Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Truean]

So I have a rather persistent virus. Hopefully I'm not looking at a total system restore to factory condition. Because if I am, I loose my entire semester of notes, and there will be murder, aggravated, premeditated, stabbity, murder.

Seriously though, I have had my hands full with this thing. It hijacked my browser and every single file I try to open on my computer. I managed to even get online by securing a small enough portion of my outgoing signal not to alert the damn virus (thus avoiding the hijack). Thus, I feel like I am on a 56k modem. Even getting online AT ALL, was a lesser known Christmas miracle in October. It has taken an hour and a half to download 46% of lavasoft's adaware on a freaking T1 line. Yeah....
________________________________________________________________________________________________________________

The virus is titled Microsoft security alert essentials. It is masquerading  as the popular Microsoft product, but it is NOT. Rather it is attempting to trick me into letting it "clean computer" for a "trojan" (it is the trojan)  and wants me to purchase a subscription to some bogus anti virus program not offered through Microsoft. A quick google search for this virus' name will tell you everything about it. I have a feeling I would have beaten it already if it didn't hijack my browser and file access so damn well.

That said, anyone know how to kill this thing and all its backup files in one go?

In the meantime I'll continue downloading ad aware on my limited connection.

Yours Truly,
Truean.

[PenguinOverlord]

Downloading MalwareBytes, updating it, and running it in safe mode tends to work wonders, in my opinion. If the virus blocks MalwareBytes, download it on another computer, update it, transfer it to your computer white it is in Safe Mode.

...
Oh, the trojan take-control-of-your-computer stuff. Yeah, I had one of those. Either revert to an earlier point, before you got it, or Malwarebytes.

[KaminaSquirtle]

Downloading MalwareBytes, updating it, and running it in safe mode tends to work wonders, in my opinion. If the virus blocks MalwareBytes, download it on another computer, update it, transfer it to your computer white it is in Safe Mode. I had one like that.

...
Oh, the trojan take-control-of-your-computer stuff. Yeah, I had one of those. Either revert to an earlier point, before you got it, or Malwarebytes.

I was about to post almost exactly this.  You ninja.
As long as you can boot into safe mode, you should be fine.  From there you can get things worked out.  If you can't...
Than you'll probably want someone more experienced than me.

[Akura]

I suppose you haven't used Task Manager to find out its .exe name and location and delete that?

[MetalSlimeHunt]

Or used Task Manager to keep it from messing with you? Also, in my experiance these types of viruses can re-install themselves using regestry files, so make sure you kill those as well. And get yourself an Antivirus.

[Eagle_eye]

I'd recommend the avg free if you don't want to fork out any money. It's the only antivirus software I know of with a free version that actually blocks viruses.

[Cthulhu]

I've gotten this before.  Get rkill.exe when your internet is working.  Run that (If it gets hijacked by the virus rename it eXplorer.exe) and it'll kill the virus process, and then print a log telling you where the virus is.  Navigate to that folder and delete the virus, go to internet options and stop it from connecting to the proxy server that causes your internet problems, and then run Malwarebytes to make sure you're clean.  Easy.

[Truean]

Neato. Thanks for the suggestions. Will follow through (subject to connectivity limitations).

Also a large related problem. I need to take detailed notes for my Wills Estates and Trusts Law School Class, but can't use crap for programs (microsoft word, even notebook).

However, clearly I can use this or other internet text posting.

I might actually post my notes here or elsewhere online. It'd be boring, but I could care less if people read about probate will contests, Ohio Revised Code Sections etc.
My only concern is that I don't want to bother people.... meh.... I'll probably do it just because I have no other option and I have to know this crap for the final. Also, it is on the bar exam.

Perhaps I'll post it in a spoiler. You can all look at my notes or not . That way it won't bother those who don't want to see it.

Thank you for your time and concern,
Truean

[Bauglir]

-snip-

[Truean]

Help. This virus won't go away.

[Humaan]

If your connection is terrible, and the virus is hijacking it, remember, Hardware beats Software in computer Rock-Paper-Scissors. Get rid of all connection to the internet, and the virus will be significantly weaker, or it will stop destroying you nearly as much.

[Bauglir]

-snip-

[x2yzh9]

I had the exact same problem, I just system restored to Win 7, and it worked.

[Truean]

Well, I am cautiously optimistic that I have beaten the virus. However, the stupid thing tricked me before only to come back a few hours later. That said, I don't want to jinx it.

The problem was that the virus had various hidden files throughout my directories and registry that would reinstall it when I deleted or nerfed (changed the programming code to be harmless or cause an error in the execution). Therefore, no matter what I did, the virus just reinstalled itself fresh from about 64 different files scattered throughout my hard drive.

I couldn't get rid of/alter them all at once by myself.

Strangely, good old Adaware from Lavasoft corporation managed to get them all at once. The free version works quite well. I'm glad I donated a dollar to them all those years ago. I doubt it tipped the scales for them, but it was what I had.

Let's hope that nothing was missed and this file is gone for good. Cross your fingers for me please.

Again, I appreciate your attention, and advice. Thank you all very much.

Yours Truly
Truean

P.S. I guess I'll leave my notes up here, but clearly I'll be copying and pasting them into a word document once I realize the virus has not reinstalled itself for the 27th time.

[Jay]

I had the exact same problem, I just system restored to Win 7, and it worked.

Gah.
That's even worse than "downloading" from a CD.
You cannot -restore- to what you were not before.  (rhyme )

Unless you were already running Windows 7.  In which case the Win 7 addendum would be entirely irrelevant.