COMPUTERS | OS | SOFTWARE >> PC Music
        Print Thread

Pages: 1
Pete (Conz) Connelly
active member


Joined: 17/09/02
Posts: 1955
Loc: Tyne & Wear, UK
This Boils My P!$$
      #784431 - 03/11/09 09:47 PM

Hi guys,

My home pc got infected today with virus, spyware and the likes... No matter what I do, AVG9 (Free Version) constantly finds stuff but doesn't rid them totally and I get the occasional pop up saying virus / trojan has been found here and there. Plus IE chugs like a dog with 2 legs. NIGHTMARE.

Anyhow, I noticed a file called restorer32_a.exe in C:\Documents and Settings\Peter Connelly and did a search for this. It appears to be "dangerous", so I followed a link which told me it would remove this from my system and it installed Spyware Doctor (or something like that) from PC Tools... took about half an hour to install and check my system then when I went to click FIX... it said I had to pay for it!!! FFS. What a waste of time. Why on earth didn't they tell me this before I installed it!!!

Rant over... anyone know of a good and FREE program that will rid me of restorer32_a.exe and any other infestation I might have picked up today. AVG doesn't seem to want to help as I thought it wuld do... I have a feeling a format c: is heading my way



Cheers,
Peter

--------------------
Peter Connelly
www.universal-sound-design.com, www.myspace.com/universalsounddesign, www.twitter.com/PeterConnelly72


Post Extras: Print Post   Remind Me!   Notify Moderator      
cfb4
member


Joined: 14/01/04
Posts: 373
Loc: Dublin, Ireland
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784433 - 03/11/09 09:52 PM

See if there is a 'stinger' for ridding yourself of the problem. Also, unplug your PC from any networks while cleaning - sometimes those worms hide out in your network port and then hop right back in once the cleaning is done.

--------------------
It's the most devastating moment in a young mans life, when he quite reasonably says to himself, "I shall never play The Dane!"


Post Extras: Print Post   Remind Me!   Notify Moderator      
Tímo



Joined: 25/09/02
Posts: 1805
Loc: Kaoss Central, England
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784458 - 03/11/09 11:21 PM

MalwareBytes (anti-malware): http://www.malwarebytes.org/mbam.php
Spybot (anti-malware/spyware): http://www.safer-networking.org/en/download/index.html
Avast (AntiVirus): http://www.avast.com/eng/download-avast-home.html
CrapCleaner (gets rids of general detritus/tempfiles/internetcrap): http://www.ccleaner.com/

All are free for what you need.

Malwarebytes is free for doing manual scans (as opposed to protection in realtime), and has good reputation for eliminating malware.

I had bad experiences with AVG in the past, it threw its hands in the air and let two viruses just walk in and destroy system files, so I drop kicked it in favour of Avast and never looked back. Avast is exceptional. You may need to reg via email but it's 100% free for personal use and there's no ads/promo crap shoved in your face at any point.

Spybot is great for general anti-spyware and other anomalies that lie on your disk.

Crap Cleaner is great for general use, not as an anti-malware prog but just for getting rid of temp files and clearing up.

--------------------
» http://Infekted.org « Access Virus news & community


Post Extras: Print Post   Remind Me!   Notify Moderator      
distaudio



Joined: 15/08/07
Posts: 94
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784479 - 04/11/09 12:41 AM

I usually type the name of the file in question into google.

You can be sure that there have been 1000's of other people before you who have had to remove the file and have documented how to do it or what they have used.

http://www.google.com.au/search?q=restorer32_a.exe&ie=utf-8&oe=utf -8&aq=t&rls=org.mozilla:en-GB:official&client=firefox-a

--------------------
http://www.myspace.com/distaudio


Post Extras: Print Post   Remind Me!   Notify Moderator      
UltimateOutsider



Joined: 30/10/09
Posts: 21
Loc: Portland, OR
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784481 - 04/11/09 01:05 AM

Quote Pete (Conz) Connelly:

Anyhow, I noticed a file called restorer32_a.exe in C:\Documents and Settings\Peter Connelly and did a search for this. It appears to be "dangerous", so I followed a link which told me it would remove this from my system and it installed Spyware Doctor (or something like that) from PC Tools... took about half an hour to install and check my system then when I went to click FIX... it said I had to pay for it!!! FFS. What a waste of time. Why on earth didn't they tell me this before I installed it!!!



I hate to be the one to tell you this but you just fell for another scam. These days trojans/viruses hijack your browser, blocking attempts to download real antivirus software, and guiding you to fraudulent security sites that actually infect you with more malware (and ask you to pay for the honor).

All of the tools others have mentioned in this thread are good, but unfortunately, by the time you're experiencing the symptoms you've described, you will NOT be able to fix your computer by installing/running those tools. For one thing, most modern viruses are written to immediately shut down and otherwise disable Malwarebytes or any other security tools- and of course you probably won't be able to download them anyway due to the browser hijacking and DNS poisoning. And don't try using Windows "safe mode" either, as trojans infect that mode as well.

There are a few ways that you can fix the problem, though:
1. If it's a desktop and you have more than one hard drive or partition, install a fresh copy of Windows on that partition. Do NOT boot from the infected partition at any point until you're all done with the following steps. Immediately after installing your fresh copy of Windows, download ALL of the Windows Update patches then install Avast or AVG and also get MalwareBytes on that fresh partition. Then run a full system scan on all drives/partitions.
2. If you can find an image and burn it from an uninfected computer, there are "windows live" dvd images around that include anti-virus that you can use to basically boot windows from a DVD and scan/repair your system. I've never done this, but I know people who have. Only hard part is finding a trusted image.
3. Somewhat dangerous, but I've done it successfully for a couple people: On the infected system, back up all needed data to a USB key/external drive. (This is "somewhat dangerous" because some viruses infect USB drives and/or the files you put on them, or even create dummy files that look like folders, causing people to accidentally run them and infect their systems.) Totally blow away the infected partition and re-install Windows. Get all the Windows Updates, install AVG or Avast, connect your USB drive and immediately scan it with your antivirus and malwarebytes. Copy your files back in place once you're sure it's safe.

Good luck.

--------------------
Gateway NX860XL, 32-bit Win 7, Core Duo 2.00 GHz, 2 GB RAM, 7200 RPM HD, NVIDIA GeForce Go 7900 w/256MB VRAM |MOTU UltraLite MK3 | MOTU micro lite | Cubase 5.00

Edited by UltimateOutsider (04/11/09 01:06 AM)


Post Extras: Print Post   Remind Me!   Notify Moderator      
The Elf
active member


Joined: 14/08/01
Posts: 3521
Loc: Sheffield, UK
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784495 - 04/11/09 06:47 AM

Yep, the old 'we can fix it for you' scam. The reason they don't tell you up front is they don't want you to know! A lot of people are naive enough to pay the money - and usually for nothing.

Once again I'll chant my mantra - when you have your system back into a good working state, make an IMAGE COPY of your system hard drive. You would have been back up and running in ten minutes if you had an image copy to recover to. I know this doesn't help you right now, but it will take the pain away in future.

--------------------
An Eagle for an Emperor, A Kestrel for a Knave.


Post Extras: Print Post   Remind Me!   Notify Moderator      
Mahoobley
monkey


Joined: 21/03/03
Posts: 1896
Loc: East Midlands
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784528 - 04/11/09 09:58 AM

Another serious point of advice - PAY for some PROPER security software.

All of the free antivirus software makers make paid-for commercial antivirus software too, and they want you to pay, so the free versions are always compromised. AVG Free is close to useless when it comes to actually getting a virus, Avast says that it is free, then after a period suddenly tells you it wont protect you any more and you have to pay, and Avira Free comes up with a massive pop-up ad every time you boot your machine.

Avira Premium Security Suite (what I use), which is anti-virus, firewall, anti-spyware etc etc is about £30. I've never had any issues with viruses or spyware or anything.

--------------------
My FAWM attempts this year | http://www.jeremycorbett.co.uk


Post Extras: Print Post   Remind Me!   Notify Moderator      
The Elf
active member


Joined: 14/08/01
Posts: 3521
Loc: Sheffield, UK
Re: This Boils My P!$$ new [Re: Mahoobley]
      #784540 - 04/11/09 10:37 AM

Quote Mahoobley:

AVG Free is close to useless when it comes to actually getting a virus



That's not really fair. I have often used AVG Free to sort out viral infections on friends' and family's machines and it has come up trumps every time. And it has caught one or two in the studio/office when infected files have been present on USB sticks and CD-ROMs.

--------------------
An Eagle for an Emperor, A Kestrel for a Knave.


Post Extras: Print Post   Remind Me!   Notify Moderator      
himalaya



Joined: 25/01/05
Posts: 242
Re: This Boils My P!$$ new [Re: The Elf]
      #784544 - 04/11/09 10:52 AM

Quote The Elf:

Yep, the old 'we can fix it for you' scam. The reason they don't tell you up front is they don't want you to know! A lot of people are naive enough to pay the money - and usually for nothing.





Except, Spyware Doctor from PC Tools is a legitimate program with no hidden agendas. So, as long as that's what Peter has downloaded it is not a scam. I use Spyware Doctor myself and I remember Martin Walker uses it too and has recommended it a few times in SOS.

The issue might be, is what Peter has downloaded the real deal or something that appears to be legit but isn't... In anycase Spyware Doctor is not free.

I use it with two other anti-spyware apps: Spybot and AdAware. I do alternate scans with each.

--------------------
www.electric-himalaya.com
VST and hardware synth sound design


Post Extras: Print Post   Remind Me!   Notify Moderator      
Mahoobley
monkey


Joined: 21/03/03
Posts: 1896
Loc: East Midlands
Re: This Boils My P!$$ new [Re: The Elf]
      #784550 - 04/11/09 11:08 AM

Quote The Elf:

Quote Mahoobley:

AVG Free is close to useless when it comes to actually getting a virus



That's not really fair. I have often used AVG Free to sort out viral infections on friends' and family's machines and it has come up trumps every time. And it has caught one or two in the studio/office when infected files have been present on USB sticks and CD-ROMs.




That surprises me, as my experience with myself and friend's machines mirror the OP's issue that AVG Free very often misses virus, or fails and even flat out refuses to remove them. From my experience with it and what I've heard from others I stand by my opinion on it and will continue to strongly dissuade people from using it. If AVG Free was that good, why would AVG sell a commercial version?

--------------------
My FAWM attempts this year | http://www.jeremycorbett.co.uk


Post Extras: Print Post   Remind Me!   Notify Moderator      
Pete (Conz) Connelly
active member


Joined: 17/09/02
Posts: 1955
Loc: Tyne & Wear, UK
Re: This Boils My P!$$ new [Re: The Elf]
      #784551 - 04/11/09 11:08 AM

Quote The Elf:

Quote Mahoobley:

AVG Free is close to useless when it comes to actually getting a virus



That's not really fair. I have often used AVG Free to sort out viral infections on friends' and family's machines and it has come up trumps every time. And it has caught one or two in the studio/office when infected files have been present on USB sticks and CD-ROMs.




I have used AVG Free for as far back as I can remember... at least for a few years before I moved back from Derby and I moved back here (Newcastle) in 2005. I can honestly say this has NEVER happened before, hence my naivity, so assume, until now, AVG Free has done what it said on the tin.

Cheers,
Peter

--------------------
Peter Connelly
www.universal-sound-design.com, www.myspace.com/universalsounddesign, www.twitter.com/PeterConnelly72


Post Extras: Print Post   Remind Me!   Notify Moderator      
Pete (Conz) Connelly
active member


Joined: 17/09/02
Posts: 1955
Loc: Tyne & Wear, UK
Re: This Boils My P!$$ new [Re: himalaya]
      #784553 - 04/11/09 11:09 AM

Quote himalaya:

Quote The Elf:

Yep, the old 'we can fix it for you' scam. The reason they don't tell you up front is they don't want you to know! A lot of people are naive enough to pay the money - and usually for nothing.





Except, Spyware Doctor from PC Tools is a legitimate program with no hidden agendas. So, as long as that's what Peter has downloaded it is not a scam. I use Spyware Doctor myself and I remember Martin Walker uses it too and has recommended it a few times in SOS.

The issue might be, is what Peter has downloaded the real deal or something that appears to be legit but isn't... In anycase Spyware Doctor is not free.

I use it with two other anti-spyware apps: Spybot and AdAware. I do alternate scans with each.




Yep, this is exactly it and, to be fair, I can "usually" tell the difference between a hoax and the real McCoy.

Cheers,
Peter

--------------------
Peter Connelly
www.universal-sound-design.com, www.myspace.com/universalsounddesign, www.twitter.com/PeterConnelly72


Post Extras: Print Post   Remind Me!   Notify Moderator      
Pete (Conz) Connelly
active member


Joined: 17/09/02
Posts: 1955
Loc: Tyne & Wear, UK
Re: This Boils My P!$$ new [Re: distaudio]
      #784554 - 04/11/09 11:11 AM

Quote distaudio:

I usually type the name of the file in question into google.

You can be sure that there have been 1000's of other people before you who have had to remove the file and have documented how to do it or what they have used.

http://www.google.com.au/search?q=restorer32_a.exe&ie=utf-8&oe=utf -8&aq=t&rls=org.mozilla:en-GB:official&client=firefox-a




Yep, did all this.. but, unless I'm cunning (and it doesn't always work), it pauses for ages then throws me to another site (usually advertising skin cream, paintings, or the likes) instead of the site listed in Google.

Cheers,
Peter

--------------------
Peter Connelly
www.universal-sound-design.com, www.myspace.com/universalsounddesign, www.twitter.com/PeterConnelly72


Post Extras: Print Post   Remind Me!   Notify Moderator      
mpostor
member


Joined: 04/09/03
Posts: 274
Loc: S.W. London
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784565 - 04/11/09 11:45 AM

You may also notice a file called reader_s.exe as well.

It would appear that you have Win32.Heur and/or Virut.
It's a total bastard to get rid of.

I've just lost machine to it/them.

Symantec has a removal tool for Virut, but this hasn't worked for me. On advice from the net (trust me, I spent a long time looking) I ran checks using Dr.Web and AVZ as well as Salitykiller from Kasperksky. That's as well as having AVG and Spybot give it a once over.
All picked up numerous infected files and eventually reported a virus free machine in Safe Mode.
But on a normal restart connected to the internet, it re-infected itself straight away. Something is still in the machine that connects to the net on startup and downloads the virus.
It even does it in Safe Mode with Networking enabled.

The net advice also mentions to delete all .TMP files in all locations. Check your running processes and you should see reader_s.exe running. Stop that and you should be able to delete any TMP files that are still in use.
The next advice was to use regedit to get rid of all references to reader_s.exe from the registry.

After all of that it still didn't work. It turns out that the virus attaches itself to most of the exe files on your machine. It did on mine, anyway. So when AVZ, etc removed all the infected files, it took half my machine with it. I couldn't even run Task Manager in Safe Mode.

With that much damage, a rebuild is the only option. Windows 7, here I come!

Stu.


Post Extras: Print Post   Remind Me!   Notify Moderator      
Pete (Conz) Connelly
active member


Joined: 17/09/02
Posts: 1955
Loc: Tyne & Wear, UK
Re: This Boils My P!$$ new [Re: mpostor]
      #784567 - 04/11/09 11:51 AM

Quote mpostor:

You may also notice a file called reader_s.exe as well.

It would appear that you have Win32.Heur and/or Virut.
It's a total bastard to get rid of.

I've just lost machine to it/them.

Symantec has a removal tool for Virut, but this hasn't worked for me. On advice from the net (trust me, I spent a long time looking) I ran checks using Dr.Web and AVZ as well as Salitykiller from Kasperksky. That's as well as having AVG and Spybot give it a once over.
All picked up numerous infected files and eventually reported a virus free machine in Safe Mode.
But on a normal restart connected to the internet, it re-infected itself straight away. Something is still in the machine that connects to the net on startup and downloads the virus.
It even does it in Safe Mode with Networking enabled.

The net advice also mentions to delete all .TMP files in all locations. Check your running processes and you should see reader_s.exe running. Stop that and you should be able to delete any TMP files that are still in use.
The next advice was to use regedit to get rid of all references to reader_s.exe from the registry.

After all of that it still didn't work. It turns out that the virus attaches itself to most of the exe files on your machine. It did on mine, anyway. So when AVZ, etc removed all the infected files, it took half my machine with it. I couldn't even run Task Manager in Safe Mode.

With that much damage, a rebuild is the only option. Windows 7, here I come!

Stu.




Hi Stu,

Yep, seen that file also on both HD and running in Task Manager. The Virus you mention are the ones AVG always picks up on but can't / won't remeove or if AVG does heal it, they come back. Sounds like "Format C:" time to me!!! FFS.

I have 2x HD's in this machine and have copied everything I want to back up to this... Have I infected this HD now also?

Cheers,
Peter

--------------------
Peter Connelly
www.universal-sound-design.com, www.myspace.com/universalsounddesign, www.twitter.com/PeterConnelly72


Post Extras: Print Post   Remind Me!   Notify Moderator      
The Elf
active member


Joined: 14/08/01
Posts: 3521
Loc: Sheffield, UK
Re: This Boils My P!$$ new [Re: Mahoobley]
      #784568 - 04/11/09 11:51 AM

Quote Mahoobley:

If AVG Free was that good, why would AVG sell a commercial version?



Because the commercial version is always one version ahead. You are encouraged to upgrade to the latest version and I'm sure they rely a lot on 'confusion' to get a sale.

But the virus definitions are identical between commercial and free versions.

I can also only go on what I've read, heard and experienced myself and AVG seems to do a good job. To be honest I've never heard any bad press for it until now, but I can't say I make it a point to search for new evaluations of software I've had for so long!

While we're on the subject, I've also found Housecall's antivirus web site to be a good option when you're up against it.

--------------------
An Eagle for an Emperor, A Kestrel for a Knave.


Post Extras: Print Post   Remind Me!   Notify Moderator      
ryan mead



Joined: 19/06/05
Posts: 877
Loc: Seoul
Re: This Boils My P!$$ new [Re: Mahoobley]
      #784576 - 04/11/09 12:13 PM

Quote Mahoobley:

Avast says that it is free, then after a period suddenly tells you it wont protect you any more and you have to pay



Really? In my experience you just have to re-register it (again for free) after using it for a year.

I'm surprised nobody else's mentioned this yet, but by all means avoid IE (in favour of Mozilla) unless you're using a site that just won't work with another browser.

--------------------
http://ryanmead.net
http://myspace.com/monkslut


Post Extras: Print Post   Remind Me!   Notify Moderator      
JGHarding
SOS News Editor


Joined: 02/08/09
Posts: 58
Re: This Boils My P!$$ new [Re: The Elf]
      #784580 - 04/11/09 12:23 PM

I can sympathise. At a previous workplace i had nearly finished an animation and a colleague brought some extra assets on pen drive. I plugged it in and the trouble started. The dreaded autorun injecter!

The virus infected so much of windows in such a short space of time that removing it would have crippled the OS, whilst leaving it there did nothing more than cripple the OS. (lol)

I finished the project on the spare computer, the main one had to be reformatted.

Edited by JGHarding (04/11/09 12:24 PM)


Post Extras: Print Post   Remind Me!   Notify Moderator      
Pete Kaine
active member


Joined: 10/07/03
Posts: 1020
Loc: Manchester
Re: This Boils My P!$$ new [Re: Mahoobley]
      #784592 - 04/11/09 12:52 PM

Quote Mahoobley:


That surprises me, as my experience with myself and friend's machines mirror the OP's issue that AVG Free very often misses virus, or fails and even flat out refuses to remove them.




From personal experiance I agree with that. To narrow it down a bit the's a couple of trojans in the wild that will target AVG disable it and stop it updating. Once you force an update it will then find the tojan and delete it, but your left exposed until you do.

AVG's not the only one this happens with but being well known and free they do get targeted. If your using it then do yourself a favour and force an update once a week to ensure nothing is happening in the background un-noticed.

Personal recomendation would be a copy of Karpersky *OEM* for around £8. Best detection engine in the business.

Quote The Elf:


While we're on the subject, I've also found Housecall's antivirus web site to be a good option when you're up against it.




+1 for good old Trendmicro Housecall

If you have a box that's been crippled, but can still access safemode with networking then do so and run this.

The's also one from Karpersky too:

http://www.kaspersky.co.uk/virusscanner

--------------------
www.scan.co.uk
3XS Audio Systems


Post Extras: Print Post   Remind Me!   Notify Moderator      
Martin WalkerModerator
Watcher Of The Skies


Joined: 28/02/01
Posts: 11258
Loc: Cornwall, UK
Re: This Boils My P!$$ new [Re: himalaya]
      #784622 - 04/11/09 02:03 PM

Quote himalaya:

Except, Spyware Doctor from PC Tools is a legitimate program with no hidden agendas. So, as long as that's what Peter has downloaded it is not a scam. I use Spyware Doctor myself and I remember Martin Walker uses it too and has recommended it a few times in SOS.




I'm still using Spyware Doctor with Antivirus, have done for a total of four years now, and have (touch wood) had not a single problem due to spyware, viruses, trojans...


Martin

--------------------
YewTreeMagic


Post Extras: Print Post   Remind Me!   Notify Moderator      
tex
member


Joined: 01/04/03
Posts: 597
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784629 - 04/11/09 02:17 PM

Viruses are very hard to get lately IF one avoids the dodgy websites (we all know what they are). If you avoid them you won't need any "security" programs. And avoid any workmates, and their memory sticks, that you suspect may go there.
They're exactly like movie Draculas. They have to have the door opened for them and be invited in for tea.
I can see protests coming... but protesters will kow the truth as well as me so it won't do them any good even if they do say they caught the virus by accidentally visiting the Anglican Times website.

--------------------
If you really want to offend someone.
Tell them the truth. Would I lie to you?


Post Extras: Print Post   Remind Me!   Notify Moderator      
Tímo



Joined: 25/09/02
Posts: 1805
Loc: Kaoss Central, England
Re: This Boils My P!$$ new [Re: Mahoobley]
      #784646 - 04/11/09 02:45 PM

Quote Mahoobley:

Avast says that it is free, then after a period suddenly tells you it wont protect you any more and you have to pay.




Not so. Every 18 months you have to send for a new registration code via email to keep it up to date. You don't need to register a new account, you simply update the one you already have. It remains completely free. I've been using Avast for the last six or seven years. It's saved my ass on a number of occasions, and has not once let me down. It's powerful and completely unintrusive, I can't recommend it highly enough.

Quote Mahoobley:

Quote The Elf:

Quote Mahoobley:

AVG Free is close to useless when it comes to actually getting a virus



That's not really fair. I have often used AVG Free to sort out viral infections on friends' and family's machines and it has come up trumps every time. And it has caught one or two in the studio/office when infected files have been present on USB sticks and CD-ROMs.




That surprises me, as my experience with myself and friend's machines mirror the OP's issue that AVG Free very often misses virus, or fails and even flat out refuses to remove them. From my experience with it and what I've heard from others I stand by my opinion on it and will continue to strongly dissuade people from using it. If AVG Free was that good, why would AVG sell a commercial version?




That's my experience too, twice. I'll never use AVG again, that's for sure.

--------------------
» http://Infekted.org « Access Virus news & community


Post Extras: Print Post   Remind Me!   Notify Moderator      
mpostor
member


Joined: 04/09/03
Posts: 274
Loc: S.W. London
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784650 - 04/11/09 02:56 PM

Quote Pete (Conz) Connelly:



Hi Stu,

Yep, seen that file also on both HD and running in Task Manager. The Virus you mention are the ones AVG always picks up on but can't / won't remeove or if AVG does heal it, they come back. Sounds like "Format C:" time to me!!! FFS.

I have 2x HD's in this machine and have copied everything I want to back up to this... Have I infected this HD now also?

Cheers,
Peter




I honestly don't know. I've backed everything important up as well, so it's going to be a full wipe and re-install for me.

For what it's worth, all this chat about x being better than y for detecting viruses doesn't do much for me.
All my anti-virus programs detected the virus. None of them have been able to remove it. I agree that prevention is better than cure, but you'd think that these things would know what to do to get rid of the things they find, wouldn't you?

I don't so much need virus detection, more virus removal.

Stu.


Post Extras: Print Post   Remind Me!   Notify Moderator      
Tímo



Joined: 25/09/02
Posts: 1805
Loc: Kaoss Central, England
Re: This Boils My P!$$ new [Re: mpostor]
      #784654 - 04/11/09 03:22 PM

Quote mpostor:

I don't so much need virus detection, more virus removal.




You need good, ongoing virus protection, so that you don't ever need to do virus removal (next time). Virus removal is shutting the door after the horse has bolted. An antivirus can't restore lost system files, etc.

From several people's experience here, AVG is not good at protecting in realtime, OR at removing viruses either.

Whereas Avast, in my experiences, is exceptional and stops viruses before they ever get onto your system.

--------------------
» http://Infekted.org « Access Virus news & community


Post Extras: Print Post   Remind Me!   Notify Moderator      
Pete Kaine
active member


Joined: 10/07/03
Posts: 1020
Loc: Manchester
Re: This Boils My P!$$ new [Re: tex]
      #784680 - 04/11/09 04:29 PM

Quote tex:


I can see protests coming... but protesters will kow the truth as well as me so it won't do them any good even if they do say they caught the virus by accidentally visiting the Anglican Times website.




Next time someone compromises your mates bands shoddly hosted blog and injects a script that opens a backdoor into your machine then feel free to send me a snap of yourself in a pope hat

--------------------
www.scan.co.uk
3XS Audio Systems


Post Extras: Print Post   Remind Me!   Notify Moderator      
tex
member


Joined: 01/04/03
Posts: 597
Re: This Boils My P!$$ new [Re: Pete Kaine]
      #784705 - 04/11/09 05:20 PM

Quote Pete Kaine:

Quote tex:


I can see protests coming... but protesters will kow the truth as well as me so it won't do them any good even if they do say they caught the virus by accidentally visiting the Anglican Times website.




Next time someone compromises your mates bands shoddly hosted blog and injects a script that opens a backdoor into your machine then feel free to send me a snap of yourself in a pope hat




Dominus vobiscum et cum spiritu tuo. And mea culpa mea maximus culpa Probably...

Where's me hat?

--------------------
If you really want to offend someone.
Tell them the truth. Would I lie to you?


Post Extras: Print Post   Remind Me!   Notify Moderator      
Pete (Conz) Connelly
active member


Joined: 17/09/02
Posts: 1955
Loc: Tyne & Wear, UK
Re: This Boils My P!$$ new [Re: mpostor]
      #784807 - 04/11/09 10:55 PM

I installed Anti-Malware, reset PC (unplugging LAN cable) and did a full scan. Found and cleaned loads, including restorer32_a.exe. Reset, ran AVG, founds loads of other stuff, including the two virus' mentioned earlier, and "think" it sorted stuff out. Hit reset again THEN:

Went to - C:\Documents and Settings\Peter Connelly - to check if any of the dodgt files were there. Everything OK until I plugged in the LAN cable and suddenly reader_s.exe appears... as soon as it did, I deleted the file and opened Task Manager to make sure nothing was in there. I'm sure there was a file 8.TMP or something, but I ended its process (or maybe that was earlier, I can't rememeber?). Apart from that, nothing else suspicious. Next, I deleted FULL internet history and even reset IE to factory settings.

PC's been absolutely fine since, although I know when I reset again, I might have to follow some of the procedures mentioned above before I start "playing" again.

Cheers,
Peter

--------------------
Peter Connelly
www.universal-sound-design.com, www.myspace.com/universalsounddesign, www.twitter.com/PeterConnelly72


Post Extras: Print Post   Remind Me!   Notify Moderator      
Pete (Conz) Connelly
active member


Joined: 17/09/02
Posts: 1955
Loc: Tyne & Wear, UK
Re: This Boils My P!$$ new [Re: tex]
      #784809 - 04/11/09 10:58 PM

Quote tex:

Viruses are very hard to get lately IF one avoids the dodgy websites (we all know what they are). If you avoid them you won't need any "security" programs. And avoid any workmates, and their memory sticks, that you suspect may go there.
They're exactly like movie Draculas. They have to have the door opened for them and be invited in for tea.
I can see protests coming... but protesters will kow the truth as well as me so it won't do them any good even if they do say they caught the virus by accidentally visiting the Anglican Times website.




Admittedly, I was curiously lurking somewhere I shouldn't have been so won't be doing that again in a hurry, I'll say!!! Haha

P

--------------------
Peter Connelly
www.universal-sound-design.com, www.myspace.com/universalsounddesign, www.twitter.com/PeterConnelly72


Post Extras: Print Post   Remind Me!   Notify Moderator      
SongCave



Joined: 23/11/07
Posts: 29
Loc: Earth
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784817 - 05/11/09 12:23 AM

If my work is important and I put a $ value on it - and I have a PC - I am happy to pay for a commercial product and get full support for such scenarios.

No freeware, no free trials, no "download and let me help you disinfect your PC" guff.

1. Backup regularly to a different box/PC.
2. Try and keep recording PC off the internet/email
3. Keep an image
3. Pay for a 3 year subscription to Trend (only my choice - there are other good commercial products).

You get what you pay for IMHO.

The very few freeware/open source products I use (like open office) have had some serious due diligent prior to downloading and installing - not on a whim.
Also to install only from the vendor site - not mirrors from referring sites.
The msi can be full of surprises.
In fact give me any msi and I can open, modify and recompile in the time it takes to make a cup of tea.

Questionable also are free programs from bit torrent.

If you choose to use them your choice but - as they say "Please assume the position"........


Post Extras: Print Post   Remind Me!   Notify Moderator      
oggyb



Joined: 09/02/08
Posts: 839
Loc: Leeds, UK
Re: This Boils My P!$$ new [Re: tex]
      #784830 - 05/11/09 02:36 AM

Quote tex:

Quote Pete Kaine:

Quote tex:


...




...




Dominus vobiscum et cum spiritu tuo. And mea culpa mea maximus culpa Probably...

Where's me hat?




Quite. . . since it is "mea maxima culpa". A phrase you will not find in the Anglican Times

--------------------
Jobless Graduate Bum;
www.ogonline.org


Post Extras: Print Post   Remind Me!   Notify Moderator      
Pete Kaine
active member


Joined: 10/07/03
Posts: 1020
Loc: Manchester
Re: This Boils My P!$$ new [Re: tex]
      #784862 - 05/11/09 09:33 AM

Quote tex:

Quote Pete Kaine:

Quote tex:


I can see protests coming... but protesters will kow the truth as well as me so it won't do them any good even if they do say they caught the virus by accidentally visiting the Anglican Times website.




Next time someone compromises your mates bands shoddly hosted blog and injects a script that opens a backdoor into your machine then feel free to send me a snap of yourself in a pope hat




Dominus vobiscum et cum spiritu tuo. And mea culpa mea maximus culpa Probably...





Perhaps "res ipsa loquitur" would be the cry?

--------------------
www.scan.co.uk
3XS Audio Systems


Post Extras: Print Post   Remind Me!   Notify Moderator      
DaleSmith



Joined: 29/04/08
Posts: 112
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #784891 - 05/11/09 10:27 AM

hey. use Vipre from Sunbelt software. its the best you can get, and the free trial works properly. AVG has its uses, but removing trojans isn't one of them..



Post Extras: Print Post   Remind Me!   Notify Moderator      
tex
member


Joined: 01/04/03
Posts: 597
Re: This Boils My P!$$ new [Re: oggyb]
      #784993 - 05/11/09 03:02 PM

Quote oggyb:

Quote tex:

Quote Pete Kaine:

Quote tex:


...




...




Dominus vobiscum et cum spiritu tuo. And mea culpa mea maximus culpa Probably...

Where's me hat?




Quite. . . since it is "mea maxima culpa". A phrase you will not find in the Anglican Times




The pope might if, like me, he learned latin from gladiator movies. Funny, you never see the pope's wife do you?

--------------------
If you really want to offend someone.
Tell them the truth. Would I lie to you?


Post Extras: Print Post   Remind Me!   Notify Moderator      
tex
member


Joined: 01/04/03
Posts: 597
Re: This Boils My P!$$ new [Re: DaleSmith]
      #784994 - 05/11/09 03:09 PM

Quote DaleSmith:

hey. use Vipre from Sunbelt software. its the best you can get, and the free trial works properly. AVG has its uses, but removing trojans isn't one of them..






But to get a trojan you have to invite it in, make it dinner, polish it's boots, give it the car keys and your first born, show it where you keep the knives and dig a hole for yourself in the cellar... which is why trojan removal is low on the priorities.
Watch out for programs that say you have a "trojan" and then you watch gratefully as it "removes" said trojan.
The worst virus on the planet must be Norton's.

--------------------
If you really want to offend someone.
Tell them the truth. Would I lie to you?


Post Extras: Print Post   Remind Me!   Notify Moderator      
Dynamic Mike



Joined: 31/12/06
Posts: 702
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #785579 - 08/11/09 02:15 AM

I think it's probably naive to presume the people creating viruses and the people who make a living removing them are entirely different people.

Post Extras: Print Post   Remind Me!   Notify Moderator      
learog
member


Joined: 29/03/01
Posts: 74
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #785599 - 08/11/09 08:16 AM

Agree with comment about Avira Antivirus
Good product - beat all other products in PC pro lab virus scan

Scamware removal info here - worked in corporate IT for 12 years and I recommend this
http://www.pchell.com/support/roguespywarecleaners.shtml


hope this helps

Lea


Post Extras: Print Post   Remind Me!   Notify Moderator      
Shambolic Charm



Joined: 13/07/05
Posts: 588
Re: This Boils My P!$$ new [Re: Dynamic Mike]
      #785850 - 09/11/09 10:59 AM

Quote Dynamic Mike:

I think it's probably naive to presume the people creating viruses and the people who make a living removing them are entirely different people.




yes thought about this myself. Who would put in so much time AND have the knowledge plus motivation? Circumstantial evidence only of course but thought porovoking.

--------------------
www.myspace.com/ghzibase
http://www.soundclick.com/bands/pagemusic.cfm?bandid=739263


Post Extras: Print Post   Remind Me!   Notify Moderator      
wave1



Joined: 17/02/05
Posts: 213
Re: This Boils My P!$$ new [Re: Pete (Conz) Connelly]
      #786256 - 10/11/09 11:20 AM

If that is the case they are a bunch of C%&ts who deserve an extremely painful death. I've recently had to remove a couple of trojans picked up from different university systems via the dreaded memory stick. I thought universities would be up on this stuff?

Post Extras: Print Post   Remind Me!   Notify Moderator      
Pages: 1

Rate this thread

Jump to

Extra Information
0 registered and 7 anonymous users are browsing this forum.

Moderator:  Martin Walker, Forum Admin, ForumModTeam 
Forum Permissions
      You cannot start new topics
      You cannot reply to topics
      HTML is disabled
      UBBCode is enabled
Rating: *****
Thread views: 1682


*
UBB.threads™ 6.4.2


Tuesday 9th February 2010
Login or Register here
Sub PIN or Email
Password
Remember me
Stay logged in
Lost password?
Request a reminder
Not registered?
Register Now for FREE
No https access?
Login here
WIN Great Prizes in SOS Competitions!
February 2010
On sale now at main newsagents and bookstores (or buy direct from the SOS Web Shop)
SOS current Print Magazine: click here for FULL Contents list
Click image for Contents

 Issue Selector
Buy + Download
PDF Articles
Now direct from SOS — we sell downloadable Acrobat PDF versions of SOS articles (from 99p each).
If an article you want is not currently available email the article filename to us and we will do our best to add this PDF to our Shop items.
more info
SOS Readers Ads
GRAB A BARGAIN

£1,490,009

of Second-User Gear for sale now — don't miss out!