

Watch for it.

(This morning) Just got done getting rid of ....Win32-Fake.Alert-bo..a very interesting virus. It told me virtually every system and file on my computer was infected with something.

It blocked everything and would only let me respond to it. Had to work around, set up AVAST and do re-boot and finally eliminated it.

Looked real, authentic, etc. However to me the tip offs were that it wanted $59.95 for a year, $69.95 for two years and $79.95 for "LIFETIME" and I know of no reliable save security system for sale for a one time lifetime charge.

Also it said "Your credit card will only be charged one time."

Reckon what would have happened if I had actually subscribed to it.

 

[rags]

I had that little nasty also. I would recommend downloading Malwarebytes and see if it finds any other traces of it. Somehow it got by McAfee. Unfortunately, sometimes ads are carriers of this kind of Mal-ware.

What pisses me off is some kid in his underwear, in his parents basement, is writing this **** and spreading it around!

 

[williamlayton]

Mine was the Win7.
Nasty, I'm telling you.
Blessings

 

[Maximumbob54]

I had that little nasty also. I would recommend downloading Malwarebytes and see if it finds any other traces of it. Somehow it got by McAfee. Unfortunately, sometimes ads are carriers of this kind of Mal-ware.

What pisses me off is some kid in his underwear, in his parents basement, is writing this **** and spreading it around!

I always want to get a little bit Arabic in my treatment of these clowns that are nothing more than a plague on the society around them.

 

[glenncal1]

I have it on my laptop, I think I am going to have to take it in for removal. It is preventing me from even running the malabytes which i have on that computer.

 

[snowman]

I'm glad I found this thread. I'm having to use a friend's machine due to what sounds like what you folks are discussing. It's one of those things that interrupts you with dire warnings that your machine is infected, then won't let you do anything else until you buy the supposed security software. Is that what you're experiencing?

Mine won't let me run anything but my email program.

Andy

 

[m19fan]

We also had it. Malwarebytes works great to get rid of it.

 

[CelticSire]

I have it on my laptop, I think I am going to have to take it in for removal. It is preventing me from even running the malabytes which i have on that computer.

Try starting your computer in SAFE mode and running your removal software

 

[medxam]

Just cost me $98.50 to get my wife's laptop cleaned up from this bugger!

 

[Fishslayer]

Sounds like something I was dealing with earlier this year. It also disabled my control panel and prevented system restore by wiping out the restore points.

I started in Safe mode and ran AdAware & Malwarebytes multiple times.

It had gotten by MS Security.

 

[Bicky Robby]

Stopped it for ya.

 

[snowman]

We also had it. Malwarebytes works great to get rid of it.

It won't let me run Malwarebytes. What did you do?

Andy

 

[Airpark]

Andy what I had to do was click on AVAST...it would not let me start it...so I right clicked and got to the start button and clicked on it and ran AVAST and it cleared it out.

Hope this helps..it can be a bugger. Had friend who worked about two hours to get rid of it....he has the MS Essentials security software.

I reallly like AVAST.

 

[MKT]

I just went through this too, took most of Friday and a part of Saturday but I beat it.

This virus also attacks your anti-virus program, for me it shut down McAfee hard and killed my firewall. Restart the computer and when the firts splash screen comes up start hitting F8, keep tapping that key until you force the computer to safe mode. I first ran safe mode to clean as much as I could then rebooted and came up in safe mode with networking so I could access on-line systems. A combination of Spy-bot S&D, Malwarebytes and system restore all in safe mode got me back about 85%. Be sure to right click Spybot and Malwarebytes to select "run as administrator". The last thing was the system restore.

While in normal mode the virus took control of the control panel so I had to restore from safe mode. Once I could start normally the McAfee firewall would not stay on for more than a few seconds and the trojan remains scattered about the infected programs would reactivate. A little searching revealed that McAfee needed to be removed and reinstalled, but McAfee is almost as difficult to clean as a virus. Due to the subscription you have to uninstall McAfee, then run an additional McAfee removal tool (MCPR.exe) which rids the system of the tendrils of McAfee scattered on the computer. If you don't, when you try to reinstall McAfee, their system will register it as another subscription rather than a reinstall. After all that I now have a clean, working PC. All it cost me was a bit of my time.

When you download replacement copy of McAfee, before you do that be sure to uninstall Malwarebytes and Spybot. McAfee does not play well with them. They can be reinstalled after a successful installation of McAfee.

 

[glenncal1]

I got rid of it (I hope) by following the instructions on this website:

Bleeping Computer - Computer Help and Discussion

I had to download the FixNCR.reg on another computer and copy it to my laptop with a jumpdrive.

 

[TACC1]

There is no end to the good stuff I learn here.
I'm sorry you people had to go thru all the hoopla, but
I sincerely thank you for passing on the warning and clean-up
procedures. TACC1

 

[Reddog]

I'd like to know if anyone running Norton Antivirus was infected with this? I am and haven't seen any sign of it?
Dick

 

[Reddog]

Thanks, Bob!

 

[Fishslayer]

It won't let me run Malwarebytes. What did you do?

Andy

Try starting in Safe mode. Start the computer & hit F8. Use the keyboard arrows & Enter vice the mouse.

 

[Maximumbob54]

Everyone is making darn sure their OS is as up to date as possible, right?