Topic: Virus Scare.... (Read 6587 times)

IRI5HJ4CK · « **Reply #25 on:** February 15, 2009, 20:11:33 »

Well, I THINK I've gotten rid of the Virus using Bullgaurd!

I'm hoping that it does not return, because, I scanned it about three times in total all the way through and on the first time, It tried to delete it, scanned again, it was still there, so I set it to "Disinfect", now, I've scanned again and its revealed nothing!

I won't party JUST YET, incase it comes back, but I'm hopeful it has gone, here is a screeny of the scan I just did about 2 minutes ago giving the all clear (See attachment).

Do you think it has gone, Terry/anyone else?

Jack

p.s. running another scan now, just to check another hasn't come while I've been scanning....

TerryRussell · « **Reply #26 on:** February 15, 2009, 20:48:27 »

Hi Jack.

Best thing is to turn off the Windows System Restore, then reboot into SAFE MODE. Immediately run Bullguard again.

Then reboot again and run Bullguard once more.

If all is clear, you're probably OK.

If you're not sure how to turn off the system restore, see here:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam

IRI5HJ4CK · « **Reply #27 on:** February 15, 2009, 21:00:13 »

Quote from: TerryRussell on February 15, 2009, 20:48:27

Hi Jack.

Best thing is to turn off the Windows System Restore, then reboot into SAFE MODE. Immediately run Bullguard again.

Then reboot again and run Bullguard once more.

If all is clear, you're probably OK.

If you're not sure how to turn off the system restore, see here:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam

What exactly does Reboot mean Terry?

Thanks a lot for the help

Jack.

TerryRussell · « **Reply #28 on:** February 15, 2009, 21:49:20 »

REBOOT = Close it down and restart it.

IRI5HJ4CK · « **Reply #29 on:** February 15, 2009, 22:26:17 »

Hi Terry!

Thanks for your help! My system seems to be ok now, now I can go sailing again hehe

Thanks EVER so much, your a very kind person, thanks a lot

Jack
p.s. Switching off computer now, cross your fingers that its ok in the morning

TerryRussell · « **Reply #30 on:** February 15, 2009, 23:01:03 »

kjblkjggb
luyp8ypuiy34hkv ljglgu#
uggup;
u;oh; ;y8ygaoi7t0w bnqp89y4rl pq83w4yr po3yh4r

Had to stop typing with my fingers crossed.

IRI5HJ4CK · « **Reply #31 on:** February 16, 2009, 10:56:55 »

Ahhh well, Virus by the looks of it has come back for more

Switched the computer on and it said Bullgaurd had stopped Malware (Like the ones above).

What I did last night was, I Scanned right till the end on Bullgaurd, and it didn't seem to pick up anything, so I thought it was clear.

What I'll do now is,

"Best thing is to turn off the Windows System Restore, then reboot into SAFE MODE. Immediately run Bullguard again.

Then reboot again and run Bullguard once more.

If all is clear, you're probably OK."

Is that all I need to do, Terry?

Jack
p.s. Sorry to be a pain

kuusuru · « **Reply #32 on:** February 16, 2009, 11:11:32 »

Quote from: IRI5HJ4CK on February 16, 2009, 10:56:55

Ahhh well, Virus by the looks of it has come back for more Switched the computer on and it said Bullgaurd had stopped Malware (Like the ones above).

What I did last night was, I Scanned right till the end on Bullgaurd, and it didn't seem to pick up anything, so I thought it was clear.

What I'll do now is,

"Best thing is to turn off the Windows System Restore, then reboot into SAFE MODE. Immediately run Bullguard again.

Then reboot again and run Bullguard once more.

If all is clear, you're probably OK."

Is that all I need to do, Terry?

Jack
p.s. Sorry to be a pain

Is it wuauclt.exe again?

If you click on the Start button, then in the open box type in:

wuauclt /detectnow

then click OK, does that cause Bullguard to pop up a warning?

IRI5HJ4CK · « **Reply #33 on:** February 16, 2009, 12:19:44 »

I'll try that in a moment! Thanks!

Hmmm.....this is very unusual, like last night, Bullgaurd hasn't picked up anything, but its obvious something is going on since this morning the updates couldn't get through (as predicted) and it blocked Malware.

Any idea as to whats going on guys?

Jack
p.s. contacted Bullgaurd on the issue.

IRI5HJ4CK · « **Reply #34 on:** February 16, 2009, 12:46:59 »

Sorry to double post!

Bullgaurd support have got back to me saying:

"Dear Jack,

Thank you for contacting us.

- First of all, I will recommend that you to do a scan from Windows Safe Mode as only critical Windows processes in Safe Mode and BullGuard has greater permissions to remove any threats.

> To enter safe mode, restart your computer and keep tapping the F8 key from your keyboard as your computer starts (before the Windows logo screen appears).
> When the Windows Start up menu appears, please select the Safe Mode option.

Note: In Safe Mode, BullGuard will not start automatically so you will have to start it via START > All Programs > BullGuard. Please ignore the error messages you will get from BullGuard (they will tell you that some components could not be loaded). After this, just run a full system scan as usual.

- If BullGuard does not eliminate all threats, please do as follows in order to send us the scan log:
> After the scanning process finishes, scroll down to the end of the report shown by BullGuard and press the button Copy Log to Desktop > restart your computer in Normal Mode and send it as an attachment to support@bullguard.com

Thank you for your cooperation.

Best regards,

Costa Hilohi
BullGuard Support Team"

Does that sound good to you guys/Terry?

Jack

kuusuru · « **Reply #35 on:** February 16, 2009, 13:12:14 »

My advice at this stage, seeing as how you have established a conversation with the vendor of your current AV, is to pursue a resolution through them.

If you get to a point where it's not fixed and you've had a gutful, PM me and I'll tell you how to send the file to me so I can scan it, observe it in a sandbox, and disassemble it to see if it is, in fact, malware.

IRI5HJ4CK · « **Reply #36 on:** February 16, 2009, 14:51:28 »

Bah...This virus is having a laugh now

Used the instructions above, seems to be in safe mode, scanned using Bullgaurd, and its found nothing...Unsure of what to do now, whether to call someone out or experiment with Terry's info etc.

Thanks for the offer Kuusuru, I might need to

Jack.

TerryRussell · « **Reply #37 on:** February 16, 2009, 17:48:58 »

Hi Jack.

Bullguard advised you to do exactly what I did, i.e. boot into safe mode and run it. But they also asked you to send them a copy of the report if it still didn't fix it.

I'd strongly suggest you do that.

I'd also suggest that you don't try emailing a virus. Many reasons:

(1) Your ISP may decide that you've breached your terms of use and disconnect you. They can and will do it.

Here's the real killer:
(2) When you attach an infected file to an email and then send it, how many other of your systems do you think you might infect? Of course, Bullguard may strip it out, anyway.

Just do what Bullguard advised you. Follow one course, Jack.

kuusuru · « **Reply #38 on:** February 16, 2009, 22:09:25 »

Quote from: TerryRussell on February 16, 2009, 17:48:58

I'd also suggest that you don't try emailing a virus. Many reasons:

All true. That's why we in the business

use things like password-protected zip files and secure file transfers to do this

Quote from: TerryRussell on February 16, 2009, 17:48:58

Just do what Bullguard advised you. Follow one course, Jack.

Unless you're piloting the Titanic

that's good advice

, and hopefully they'll be able to help him achieve a satisfactory resolution, but if not, he at least has options.

IRI5HJ4CK · « **Reply #39 on:** February 17, 2009, 09:45:48 »

Well, guys...It would seem the virus has gone!

It would also seem that whatever happened when it was in "safe mode" the first time, it actually wasn't in safe mode and I did not realise

Typical me....

Well anyway, I thought to myself, I'll try it again before I go because nothing has appeared to have changed.

But before I did that, I thought about something, that maybe, System Restore had the virus in there, and that was what Bullgaurd was picking up. Could that be why? Just a (Slightly

) Educated guess.

But anyway, I fiddled around with the computer again, and last night, I certainly think it was in safe mode, because it looked like windows 95, and all the icons were big, and the background was black.

Did a full system scan-Nothing revealed. So I was unsure as to whether that was a good thing, or as Terry said, the Virus could get past while Bullgaurd is sniffing its tail....or something

This morning, I turned the computer on, and No warning! And it didn't say windows updates had to be stopped (Encountered a problem).

Does this mean the virus has now gone? But if it has gone....Why was nothing found, was it System Restore?

Jack.

Shipaddict · « **Reply #40 on:** February 17, 2009, 09:56:22 »

Assuming that its gone, wooohooooo!

Congratulations! I know its been getting on your wick for the past few days so now your computer is free again

Oh and, I think Terry wants the cheque to be posted in the next few days

IRI5HJ4CK · « **Reply #41 on:** February 17, 2009, 10:03:32 »

Quote from: Shipaddict on February 17, 2009, 09:56:22

Oh and, I think Terry wants the cheque to be posted in the next few days

He certainly does deserve one!!

Thanks a MILLION Terry! It would appear it HAS gone, and it has only gone (I think) Because of your advice, I think about the System Restore bit!

Thanks a lot Terry, your a star

You know where I am if you ever want anything, to return the favour

Thankyou thankyou thankyou thankyou thankyou!

Jack.

RMS Canada · « **Reply #42 on:** February 17, 2009, 17:55:26 »

I had a virus on my PC; it was difficult to get rid of.

TerryRussell · « **Reply #43 on:** February 17, 2009, 18:16:28 »

Quote from: IRI5HJ4CK on February 17, 2009, 10:03:32

He certainly does deserve one!! Thanks a MILLION Terry!

A cheque for a million? Thanks!

The system restore is a "cheap" way that virus use to re-infect th ePC. They go and infect a file in system restore as well as wherever else they go. Then, when you delete the infected file, Windows does all the work. It sees that a system file is now the wrong size (or so it thinks) afer a recent change. So it goes to its backup set and copies across the infect file again.

There's nothing magical about viruses. The technology behind them is quite basic. But its amazing how tricky it can be to cope with basic technology, sometimes.

Glad its all OK now.

IRI5HJ4CK · « **Reply #44 on:** February 17, 2009, 20:01:39 »

Thanks a lot Terry, it does seem to have gone now alright, but, one thing, how can I actually tell it has gone? or would you say that it has certainly gone now?

Also, when should I switch System Restore back on? Or should I not switch it back on at all?

Thanks a million (Cheque's in the post now

)

Jack.

TerryRussell · « **Reply #45 on:** February 17, 2009, 21:11:23 »

Hi Jack.

You've probably beaten it by now.

Get Bullguard to scan the entire PC one more time, and if all is OK, switch system restore back on.

Then restart the PC and run Bullguard again. If all is OK, then all is OK!

IRI5HJ4CK · « **Reply #46 on:** February 17, 2009, 21:18:29 »

Quote from: TerryRussell on February 17, 2009, 21:11:23

Hi Jack.

You've probably beaten it by now.

Get Bullguard to scan the entire PC one more time, and if all is OK, switch system restore back on.

Then restart the PC and run Bullguard again. If all is OK, then all is OK!

When you say the entire system, do you mean to put in safe mode again? then scan?

Thanks for your help!

Jack

TerryRussell · « **Reply #47 on:** February 17, 2009, 21:19:25 »

Quote from: IRI5HJ4CK on February 17, 2009, 21:18:29

When you say the entire system, do you mean to put in safe mode again? then scan?

Thanks for your help!

Jack

Probably a good idea to do that.

IRI5HJ4CK · « **Reply #48 on:** February 17, 2009, 21:20:54 »

Ok, Thanks Terry! I shall do that now, Bye bye! My cup of tea downstairs is calling me, along with the TV

Thanks a million, once again Terry, your advice solved my problem

Jack.

TerryRussell · « **Reply #49 on:** February 17, 2009, 23:14:37 »

Oh, so that's a cheque for two million now, is it?

Author Topic: Virus Scare.... (Read 6587 times)

TerryRussell

TerryRussell

TerryRussell

TerryRussell

TerryRussell

TerryRussell

TerryRussell

TerryRussell