´Security Tool´virus

[The Claw]

NT, If it is still there AVG isn't picking it up and everything (fingers crossed) seems back to normal?

[Nearly There]

AVG didnt pick it up for me either, sounds like you have a result though, is everything working at normal speed? if you have a few hours spare might be worth running the full service from microsoft, it defrags as well as find things that shouldnt be there.

Windows Live OneCare safety scanner: Free online tool for PC health and safety

[Avionker]

What's the name of this virus?

[Nearly There]

Spy Tool and/or Security Tool

[Avionker]

Oh ok, I got hit by this the other day:-

Encyclopedia entry: Rogue:Win32/FakePAV - Learn more about malware - Microsoft Malware Protection Center

As soon as it popped up on the screen I thought it looked "hooky", so I shut down my browser and started a scan. Microsoft security essentials cleared it no problems, so I guess it wasn't the same thing.

[The Claw]

Nearly There, thanks a million for that link. My computer is now much faster!

That virus is definitely linked to Ebay, whilst browsing Ebay I had another attack only this time it was stopped by AVG.

[glad rag]

Apologies

Bugger, think I have a similar problem.
A fishing website has unwittingly been hosting something nasty in Java apparently and last night PC started displaying multiple windows "store" failure messages, the badness stops only after un-installing AVAST completely and restarts when AVAST is reloaded.

Any hints on online viri checkers that check system before you reload an AV program??

GR

Sorry guys should open eyes more

[Mike-Bracknell]

Originally Posted by glad rag

Bugger, think I have a similar problem.
A fishing website has unwittingly been hosting something nasty in Java apparently and last night PC started displaying multiple windows "store" failure messages, the badness stops only after un-installing AVAST completely and restarts when AVAST is reloaded.

Any hints on online viri checkers that check system before you reload an AV program??

GR

Sorry guys should open eyes more

Malwarebytes

Download it, update it, boot into safe mode with command prompt and navigate to cprogram files\malwarebytes' antimalware by using 'cd' commands in the command prompt, then run mbam.exe
Do a full scan, and remove anything it finds that's bad.

[glad rag]

It seems that the PC won't let me use safe mode as it no longer recognises the Admin users password!

Hmm.

Hari Kari time.

[green granite]

Have you tried just hitting return ie a blank password?

[glad rag]

No GG I have never never heard of that one --what happenned was eventually the person remembered her admin password (spaces are a terrible thing) and it went to the welcome rotating blue circle working symbol, then about 10-15 seconds later reverted back to the wrong password/user name window thing.

Also I have isolated all startup items via msconfig, still doing it, last software addition-from HP [cd for a new printer], has been removed, can't get fully into safe mode,[ however it tries to load windows files but freezes/stops at one called #####CHDISK#### in the file listing ......] running full malware scan at preent but obviously not in safe mode.

Thinking of booting from the supplied Dell OS disk to see if it will go into a OS repair mode........................scratching head now I'm afraid...

GR.

[Mike-Bracknell]

Offline NT Password & Registry Editor

[TURIN]

I'd be interested to hear HOW you victims were caught!

Picked mine up from iMdB checking out who the gorgeous actress in The Sea Wolves is/was. (Barbera Kellerman if anyones curious).

Avast would scan but CCleaner wouldn't. I did a system restore to the previous week and ran CCleaner in safe mode. This seemed to do the trick. A quick (half an hour) Avast system scan picked up nada, but all seems ok now.

It seems a Java vulnerability is letting it in, from what I can glean from the t'interweb.

Thanks for the link to Mbam.

[Hobo]

Glad Rag You can start in safe mode by swithching on from dead while holding the F8 key down. You don't need any password for this.

[WhatsThatNoise]

Microsoft Essentials stopped something from eBay yesterday. Big red screen warning stating that "shopping.Ebay" page was unsafe and not to continue.

Clicked off the page and came back later with no problems.

[PPRuNe Dispatcher]

A lot of websites are currently dangerous due to poisoned adverts.

Tainted ads punt scareware to surfers on LSE and Myvue sites ? The Register

In other words, every website with ads is a potential risk.

PPD

[BOAC]

Hello PPD - long time no see....

Isn't PPRune a website with ad
v e
r
t s

Damn - what has happened to my screen?

[green granite]

So we can reclassify Adblock as an anti-virus program then.

[glad rag]

I'm baaccckkkk

So we can reclassify Adblockt as an anti-virus program then.

In my case the damn thing got through adblock/noscript as the "site" already had "permissions" Grrrrr

Which neatly brings me onto a point.
When the site owner casually writes up the infection [on his forum matters thread] as a Java problem and will be" fixed within a week", does this not leave them liable for the damage caused by their continuing to keep their infected site up?

[BOAC]

Just been talking to my local PC shop who are rubbing their hands in glee. 48 machines in in 14 days. Culprits appear to be McAffee and AVG at the moment