A virus has invaded…

[I survived the buster call]

…my desktop. It's that super annoying type where it pretends to be your security system and starts a scan, etc., and disables any programs you start, then puts up a message saying it's infected. I think my mother accidentally let it run rampant, since everyone else here knows not to click yes, and to immediately click out of the page when it starts.

Regardless--all I want to do, I think, is boot up in SAFE mode and bring the computer back to the condition it was a few days before the infection. I believe that should work and theroestically I would not lose all the data on there if it's successful. Thing is, I can't recall how to do any of that--and I'm not sure it's even possible. Can anyone help?

[bartholemew kuma]

what is it called?
the security system

[I survived the buster call]

If I recall correctly, it's something like Vista Security 2010 or 2011 (I can look it up by turning on the computer, but I hesitate becasue it seems to spread more everytime I turn it on)–the symbol appeared after infection on the bar listing programs running, but, not surprisingly, is nowhere on the list of "all programs." I have never had anything like that---it's the one that uses the symbol that looks like the shield from AVG.

[Khamolen]

It's probably this thing:

http://www.precisesecurity.com/rogue/xp-anti-virus-2011/

[kmohyudin]

Safe mode dialogue should open up if you repeatedly press F8 while windows is booting IIRC. You can then presumably restore system to an earlier time and hopefully… the virus will not be present then...

[Sniper King]

Ah, I hate when that happens.
I think putting the computer back in time (sorta) should work. That's what my brother does…

It's better than what I used to do...
Erasing everything, making the computer how it was when you buy it.

[Femme]

Download and install this if you can: http://www.malwarebytes.org/mbam.php
If you can download it but can't install it, install it in safe mode, then run it in safe mode.

A virus like that got to my little sister's computer, that one did the trick.

[I survived the buster call]

Hmm. I have that program. Gonna try running it again.

Here is what I did so far.

I started up in SAFE mode by hitting F8. When it came up, the first choice was "Repair Computer," so I clicked that. The choices that popped up included system restore, which I did, but it never asked me for a date. It then restarted, and since it's come up the icon is gone from the sys tray, and the System manager has no random three character followed by .exe listed except one. I forgot to write it down, so I'll get it in a bit. I'm on the laptop at the moment. I took a screenshot of my system manager list, which seems abnormally long to me. One of the items listed is a MBAM.something thing, which the instructions from the page I posted earlier said would be the thing the prgram would install instead of a true version of a malware program. I did try to update my Malwarebites program, so perhaps that is what happened. I went back into safe mode, did a system restore to two days prior to infection, and it seems better, though incredibly slow now. I'm confused now about the MbAm thing, but I'm gonna try running a scan with all my various programs and see what that uncovers.

I don't think I got a CD copy of my blinketty blanketty Vista, because I ordered the computer, pre-loaded, from DELL directly and forgot to double check that they included the blinketty banketty CD in the box, so I cannot just reboot form the disk. I have noone to blame but myself, since I know that is a scam they pull. I'm an idiot, what can I say? Grrrr. My latest CD version is probably 2003, hopelessly outdated. I do not have the cash to both repair the computer and buy a newer version of Windows right now, so it'd be good if I can fix it myself, yk?

[Femme]

I'm sorry :( A slow, virus ridden computer is the worst of all annoyances. I'm dealing with that now too.

I format my computer like every few months, and fortunately I do have one genuine copy of XP.
You could always get… the other kind :ninja:

[I survived the buster call]

LOL. Being the innocent that I am, I have no idea (really) how to get "the other kind."

I do not think that the scans are effective at all, as the computer is recording errors in updating all the antiviral programs and won't let me online at all. I fear I will have to turn to a professional. I am having very uncharitable thoughts about the writers of this particular virus and what should be their fate.

[ChesCa]

Huh, wish I knew that turn back in time trick before stressing out so much. I had that virus too. Thankfully, I was looking for a new computer anyway (my old one was falling apart and this virus was pretty much putting it into the grave), but now I know how do deal with it in the future.
I wish I knew how I got it, though.

[Kitsune Inferno]

haha

That's funny. I caught this very same virus earlier this month. I had to do a system restore back to a previous day.

[I survived the buster call]

I think I am finally making progress. Turned out my local connection cable was unplugged somehow (d'uh) and that's why I couldn't get online. I'm updating the anitvirus programs and running scans as we speak, and I feel pretty good that it'll work outsemi-ok at least. Keeping my fingers crossed. Thanks for all the help!

The turn back time thing is called "system restore" by the way, lol.

BTW–my folks told me about a new anitvirus program they found called ESET. Anyone ever heard of it? Any reviews?

[Hnikarr]

It's a rogue antivirus, as you can see from the list:
http://en.wikipedia.org/wiki/List_of_rogue_security_software
Here is a definition of rogue antivirus, if you don't know them:
http://en.wikipedia.org/wiki/Rogue_security_software

They are pretty hard to remove and it really depend on the single rogue antivirus: some are easier to handle, while others are a pain in the ass.
You can try to remove it from the Control Panel, like a common program, but of course this is not enough. If any other antivirus doesn't work, you could try with something like ComboFix ( http://www.combofix.org/ ), but it's not a piece of cake. If you don't know what are you doing, you could mess things up with you computer… it's a powerful tool, but not an user-friendly one.

[I survived the buster call]

Well for the moment it appears to be gone, but of course it may pop up again in a few days, so who knows.

[DevilPogoStick]

Out of being paranoid (and the fact a virus managed to get by safe mode one time…Which shouldn't have happened but did), here's what I did when it occurs.

-Download RKill and Malwarebytes (if you got those already, good job)
-Start in Safe Mode (if you haven't done the first step, use SM with networking to get them)
-Use RKill (I know Safe Mode tends to halt any processes but due to past experience above, I'm not taking any chances), it'll do it automatically
-Open Malwarebytes and go for a full scan, wait it out and when it's done, have it restart your computer.
-To be on the safe side, try to download Microsoft Security Essentials (well, when you're computer is safe from viruses). It works pretty well and be sure to scan at certain times to be sure your computer is virus free.

...I have suffered a good number of these attacks to the point I have the MSSE window open at all times... Oo

[Fire-Fist]

I guess i am late to thread, life is really busy at my end. Anyway i guess its gone? can you post a screenshot of your task manager and start up (start>>run>>type msconfig >> startup tab)

BTW–my folks told me about a new anitvirus program they found called ESET. Anyone ever heard of it? Any reviews?

ESET nod32 is one of the best paid antivirus program. It might get a little heavy (more load on ram), but still its one of the best. Been using it on my windows 7 pc for above 6 months (though i keep reusing the trail key). Really satisfied with it.

[I survived the buster call]

Nah, blinkety blankety thing is back, Fire-Fist. I am happy to accept any help you can offer. I will PM you the requested info. later tonite (my time). I'm on the laptop at the moment.

[Nami]

Yay, I have that Virus now, too.

But I will beat the crap out of it.

grabs trident