message to hippiedoll, barcoboy, launderess et al...

Automatic Washer - The world's coolest Washing Machines, Dryers and Dishwashers

Help Support :

unclejohn

Well-known member
Joined
Jul 17, 2012
Messages
318
Location
Can
Hi, everyone!

Sorry to digress a little bit, but I thought I had to share with you all my ''horror story of the week''.

Believe or not my personal computer has been rendered inoperable by some sort of a ''scareware'' (a malware or virus). The hard drive is irrecuperable, the OS is destroyed! Still very lucky that the technician was able to retrieve virtually all my personal files (texts, pics, music, contacts, weblinks, etc.) since I had made NO backup (bad idea, indeed)!! :( The obvious thing is that right now it is difficult for me to communicate (e-mails, etc.). In order to access to the web I have to go, like right now, to the nearest public library (reminds me the good old days...) Still working on a couple of my washers (some small repairs here and there). Will have to buy a new comp as soon as poss. and say ''goodbye'' to my old Pentium4. :( ||| :)

The scareware my comp has opens a window about which you can do nothing. Everything is locked, your comp is hijacked. Nothing will make disappear that pop up window. Not even a restart. Nothing. That is not all: The window contains a sort of threatening warning from a false RCMP/Interpol (!) message which says that you've violated some copyrights, etc. (very unclear) and should pay immediately an amount of $100 via an CC Nr account in order to get your computer ''unlocked'' within the seven next days. No street address provided, no e-mail to contact 'them', not even a web address is indicated! Pure and simple fraud (see link below)!

What can I say in light of this horror story? Well, perhaps, the best advice is to ALWAYS keep backups (my future backup files will be stored on a USB key as well as on a good old CD-Rom). Other than that, we must beware of all those shitty viruses out there and always use of course anti-virus. Sometimes, malwares or freakwares can manage to find an ''open door''. This is what happened this week. It could happen to anyone. Nobody's comp is really completely 100% safe. Oh, one last thing (that everyone knows but many forget): we should NEVER download unknown or ''unexpected'' files which may be suspicious to contain trojan horses, malwares, trackers, etc.

 
virus

I got something similar two weeks ago- really scared me. It said it was from the F.B.I and my computer was used to look up child porn, and/or terrorist activities. It also said even if I didn't look these things up someone might have hacked in and I was still responsible- I was to go to Wal mart or CVS and get a money order for $200 and sent it to the address and my computer would be unlocked in 72 hours. I called my computer guy and he said it was a popular scam. Although he did get my computer back up with out wiping anything out it took several days and he said it was very invasive and worked around my security. JEB
 
So this actually destroys your computer?

That's ODD. I read that you can't even boot into safe mode. I wonder if someone that has backed up everything can just completely reformat the drive from the discs that came with the computer to "back to factory" specs
 
Kill the process b4 it has a chance to load

quote from the net. I have had something similar to this before. I finally got rid of it by using another computer googling the problem and finding solutions. This was a WHILE back so not the exact same thing. Anyway - here's a quote from someone who had this:

just been hit by this 1, you can quickly close down the process if you have a 3rd party process kill software (ie process explorer – procexp), but u gota do it quick before it kicks in. on occation i was able to keep the start > run > [browse] window over the top of the infected desktop. i could they right click and run/open anything from here but i had to keep this [browse] window open in order to maintain my windows on top.

also to note, my http settings r a bit fked. certain websites including common and somewhat uncommon anti-spyware sites have been blocked namely combofix, microsoft. having ran combofix first, it didnt clean it, i then had to rename the anti-malware bytes exe to something other then mbam.exe in order to get it to run. this cleared the problem, so far at least. im still picking up traces on my 2nd full scan.

just a word of warning for anyone reading this, get your self a copy of “process explorer” and stick it in your root dir, it can save ur ass in situations like this when u only have a few seconds to kill the process.

ps. sorry i cant remember the exact process name and i dont know if it variers at all but it began with a “w” something like “wyu…….”. just kill anything which looks uncommon.
 
We had this FBI virus hit as well months ago. Googling/Yahooing the problem gave me lengthy, complicated instructions for probable solutions.

Basically, when I had the Norton guy on the phone, we restarted in safe mode and restored to an earlier restore point. Done! There was no permanent file damage done.

I know some people here don't like Norton/Symantec, but they've always helped me the few times a problem's arisen!

Chuck
 
Same Thing Happened To Us

First that message is a scam, so don't send them anything.

If you didn't have an excellent spyware program installed on your system you maybe out of luck.

There are a few excellent spyware programs that may be able to help rescue your system.

First tool in my kit is Malwarebytes.

If you are running a Windows based system download and run Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx

What you need to do is start your computer in safe mode and or set your antivirus program/spyware program to run at boot before full system starts. This will (hopefully) allow finding and removal of the virus/Trojan before it loads and takes over your system.

I went into Windows and reset it to go "back" as far as possible at restart in order to get a boot log that was before the files became corrupted. This allowed me to run antivirus scan both at boot, safe mode and after restarting.

What these sort of programs often do is not delete files so much as change your folder/file setting to make things hidden. To see if your files are still there reset your Windows folder options to "show all files". If you see the missing files but in a lighter color than others that means they have been set to "hide".

 
Since your data is at least saved, I would just recommend you ask your tech to Format/Re-install Windows on your PC, rather than you spend lots of money on a new one. Believe me, if you haven't had Windows re-installed before, be prepared. Your computer will be blazingly fast and like new again.

 

Overtime, the Windows registry becomes a real mess. On another home computer, I ran CCleaner recently and it took a few minutes to find all the broken registry links as well as Internet Explorer and Firefox temporary files (This was a Windows 7 PC). Whilst this issue is improved with more recent versions of Windows, clean installation or cleanup up the registry are essential to longtime stability in older Windows OS's (Main 9x/Me series).

 

For future prevention, I recommend installing FREE software for Firewall, Anti-Virus, Spyware/Malware. Anti-Virus that you pay for is expensive bloatware. AVG Free Edition became like this, so I ditched it in favour of Avast. Here's my personal list:

<ul>
<li>Avast Free Anti-Virus</li>
<li>Malwarebytes Anti-Malware</li>
<li>Spybot Search & Destory (I think this is still around)</li>
<li>Tiny Personal Firewall (Windows Vista/7 Firewalls are fairly good, as they offer in/out protection. XP and below should use an add-on. Make sure your DSL Modem or Router is using its firewall, then run a ShieldsUp! test. https://www.grc.com/x/ne.dll?bh0bkyd2 and run ALL the tests to check your vulnerabilities. Don't worry about the advice he offers, it is for Windows 9x/Me)</li>
<li>Ensure you have Windows/Microsoft Update enabled (or set to remind you if on Dial-Up connection) to ensure that your OS is kept patched. If you use Windows XP, support ends April next year. Provided you are careful and keep up-to-date software, it should be okay. I ran Service pack 1 with NO antivirus for 10 months in 2010. </li>
</ul>
You should also use an Internet Browser such as Firefox, Chrome or Opera. And I would recommend you get the "DoNotTrackMe" and "AdBlock" apps on there too, as this can help dodgy advertisements and any cookies in your browser that might "Phone home" about your system's vulnerabilities. Internet Explorer is easily compromised, is slow and just garbage. 

 

Exercise CAUTION on the web:

<ul>
<li>Ensure your e-mail client (Outlook or online versions) have spam filtering setup and enabled</li>
<li>Don't open e-mails or attachments from people you DON'T KNOW (Obvious, I know)</li>
<li>Scan ALL attachments from people you DO know, incase their computer is infected</li>
<li>DON'T open links from friends, especially in if sent separately in another message</li>
<li>Don't install those Smiley-Icons onto your PC - these are sometimes loaded with Viruses, Malware etc</li>
<li>Don't browse on any websites that offer explicit content, such as pictures, torrents etc. And if you do, make sure you scan any downloaded files FIRST</li>
<li>Use an ancient version of Windows (Power Users only)... Many viruses today won't run on Windows 9x/Me - you'll get "This program requires Windows NT or higher to run" messages</li>
</ul>
I know I stated some obvious stuff there, but caution on the web is key. If you are careful and use all the good software (I don't recommend Microsoft's "stuff" - it is bloat and very ineffective), then it is unlikely you will have trouble. Heed warnings from your browser about 'dangerous' websites too!
 
Re-Installing Windows

For quite sometime now MS no longer sends disks with the complete OS for reinstallation whenever one choses. IIRC what is provided is able to be done for a limited number of times (once or twice), afterwards there is a charge.

Reasons for this vary but most feel that it is Microsoft's way of combating pirated software and enhancing sales.
 
That's exactly what they are doing. I have heard of a few people who have used MS OS disks(Windows XP,Vista, etc.) that after a few weeks of operation have frozen on boot up with a message stating that Microsoft has determined that the system disk you used to load your system with is already in use on another computer. Each disk has a separate ID number and MS tracks this info. Sure enough, the guy who had this happen had borrowed the Windows disk from "a friend". He had to go out and buy his own disk.

And yes, if you have a backup of your hard disk on another hard drive you can just reformat the disk and reload it from the backup and you're done.

We use a USB 1TB backup disk on our system. We also use Acronis Tru-Backup, my favorite backup software. If you do a full backup and then if you only need one file restored, you can "mount" the backup version and just copy the one file you need onto the hard disk again. Tru-Backup is pretty cheap and it backs up a hard drive very quickly. It's also very easy to use.
 
 
I have a WinNT system that's 15 or 16 YEARS old, the OS has never been reloaded, and it's perfectly stable.

Anyway, I've never grasped how a drive (or system as a whole) could be impacted by an infection to the point that a reformat and OS reinstall couldn't fix the problem.  I suppose if the mobo BIOS or drive firmware is infected ... but that has never happened to me or to any system I've handled.
 
If you are a bit adventurous move on to something like Linux Mint.  My Win 7 system crashed about a month ago, luckily I had a back up, I did reinstall win 7 but I also installed Mint.  I had been running it on a laptop and liked it, decided to go with it on my main system.  For windows users it will feel very similar, but Linux is not prone to virus and malware attacks -yet.

 

Mint can be run from a CD/DVD or a USB drive and leave your system as is.  Also serves as an emergency backup since your hard drive is not used.  It can also help recover flies if you give it access to your hard drive.  Here is a link to the site:

 

 
Interesting you should say that Launderess, as I have not heard of it. If that was the case, then I'd buy myself a NEW retail copy of Windows 7 Home Premium or Professional (if you run a domain...) to do so, or find a NOS copy of XP Home or Professional. That way, you avoid any situation Launderess describes.

 

I've actually use my 2 copies of XP Home (with SP1a and SP2) on 5 different computers (a friends laptop, a virtual pc and 3 other PC's at home) numerous times (including installations that have XP service packs slipstreamed by myself), and Microsoft hasn't kicked up about it yet. Though I'm sure that the activation limit will be reached some day and I won't be able to use those copies anymore - hopefully XP won't need activation once they can support next year. That, or they'll cancel it and prevent new copies being activated. In which case any computers needing XP will get Windows 2K instead! (Hmmph). 

Lets hope M$ doesn't see that...
 
My OS is also 14yo and the original factory image. And I have NEVER had antivirus, just a free firewall (zonealarm). Not that hackers haven't tried by email.

Back then the email services had no screening. I wrote to mine early in the 00s saying I could recognize a virus file by the first few lines of code and if they gave a shatner they could too. Sure enough, about 18 months later email services started screening for viruses and I haven't seen one in a very long time.

Only trouble with a 14yo OS is that certain online services malfunction. Youtube/Flash was the first to go, followed closely by Adobe Acrobat, both products of the same company which is infamous for incompatibility among its own versions. Most of my online utility billpay services have disowned me and I have to do it by phone.

But on sites that DO work, I get the same performance with P400 (MHz) and W98 that the latest MS bloatware gets at 3GHz. As long as I leave java-script disabled [rolleyes].
 
What is the origin of this horrible virus? It was on the news last week some USA military concerns were hit by some kind of cyberware. Chuck is right the Norton guys are very helpful. Last trouble I experienced was some glitch that caused the number lock to be "turned on" on the "on screen" keyboard. Trust me i did not activate it. I had no idea it was there. alr
 
A lot of people had to migrate from Windows 98 to XP when they no longer could find a Anti-Virus program that supported Win98.

A friend of ours had to recently restore his system from backup when he got that virus that just shows a image of a snowman that looks like he was printed on a dot matrix printer on the screen right after boot up. He just couldn't get rid of it.
So he reformatted and reinstalled. Even Malwarebytes couldn't get rid of it and it slipped right past MacAfee.

Speaking of Malwarebytes, it looks like they haven't updated their definitions table in quite some time, like 8 months or so. Is this a dead product?
 

Latest posts

Back
Top