FBI ALERT SCAM - Malware or Virus ?

[crabby3]

@ app103

  Maybe not safe for work

The Killer Biscuits is really funny except for the last sentence.  IMO ditzy is ditzy no matter the hair (dye) color or gender.   

Or maybe it's from the '50s when that concept was more widely accepted?   

-crabby3 (January 24, 2013, 07:24 AM)

???

Did I miss something?

-mwb1100 (January 24, 2013, 09:37 AM)

heh heh heh

[app103]

@ app103

  Maybe not safe for work

The Killer Biscuits is really funny except for the last sentence.  IMO ditzy is ditzy no matter the hair (dye) color or gender.   

Or maybe it's from the '50s when that concept was more widely accepted?   

-crabby3 (January 24, 2013, 07:24 AM)

Well, technically, I'm a blonde...so if I am not offended, it doesn't matter. 

[crabby3]

@ app103

  Maybe not safe for work

The Killer Biscuits is really funny except for the last sentence.  IMO ditzy is ditzy no matter the hair (dye) color or gender.   

Or maybe it's from the '50s when that concept was more widely accepted?   

-crabby3 (January 24, 2013, 07:24 AM)

Well, technically, I'm a blonde...so if I am not offended, it doesn't matter. 

-app103 (January 24, 2013, 05:08 PM)

Depends on the person I guess.  My color has always been mousey-brown... with occasional years of sun-bleached blonde.  But as my forehead grows    its changing to a reddish skin color.

[crabby3]

Did I get help removing the virus?  If you mean tech-support... no.  I'm a computer novice, at-best, but was able to access a friends computer (novice also) and print 22 pages listing several ways to fix this issue.

-crabby3 (January 20, 2013, 12:48 PM)

mine required about 15 different steps using 7 different apps - we didnt find anything more after step #8 or so, and most of the steps at the end were precautions to help avoid recurrence (e.g. disabling java).

-tomos (January 20, 2013, 01:44 PM)

Would you care to enlighten us/me by naming your steps or apps or days or hours?   

[tomos]

^ I guess it could help somebody

I'll add the disclaimer that I dont have a clue what a lot of these apps do to your system, and am not responsible for any negative effects caused by any of them ;-)

As I did each step the logfiles and finds were checked by (german language) experts from www.trojaner-board.de
My last find was with ESET Online Scanner.
Avira Anti-virus, Malwarebytes Anti-Malware, and OTL.exe all found multiple files

Initially the computer could not be started - I used windows recovery disk and did a system restore.
The infected account was a user account (luckily) and could not be used - so I worked from the Admin account.

Update all apps before scanning:

------------------
Full scan with Malwarebytes Anti-Malware (http://www.malwarebytes.org/)
(select free-mode if you're just installing for this scan)
Click on 'Show results' when finished, save.

------------------
Scan with your local anti-virus

------------------
Full scan with OTL.exe from Oldtimer
tutorial (+ dl link bottom of post one) OTL Tutorial - How to use OldTimer ListIt
Run as admin with these settings:

• All users
• Output: Minimal
• Standard registry: Safelist

Output: 2 logfiles
------------------
^ you will need help with OTL, because depending on files found, a script has to be prepared to 'cleanse' them (again via OTL.exe).

------------------
Scan with Malwarebytes Anti-Rootkit (http://www.malwareby...roducts/other_tools/)
Output: 1 logfile

------------------
Run AdwCleaner softpedia link / home: http://general-chang...og-team.fr/fr/outils
When finished click [Delete]
Output: 1 logfile

------------------
'Detail scan' with Emsisoft Anti-Malware (http://www.emsisoft.com/en/)
Save results

------------------
Windows Repair Tool (AIO) (http://www.tweaking....pair_all_in_one.html)
Run Repair_Windows.exe
Click on 'Start repairs' Tab then: Start
choose these settings

• Register System Files
• Repair WMI
• Repair Windows Firewall
• Repair Winsock & DNS Cache
• Repair Proxy Settings
• Set Windows Services To Default Startup

and restart

------------------
ESET Online Scanner (http://www.eset.com/us/online-scanner)
(Works in IE. Otherwise download an app. Run browser as admin)
Disable local antivirus and firewall
Tick: Remove found threads und Scan archives.
Output: 1 logfile

------------------
Either update Java RT and disable it in all browser
or
uninstall Java RT

------------------
In IE internet settings -
Security Tab
Tick: Enable protected mode
Click: Reset all zones to default level

------------------
Delete all system restore points (disable & re-enable System Restore)

------------------
CCleaner (I did this for each user account - it's possible there's an easier way)
delete all temporary internet files
Fix the registry (as said above - I never do this otherwise)
http://www.piriform....om/ccleaner/features

------------------
I also updated Adobe Reader and disabled it's browser plugins

[crabby3]

My computer is still a little slow but at least I have Internet Access again and can search for a free PC tune-up.   

Anyone have any freebies ?  Not just the scan... the whole thing ? 

-crabby3 (January 20, 2013, 09:58 AM)

I emphasize FREE because sometimes the paid-for versions don't always help or may screw things up more.  Like this one from Windows Help & Support.

-crabby3 (January 20, 2013, 11:48 AM)

I think I've found out why this SpeedMaxPc is still out there.  Because it's nearly impossible to report it to Microsoft.   

[Giampy]

Scan with Malwarebytes Anti-Rootkit

-tomos (January 27, 2013, 03:23 PM)

As far as I know rootkits are really beasts, therefore to feel me secure I prefer to use/consult more anti-rootkits (besides Malwarebytes Anti-Rootkit is still a Beta version...).