Uber-Viris?

For system help, all hardware / software topics NOTE: use Coders Corner for all coders topics.

Moderators: Krom, Grendel

Post Reply
User avatar
Gekko71
DBB Captain
DBB Captain
Posts: 761
Joined: Sun May 27, 2007 2:50 am
Location: Perth

Uber-Viris?

Post by Gekko71 »

A friend of mine recently was attacked by the most freaky viris I ever saw. It went right past Avast 4.8 and infected thousands of files thorughout his hard drive - mostly in windows / system32 sub directories.

When trying to clean it out with a boot scan, avast detected multiple infected files from 3 or 4 different virisus - despite the fact that previous scans (done very recently) came up clean.

Has anyone ever heard of any kind of malware that either injects three different virisus into your system at once, or makes you computer believe that its infected with multiple virises? He swears he didn't open any suspect emails or download/open any unknown warez. Anyone ever run across something like that before?
User avatar
BUBBALOU
DBB Benefactor
DBB Benefactor
Posts: 4198
Joined: Tue Aug 24, 1999 2:01 am
Location: Dallas Texas USA
Contact:

Post by BUBBALOU »

AntiVirus XP 2008

runs 3 processes and continues to download additional programs, while at the same time disabling your features in your O/S to remove it every time you reboot. To top it off it disables your antivirus and runs itself in its place

usually embedded in a fake media player codec download, or and embedded link to a fake youtube video

ENJOY

I seem to have a better workout dodging your stupidity than attempting to grasp the weight of your intelligence.
User avatar
CDN_Merlin
DBB_Master
DBB_Master
Posts: 9781
Joined: Thu Nov 05, 1998 12:01 pm
Location: Capital Of Canada

Post by CDN_Merlin »

I had that virus not 3 weeks ago. Format C was the only option. It also deleted the partition info on my 2 other drives but I was able to recover that.
User avatar
Krom
DBB Database Master
DBB Database Master
Posts: 16138
Joined: Sun Nov 29, 1998 3:01 am
Location: Camping the energy center. BTW, did you know you can have up to 100 characters in this location box?
Contact:

Post by Krom »

Remember, no amount of antivirus software can protect your computer from you (or IE).
User avatar
Grendel
3d Pro Master
3d Pro Master
Posts: 4390
Joined: Mon Oct 28, 2002 3:01 am
Location: Corvallis OR, USA

Post by Grendel »

Fairly harmless, but a pain to get rid of. AntiVir catches it tho.
ImageImage
User avatar
Gekko71
DBB Captain
DBB Captain
Posts: 761
Joined: Sun May 27, 2007 2:50 am
Location: Perth

Post by Gekko71 »

yeah, that was the one - one of these days I'm going ot catch me one of the f&#KERS that writes s&#t like this and tear them a new one on behalf of computer users everywhere.

Thanks for the help guys -I'll pass the info on.
User avatar
Aus-RED-5
DBB Friend
DBB Friend
Posts: 1604
Joined: Fri Apr 23, 2004 7:27 am
Location: Adelaide, South Australia
Contact:

Re:

Post by Aus-RED-5 »

Grendel wrote:Fairly harmless, but a pain to get rid of. AntiVir catches it tho.
x2

Last week a friend of mine ended up getting that Vista AntiVirus 2008 crap on his Vista laptop.
His copy of Norton was out of date (2006) and hadn't been updated for 3 months or more.

So, I used Norton's removal tool to get rid of the out of dated virus program. While doing so. It somehow removed the Vista AntiVirus 2008 program as well.
After installing Norton's Internet Security 2008 and fully updated it. Norton removed what was left of the viruses on his laptop.
After that, I found that he also hadn't been updating his critical updates for Vista. Nor did he have SP1 installed. :roll:
So after an hour or so doing that as well....... his laptop is back to normal.

....for the time being.... :roll:
User avatar
[]V[]essenjah
DBB Defender
DBB Defender
Posts: 3512
Joined: Mon Dec 20, 1999 3:01 am

Re:

Post by []V[]essenjah »

BUBBALOU wrote:AntiVirus XP 2008

runs 3 processes and continues to download additional programs, while at the same time disabling your features in your O/S to remove it every time you reboot. To top it off it disables your antivirus and runs itself in its place

usually embedded in a fake media player codec download, or and embedded link to a fake youtube video

ENJOY
Caught this myself earlier this summer. I had a customer that caught it and was scanning his drive with my own drive and I believe I picked it up off his PC when I was backing crap up. I had to go into delete every part of the virus by hand and delete any entries in my registry. In doing so, I damaged Blender so I had to re-install everything. I managed to get everything going for both parties though.

I actually tried AVG, Avast 2008 and a number of other scanners that I use and trust.
User avatar
Krom
DBB Database Master
DBB Database Master
Posts: 16138
Joined: Sun Nov 29, 1998 3:01 am
Location: Camping the energy center. BTW, did you know you can have up to 100 characters in this location box?
Contact:

Post by Krom »

When you are using a different computer to work with the drive, remember to completely sanitize the drive with multiple virus scanners on multiple passes before copying files off of it and then be careful about how you copy them anyway. Booting from a different computer will prevent any file locks from causing problems so there really is no reason not to use a blended antivirus sweep.
User avatar
[]V[]essenjah
DBB Defender
DBB Defender
Posts: 3512
Joined: Mon Dec 20, 1999 3:01 am

Post by []V[]essenjah »

Yeah, I always do, however at the time that was a brand new strain of the virus that just popped up a week before I discovered it. I used to use my work laptop for that sort of work until they gave it to another employee. That way, I could just pop the vista disk in if there was a problem and I wouldn't have to occupy my own.

I'm planning to buy my own personal laptop later this fall for just that reason actually.
Post Reply