Page 1 of 1

Uber-Viris?

Posted: Thu Sep 04, 2008 8:13 am
by Gekko71
A friend of mine recently was attacked by the most freaky viris I ever saw. It went right past Avast 4.8 and infected thousands of files thorughout his hard drive - mostly in windows / system32 sub directories.

When trying to clean it out with a boot scan, avast detected multiple infected files from 3 or 4 different virisus - despite the fact that previous scans (done very recently) came up clean.

Has anyone ever heard of any kind of malware that either injects three different virisus into your system at once, or makes you computer believe that its infected with multiple virises? He swears he didn't open any suspect emails or download/open any unknown warez. Anyone ever run across something like that before?

Posted: Thu Sep 04, 2008 9:03 am
by BUBBALOU
AntiVirus XP 2008

runs 3 processes and continues to download additional programs, while at the same time disabling your features in your O/S to remove it every time you reboot. To top it off it disables your antivirus and runs itself in its place

usually embedded in a fake media player codec download, or and embedded link to a fake youtube video

ENJOY

Posted: Thu Sep 04, 2008 9:17 am
by CDN_Merlin
I had that virus not 3 weeks ago. Format C was the only option. It also deleted the partition info on my 2 other drives but I was able to recover that.

Posted: Thu Sep 04, 2008 10:27 am
by Krom
Remember, no amount of antivirus software can protect your computer from you (or IE).

Posted: Thu Sep 04, 2008 10:59 am
by Grendel
Fairly harmless, but a pain to get rid of. AntiVir catches it tho.

Posted: Fri Sep 05, 2008 8:00 am
by Gekko71
yeah, that was the one - one of these days I'm going ot catch me one of the f&#KERS that writes s&#t like this and tear them a new one on behalf of computer users everywhere.

Thanks for the help guys -I'll pass the info on.

Re:

Posted: Fri Sep 05, 2008 8:33 am
by Aus-RED-5
Grendel wrote:Fairly harmless, but a pain to get rid of. AntiVir catches it tho.
x2

Last week a friend of mine ended up getting that Vista AntiVirus 2008 crap on his Vista laptop.
His copy of Norton was out of date (2006) and hadn't been updated for 3 months or more.

So, I used Norton's removal tool to get rid of the out of dated virus program. While doing so. It somehow removed the Vista AntiVirus 2008 program as well.
After installing Norton's Internet Security 2008 and fully updated it. Norton removed what was left of the viruses on his laptop.
After that, I found that he also hadn't been updating his critical updates for Vista. Nor did he have SP1 installed. :roll:
So after an hour or so doing that as well....... his laptop is back to normal.

....for the time being.... :roll:

Re:

Posted: Fri Sep 05, 2008 11:48 am
by []V[]essenjah
BUBBALOU wrote:AntiVirus XP 2008

runs 3 processes and continues to download additional programs, while at the same time disabling your features in your O/S to remove it every time you reboot. To top it off it disables your antivirus and runs itself in its place

usually embedded in a fake media player codec download, or and embedded link to a fake youtube video

ENJOY
Caught this myself earlier this summer. I had a customer that caught it and was scanning his drive with my own drive and I believe I picked it up off his PC when I was backing crap up. I had to go into delete every part of the virus by hand and delete any entries in my registry. In doing so, I damaged Blender so I had to re-install everything. I managed to get everything going for both parties though.

I actually tried AVG, Avast 2008 and a number of other scanners that I use and trust.

Posted: Fri Sep 05, 2008 12:55 pm
by Krom
When you are using a different computer to work with the drive, remember to completely sanitize the drive with multiple virus scanners on multiple passes before copying files off of it and then be careful about how you copy them anyway. Booting from a different computer will prevent any file locks from causing problems so there really is no reason not to use a blended antivirus sweep.

Posted: Wed Sep 10, 2008 5:45 am
by []V[]essenjah
Yeah, I always do, however at the time that was a brand new strain of the virus that just popped up a week before I discovered it. I used to use my work laptop for that sort of work until they gave it to another employee. That way, I could just pop the vista disk in if there was a problem and I wouldn't have to occupy my own.

I'm planning to buy my own personal laptop later this fall for just that reason actually.