Author Topic: Ive learnt my lesson (Read 14067 times)

chriscool9 · « **on:** October 19, 2006, 11:35:17 AM »

Ok guys, i was on a WAREZ site (yes ive learnt my lesson from the stupid websites) and within a half a second of the site loading i get the little window that you get when you select to download something, ie if you want to 'Save to Disk' or 'Open With'. Then about half a second later i see a message bottom right that tells me a virus has tried to get into my laptop (ive seen it before so it didint bother me) but then Avast! goes mad and starts telling me what to do with it, it recomends that i move it to chest, which i do. So i instantly press the button on my laptop to disable the wireless card. Problem over? I hope so but i have a couple of questions.
The virus name was Win32: Dialer-521 [Trj], so i googled it and i went on a forum and it said that someone had caught it but Avast! didint pick it up, so this has got me worried. Ill do a scan, but what if it doesnt pick it up

Also im running on wireless, so even if i am infected will it even have any effect?
Thanks in advance

Chris

unlovedwarrior · « **Reply #1 on:** October 19, 2006, 11:37:44 AM »

use ewido spybot adaware windows defender

its a dailer spybot should get it

nice to see you here chris

unlovedwarrior

chriscool9 · « **Reply #2 on:** October 19, 2006, 12:08:58 PM »

Quote

nice to see you here chris

Hehehe thanks.
I tried Edwido a while back and i had to uninstall it becuase it kept making false reports on things on my laptop. Anyway i went onto Avast! and selected 'Scheduale Boot Time Scan' so it told me to restart laptop where it did a scan. Everything came up clean, but one thing worried me. It said access to one file was denied. Here is the log below:

10/19/2006 18:39
Scan of all local drives
File C:\hiberfil.sys Error 0xC0000022 {Access Denied}

Number of searched folders: 6234
Number of tested files: 89998
Number of infected files: 0

So she says theres no viruses but like i said earlier i found a post on a forum that he did ahve the virus but no scanners piked it up

Thanks for help Unloved

Chris

unlovedwarrior · « **Reply #3 on:** October 19, 2006, 12:11:13 PM »

http://www.google.com/search?hl=en&q=hiberfil.sys&btnG=Google+Search

LOOK AROUND HERE

did you try the other programs

aslo try stinger from the FAQ spyware/virus sticky

Raptor · « **Reply #4 on:** October 19, 2006, 12:39:38 PM »

Are you an Internet Explorer user?

chriscool9 · « **Reply #5 on:** October 19, 2006, 01:27:00 PM »

Quote

http://www.google.com/search?hl=en&q=hiberfil.sys&btnG=Google+Search

LOOK AROUND HERE

did you try the other programs

aslo try stinger from the FAQ spyware/virus sticky

Brillient thanks matey!!!
Also Raptor no i use Firefox, find it alot more user friendly, attractive and faster.

Chris

patio · « **Reply #6 on:** October 19, 2006, 01:32:05 PM »

I have no problems with Ewido...i don't use the live scanning process as well.

patio. 8-)

chriscool9 · « **Reply #7 on:** October 19, 2006, 01:37:36 PM »

Well it was ok, untill that really irritating alarm started sounding alerting me that firefox was chockablock full of spyware. It then tried to tell me that numerous other programs where full of it, so i jsut uninstalled it.
Anyway Unlovedwarrior ive decided that its best off not deleating the hiberfil.sys seing as its used for hibernation and my laptop has a dodgey power connection which can often result in it going into hibernation. Thanks so much for the info anyway.
Also should i still be worried that the virus still might be active within my laptop eventhough it wasnt picked up, bearing in mind that there was another user that has it but Avast! didint pick it up.
Thanks again

Chris

unlovedwarrior · « **Reply #8 on:** October 19, 2006, 01:39:16 PM »

did you try stinger

chriscool9 · « **Reply #9 on:** October 19, 2006, 01:43:05 PM »

Its scanning now...
Although when i looked at the List Viruses it didint ahve the one im worried about. Still no harm in running it. Ill edit this psot with the results once i get them.
Thanks

Chris

unlovedwarrior · « **Reply #10 on:** October 19, 2006, 01:44:12 PM »

u dled the new one right

chriscool9 · « **Reply #11 on:** October 19, 2006, 01:45:29 PM »

The new one Stinger v2.6.0??

Chris

unlovedwarrior · « **Reply #12 on:** October 19, 2006, 01:46:17 PM »

k what about spybot??

chriscool9 · « **Reply #13 on:** October 19, 2006, 01:51:48 PM »

Nothing with that.... So far so good!!!!
Btw thanks for all this!

Chris

unlovedwarrior · « **Reply #14 on:** October 19, 2006, 01:54:54 PM »

no problem this section is where i belong and enjoy being here. try avg free, uninstall avast and install avg free patio just posted the newest one in this forum

and if your real freaked out about you can back up any important files and reformat thatll it rid of the buggger

chriscool9 · « **Reply #15 on:** October 19, 2006, 01:57:07 PM »

Hehehe, well this stinger could take a good while. Could be a good 30 mins so ill reply when its finished.

Chris

2k_dummy · « **Reply #16 on:** October 19, 2006, 02:22:53 PM »

Quote

Avast! goes mad and starts telling me what to do with it, it recomends that i move it to chest, which i do.

Apparently AVAST did pick it up as soon as it downloaded. It is now safely quarentined so that it cannot execute. When you scan, it won't detect it inside its own quarentine folder because it put it there. You can go into that folder and permanently delete the item. The guy who got infected with it was like the old saying, "a day late and a dollar short". He either didn't have his virus protection running or it was not properly updated.

chriscool9 · « **Reply #17 on:** October 19, 2006, 02:47:02 PM »

Quote

Quote
Avast! goes mad and starts telling me what to do with it, it recomends that i move it to chest, which i do.
Apparently AVAST did pick it up as soon as it downloaded. It is now safely quarentined so that it cannot execute. When you scan, it won't detect it inside its own quarentine folder because it put it there. You can go into that folder and permanently delete the item. The guy who got infected with it was like the old saying, "a day late and a dollar short". He either didn't have his virus protection running or it was not properly updated.

Ok thanks for that, it reasures me, ill just deleate it via the cheast.
Anyway ive got that thing done Unlovedwarrior and its says im completely free of anything.
So i take it from all the scans and whatnot ive done, they have all come up clear, i presume im safe?!

Chris

unlovedwarrior · « **Reply #18 on:** October 19, 2006, 02:49:20 PM »

to make run avast again a quick scan

chriscool9 · « **Reply #19 on:** October 19, 2006, 02:54:17 PM »

Ok, i might not have the results of it up by tonight but defo tommorow seeing as im not at school for the whole of this week

Chris

Raptor · « **Reply #20 on:** October 19, 2006, 03:18:34 PM »

You should download the Noscript extension for Firefox and only manually accept and deny cookies. Disable third party cookies as they are always irrelevant.

chriscool9 · « **Reply #21 on:** October 19, 2006, 03:39:10 PM »

Yea ive got my FF custome enabled for cookies, only websites i put in the list are able to.
Ok well scan done unlovedwarrior and everything seems ticketyboo.
But i did get this, ive attached an image of it, as you may notice all the files have something to do with Rihanna (the singer, shes stuning!!) , could these files be infected, becuase all it says is 'Unable to scan'....
Thanks again in advance

Chris

unlovedwarrior · « **Reply #22 on:** October 19, 2006, 03:43:02 PM »

try scanning them in safe mode the whole folder that there are in

Raptor · « **Reply #23 on:** October 19, 2006, 03:45:21 PM »

Rihanna who? I still listen to Ella Fitzgerald.

Strange that your files are unscanable . In what folder are they located?

chriscool9 · « **Reply #24 on:** October 19, 2006, 03:47:14 PM »

Errrmm, good question Raptor, give me a few mins.

Chris

chriscool9 · « **Reply #25 on:** October 19, 2006, 04:07:43 PM »

This might sound silly but i dont think they exist, i cant find them anywhere and some of them i dont even think ive downloaded

Anyway i think theyll be ok becuase theyre files that cant really become infected, i mean .m3u (which is a playlist i think) isnt able to be infected....
So am i all clear?!

Chris

unlovedwarrior · « **Reply #26 on:** October 19, 2006, 04:09:29 PM »

if avg found them then they are they some where are u sure they arent hidden

chriscool9 · « **Reply #27 on:** October 19, 2006, 04:13:41 PM »

AVG?
Do you mean Avast! ?? Anyway ill have another look around.

Chris

unlovedwarrior · « **Reply #28 on:** October 19, 2006, 04:15:01 PM »

yea do a search for one of the songs

start search

chriscool9 · « **Reply #29 on:** October 19, 2006, 04:24:26 PM »

Ok i looked at that log and it made me remember that a while back I 'accuired' Rihanna's album (it's WinRar'd), i went to where the album was located and sure enough all the file names in the log are the same as the ones in the Rar file. But its funny because there are alot of other Rar'd files in that directory and they scan fine.

Chris

Raptor · « **Reply #30 on:** October 19, 2006, 04:25:00 PM »

Quote

This might sound silly but i dont think they exist, i cant find them anywhere and some of them i dont even think ive downloaded
Anyway i think theyll be ok becuase theyre files that cant really become infected, i mean .m3u (which is a playlist i think) isnt able to be infected....
So am i all clear?!

Chris

Try a registry cleaner, perhaps they're broken entries of some sort..

chriscool9 · « **Reply #31 on:** October 19, 2006, 04:28:06 PM »

Quote

Ok i looked at that log and it made me remember that a while back I 'accuired' Rihanna's album (it's WinRar'd), i went to where the album was located and sure enough all the file names in the log are the same as the ones in the Rar file. But its funny because there are alot of other Rar'd files in that directory and they scan fine.

Chris

Thanks anyway Raptor, sorted it, still a bit weried though that it wont scan Rihanna but will the others. Just one of those things i guess..
Again thanks anyway.
Does everything look ok to you two..??

Chris

unlovedwarrior · « **Reply #32 on:** October 19, 2006, 10:06:36 PM »

if you want you can use Ccleaners issue scan to clean ur register up a notch... but is everything working fine other wise?? or are there other issues??

chriscool9 · « **Reply #33 on:** October 20, 2006, 01:33:30 AM »

Hey, soz i didint reply i had to get to sleep. Im not used to being on the laptop for that much time, was like 3 hours or something

I got CCleaner already and jsut cleaned everythig up. Also yea i think everything else seems in working order, everythings clean.
Right well i think ive learnt my lesson, and thanks Raptor, 2_k Dummy and Unloved, its all appreciated loads!!!
Thanks again

Chris

Raptor · « **Reply #34 on:** October 20, 2006, 05:16:13 AM »

Quote

Quote
Ok i looked at that log and it made me remember that a while back I 'accuired' Rihanna's album (it's WinRar'd), i went to where the album was located and sure enough all the file names in the log are the same as the ones in the Rar file. But its funny because there are alot of other Rar'd files in that directory and they scan fine.

Chris

Thanks anyway Raptor, sorted it, still a bit weried though that it wont scan Rihanna but will the others. Just one of those things i guess..
Again thanks anyway.
Does everything look ok to you two..??

Chris

THey're rarred? If they're passworded they can't be scanned.

chriscool9 · « **Reply #35 on:** October 20, 2006, 06:41:07 AM »

Ahhh it does seem to be passworded, i think i might be able to get around it.

Chris

unlovedwarrior · « **Reply #36 on:** October 20, 2006, 08:16:32 AM »

if you want you could just reformat the laptop and be completely safe but its up to you

chriscool9 · « **Reply #37 on:** October 20, 2006, 08:43:02 AM »

No thanks, i dont beleive in formatting. I think i am safe though becuase ll the tests have came up negative.
Thanks again for all the info and help guys

Chris

unlovedwarrior · « **Reply #38 on:** October 20, 2006, 08:45:36 AM »

y dont u believe in it?

chriscool9 · « **Reply #39 on:** October 20, 2006, 09:39:27 AM »

Mainly becuase i would prefer to find the problem and find a fix for it without having to format and lose everything, just seems a bit lazy to me.
I know i could back up everything but like i said i would prefer to find the problem and fix it myself so i know for next time.

Chris

Raptor · « **Reply #40 on:** October 20, 2006, 10:27:52 AM »

Quote

Mainly becuase i would prefer to find the problem and find a fix for it without having to format and lose everything, just seems a bit lazy to me.
I know i could back up everything but like i said i would prefer to find the problem and fix it myself so i know for next time.

Chris

Reformatting everytime something goes wrong is the granny way of resolving this.

But if your security has been compromised to a point where you can no longer trust your Windows installation, it is the best option in my eyes.

patio · « **Reply #41 on:** October 20, 2006, 10:28:46 AM »

Me personally i would boot into safemode and delete anything that relates to Rhianna just to be safe.

chriscool9 · « **Reply #42 on:** October 20, 2006, 12:23:34 PM »

I think it is safe becuase lot of my other mates have it, ive found out the pass and scanned it and its ok. Thanks alot guys

Chris

unlovedwarrior · « **Reply #43 on:** October 20, 2006, 12:28:05 PM »

your very welcome chris dont be shy come back anytime

patio · « **Reply #44 on:** October 21, 2006, 05:49:04 PM »

Quote

Me personally i would boot into safemode and delete anything that relates to Rhianna just to be safe.

She's not even that good...

GX1_Man · « **Reply #45 on:** October 21, 2006, 07:18:16 PM »

Quote

Mainly becuase i would prefer to find the problem and find a fix for it without having to format and lose everything, just seems a bit lazy to me.

I don't know about that, but sometimes a good format and reinstall is quicker, and is a guaranteed fix, for a while.

Raptor · « **Reply #46 on:** October 22, 2006, 04:50:48 PM »

Quote

Quote
Me personally i would boot into safemode and delete anything that relates to Rhianna just to be safe.

She's not even that good...

Yeah. Did I mention I still listen to Ella Fitzgerald? I've got a casket...

Quote

Quote
Mainly becuase i would prefer to find the problem and find a fix for it without having to format and lose everything, just seems a bit lazy to me.

I don't know about that, but sometimes a good format and reinstall is quicker, and is a guaranteed fix, for a while.

I think reformatting is a bit overkill in this situation, though.

GX1_Man · « **Reply #47 on:** October 22, 2006, 11:06:37 PM »

Quote

I think reformatting is a bit overkill in this situation, though.

It was a general comment. I have seen some of these threads go on for weeks, when a reinstall would have fixed the problem in hours.

unlovedwarrior · « **Reply #48 on:** October 22, 2006, 11:10:10 PM »

lol but its up to the owner

Fed · « **Reply #49 on:** October 23, 2006, 12:21:09 AM »

There's a lot to be said for both cleaning and reformatting, you can always do both.
That way you gain some knowledge in both areas.

I also believe that manual cleaning by deletion of files and or removal of entries with HJT does not necessarily complete the job properly.
I even have my doubts about so called cleaning programs.

You only have to uninstall a program then check your registry and program files to see what crap is left over from legitimate programs.

GX1_Man · « **Reply #50 on:** October 23, 2006, 03:54:50 AM »

Quote

lol but its up to the owner

And what their time is worth. Ours is free, so I suspect that's why some of the threads do drag on.......

patio · « **Reply #51 on:** October 23, 2006, 07:06:43 AM »

Quote

Quote
lol but its up to the owner

And what their time is worth. Ours is free, so I suspect that's why some of the threads do drag on.......

Nope, that's because we get paid by the hour...

unlovedwarrior · « **Reply #52 on:** October 23, 2006, 08:36:45 AM »

Quote

There's a lot to be said for both cleaning and reformatting, you can always do both.
That way you gain some knowledge in both areas.

I also believe that manual cleaning by deletion of files and or removal of entries with HJT does not necessarily complete the job properly.
I even have my doubts about so called cleaning programs.

You only have to uninstall a program then check your registry and program files to see what crap is left over from legitimate programs.

no program is prefect and the left over are just a side efffect thats why its always good to reformat every so often

Computer Hope Forum

News:

Author Topic: Ive learnt my lesson (Read 14067 times)

chriscool9

unlovedwarrior

chriscool9

unlovedwarrior

Raptor

chriscool9

patio

chriscool9

unlovedwarrior

chriscool9

unlovedwarrior

chriscool9

unlovedwarrior

chriscool9

unlovedwarrior

chriscool9

2k_dummy

chriscool9

unlovedwarrior

chriscool9

Raptor

chriscool9

unlovedwarrior

Raptor

chriscool9

chriscool9

unlovedwarrior

chriscool9

unlovedwarrior

chriscool9

Raptor

chriscool9

unlovedwarrior

chriscool9

Raptor

chriscool9

unlovedwarrior

chriscool9

unlovedwarrior

chriscool9

Raptor

patio

chriscool9

unlovedwarrior

patio

GX1_Man

Raptor

GX1_Man

unlovedwarrior

Fed

GX1_Man

patio

unlovedwarrior