Prev: Administrator vs User
Next: Adding Other Boot's Computer Name to list of File Security Locations?
From: timOleary on 5 Jun 2010 21:08
my daughter's dell optiplex gx620 WXPpro
malware attack has rendered her PC un useable. IE keeps trying to
connect to the ISP but can't. three popups frozen on the screen.
security warnings
she has norton av but ran it and it did nothing but see two threats.
no can fix
i was able to transfer her most valued data over to an external hdd.
but now short of reformatting and reinstalling windows, i am at a
loss.
Maybe there is a bootable solution? on my pc i got verizon internet
security suite and i bought superantispyware, and have yet to
experience a hit.

I know this email will elicit a bunch of crackpots spoofing legit
advice.
But i need to get some help for her.
that she can no longer connect to the i-net has me stumped
<>
From: Bruce Hagen on 5 Jun 2010 21:42


"timOleary" <timothy.w.oleary(a)gmail.com> wrote in message
news:cd4d5986-5a5d-4987-a476ffb5d42d83f4(a)5g2000yqz.googlegroups.com...
> my daughter's dell optiplex gx620 WXPpro
> malware attack has rendered her PC un useable. IE keeps trying to
> connect to the ISP but can't. three popups frozen on the screen.
> security warnings
> she has norton av but ran it and it did nothing but see two threats.
> no can fix
> i was able to transfer her most valued data over to an external hdd.
> but now short of reformatting and reinstalling windows, i am at a
> loss.
> Maybe there is a bootable solution? on my pc i got verizon internet
> security suite and i bought superantispyware, and have yet to
> experience a hit.
>
> I know this email will elicit a bunch of crackpots spoofing legit
> advice.
> But i need to get some help for her.
> that she can no longer connect to the i-net has me stumped
> <>


Since you can access the Internet on your machine, download and Save the
free version of this tool.

Malwarebytes Anti-Malware
http://malwarebytes.org/

Copy it to CD and install it on your daughter's machine. Run a Full Scan.
It may take about 2 hours, but this is one good free Malware removal tool.
--
Bruce Hagen
MS-MVP [Mail]
Imperial Beach, CA

From: Elmo on 5 Jun 2010 22:32
timOleary wrote:
> My daughter's Dell Optiplex gx620 XP Pro
> Malware attack has rendered her PC unusable. IE keeps trying to
> connect to the ISP but can't. Three popups frozen on the screen.
> Security warnings..
> She has Norton av but ran it and it did nothing but see two threats.
> No can fix.
> I was able to transfer her most valued data over to an external hdd,
> but now short of reformatting and reinstalling Windows, I am at a
> loss.
> Maybe there is a bootable solution? On my pc, I got Verizon internet
> security suite and I bought Superantispyware, and have yet to
> experience a hit.
>
> I know this email will elicit a bunch of crackpots spoofing legit
> advice, but I need to get some help for her.
> That she can no longer connect to the i-net has me stumped.

Download this Avira Antivir Rescue System program which will burn a CD
image to a blank CD. It's updated a few times per day. Insert the CD
into the damaged machine and let it do a scan of your system. Before
starting the scan, select "Configuration" and set to repair or rename
the infected files. Sometimes your machine won't restart after such a
repair process, so you might want to save needed files to another system
before using this. If you can't, then you can move the hard drive to
another machine to copy needed files. You can do that before, or after
this scan.

http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html

Then run these:

Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

SuperAntispyware
http://www.superantispyware.com/superantispywarefreevspro.html

AVG now has a Rescue CD that's free. They also have a free USB download
that should work on newer systems that can boot from a USB device. Get
them here:

http://www.avg.com/us-en/avg-rescue-cd

You can try some of the CD's mentioned at the following site.
BitDefender was my favorite, but if the infected machine can't connect
to the internet to get updates, Avira comes with current virus
definitions. Also, some of these just won't run on some systems,
perhaps because there's no drivers available for some system devices,
motherboard, graphics card, etc. So try a few of these till you find
one that works:

Burn BitDefender, or another program listed at the link below, to a CD
(using a working machine) and test the infected machine with it.
BitDefender also has a Rootkit checker on the Linux Desktop; run it if
you think that's the problem:

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

Download the executable rather than the .iso image, if one is available,
(though no .exe is available for BitDefender).

After the scan is run, if you elect to quarantine files, they're
quarantined to RAM and lost after you reboot. You'll need to copy any
quarantined files to the hard drive, a thumb drive or elsewhere before
exiting.

Afterwards, open Internet Options, Connections tab, click "Lan Settings"
button, deselect all.

--

Joe =o)
From: Peter Foldes on 5 Jun 2010 23:29
Tim

Do exactly as Bruce posted but also use SAS after Malwarebytes just to make sure we
get everything

Bruce already gave you this
MalwareBytes
http://www.malwarebytes.com/

After the above use this one also
SuperAntiSpyware
http://www.superantispyware.com/

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
http://www.microsoft.com/protect

"timOleary" <timothy.w.oleary(a)gmail.com> wrote in message
news:cd4d5986-5a5d-4987-a476-ffb5d42d83f4(a)5g2000yqz.googlegroups.com...
> my daughter's dell optiplex gx620 WXPpro
> malware attack has rendered her PC un useable. IE keeps trying to
> connect to the ISP but can't. three popups frozen on the screen.
> security warnings
> she has norton av but ran it and it did nothing but see two threats.
> no can fix
> i was able to transfer her most valued data over to an external hdd.
> but now short of reformatting and reinstalling windows, i am at a
> loss.
> Maybe there is a bootable solution? on my pc i got verizon internet
> security suite and i bought superantispyware, and have yet to
> experience a hit.
>
> I know this email will elicit a bunch of crackpots spoofing legit
> advice.
> But i need to get some help for her.
> that she can no longer connect to the i-net has me stumped
> <>

From: Daave on 6 Jun 2010 09:12
timOleary wrote:
> my daughter's dell optiplex gx620 WXPpro
> malware attack has rendered her PC un useable. IE keeps trying to
> connect to the ISP but can't. three popups frozen on the screen.
> security warnings
> she has norton av but ran it and it did nothing but see two threats.
> no can fix
> i was able to transfer her most valued data over to an external hdd.
> but now short of reformatting and reinstalling windows, i am at a
> loss.
> Maybe there is a bootable solution? on my pc i got verizon internet
> security suite and i bought superantispyware, and have yet to
> experience a hit.
>
> I know this email will elicit a bunch of crackpots spoofing legit
> advice.
> But i need to get some help for her.
> that she can no longer connect to the i-net has me stumped

First off, in the event that your daughter's PC is severely compromised,
the easiest, quickest, and best solution *is* to perform a Clean
Install.

It is important to determine just how bad the malware is. It is possible
that although the Web browser cannot connect, that Internet connectivity
still exists. Bring up a command prompt and ping the following address
to check:

72.14.204.103 (one of Google's addresses)

Also, post back with exact symptoms, including the complete text of all
the popup messages you see on the screen. I like the idea posted by
others to use your PC to download MBAM and install it onto hers (it may
not work, but it's certainly worth a try). It might be necessary to boot
to Safe Mode.

Depending on the malware, there may be specific strategies for it. For
example, often MBAM needs to be renamed or otherwise altered.

This site has a wealth of information:

http://www.bleepingcomputer.com/

On the left, you'll see a box containing "Latest Malware Removal
Guides." Again, when you give us specific information with regard to
which malware she has, we can help guide you to the correct guide to
use. Just so you get an idea what one looks like, see this one:

http://www.bleepingcomputer.com/virus-removal/remove-av-security-suite


 |  Next  |  Last
Pages: 1 2
Prev: Administrator vs User
Next: Adding Other Boot's Computer Name to list of File Security Locations?