computer was infected this morning by malware.

 

The co, known as " ANTI-VIRUSE LIVE " Is malware and scaming you out of money to remove files that they put their.

 

I have MALWAREBYTES ANTI MALWARE installed on my computer from the last time this co, infultrated my puter, but i did not update the malware which enabled them to do it again, did not know i had to update thaught it did it on its own. took me 2 hours to scan and remove it.

they changed my lan setting to proxy which kept me from getting on the net once i changed that i was able to update malwarebytes to scan and remove the infultrators.

 

few pics of their work.

 

 

 

 

This one was a dead giveawy as i just renewed mcfea two months ago.

 

 

 

these fake pages were up the whole time i was scanning to remove the malware.and kept changing as i closed them the same pages kept reapering to try and scare you into purchasing their product.

 

 

THIS IS A PIC OF THE UPDATED VERSION OF MALWARE BYTES MALWARE REMOVAL.

 

do you have enough icons on your desktop?

 

I would like to find the comp that launches this program, i would take the guy and squeeze his balls like a grape til they popped. :ugeek:

Holy S**t! How do you know all this stuff? I have to ask Mrs. to turn the TV on for me.

I do not know that much but you pick up on it as you go along, i have been playing on the puter now since 91.

 

some of my friends are programers so i call them once in a while and i also get emails from them to warn me about stuff.

I knew right off the batt somthing was wrong, you just do not get 30 or 200 corupted files that quick and it was not my antivrus protection co, telling me it was another co telling me i had a virus and to purchase their antvirus to correct the problem. well you would want your current antivirus to do that Right! well you try and it will not open the program so know what? some sob is screwing with you and scamming you out of your money time to research and find out what is going on. another computer helps with this problem, 1st thing i did was try to remove the infultrator which was antivirus live and was unable to open remove programs to search for it and remove it. next step i opened my laptop and typed in the address bar remove live antivirus and whammo it popped up on how to remove the malware live antivirus, and just follow the directions and it can be mind wracking but those sob's were not getting my 70 buck's even if i had to spend money to keep them from getting it.

 

veiw this web site, directions for removal it is a good site for comp problems.

http://www.bleepingcomputer.com/virus-r ... virus-live

Did you purchase malware Bytes? The free version is an "on demand" program and not a resident program meaning if you have the free version, not updating has nothing to do with getting infected.

The paid for resident version should auto update for you anyway.

 

This is not one computer infecting you. MANY server/sites are infected by this and when you go and visit them, you get infected.

 

They are now the most prevalent intrusions (their are 4-6 variants of this new scam/malware).

 

I have cleaned several myself for friends or the very computers at work which are not locked down enough to prevent this (executives).

that was the problem had the free version i purchased the other version this morning and it will now update and have real time protection. I thaught i purchased it last time but apparently not..

 

The little bastard is pretty ingenius, it would be great to find out who paid and have them all file a grievance for their money back, the credit card co's would love that. It is a scam so they should rightfully be refunded.

It is a good program. I also use http://www.greatis.com/security/ for those things that Malware bytes, spyware dr, spybot etc can not get rid of.

cool i am going to check that one out.

 

i also have registry tool kit, which reminds me that was the one i purchased. :doh:

I've run across instances of AntiVirus2009 (or one of it's 2000 variants) that completely disable MalwareBytes, Symantec and damn near every other AV program out there. The installed programs (that didn't catch it to begin with) stopped working and trying to install new AV programs failed. And to make it worse, these were systems where the user didn't even have admin rights on their account! We had to resort to using live bootable CDs which cleaned it just enough for us to get back on the system and re-install MalwareBytes.

Luckily we recently switched to Symantec Endpoint Protection and it seems to be doing a much better job of stopping these things than the older Symantec Corp AV we were previously running.

 

The fake AVs are getting so bad, that the FBI recently did a press release about them:

http://www.fbi.gov/pressrel/pressrel09/popup121109.htm

tell me again what you did because this virus got me also and i got figure out how to get rid of it.

 

Gerry

I fix this garbage on peoples machines all the time.

 

#1 method to prevent infection. STOP USING INTERNET EXPLORER!!!

 

The easiest way to kill this is mount the windows system in ERD, stop the processes in autoruns then run scans against it, in another computer if possible.

 

Since most of you can't do the above, good luck. You can get autoruns stand alone, boot to safe mode and potentially get it turned off.

 

You could also put the drive in a clean machine and run scans against it.

 

If you want an IT security secret, here's my free tip of the day. Stop using anti-virus programs and use a proactive security solution. http://www.eeye.com/Products/Blink/Personal.aspx I've got a personal version that's free to use if that trial runs out on you, just pm, I can put it up on my website.

 

Furthermore, get a good ad remover. It will prevent cross scripting and all sorts of other nonsense that will get you infected. There's only one I recommend. I've been using it for 6 years. http://www.admuncher.com

 

I have _NEVER_ had a malware infection on my personal machines or my work machines. Firefox + admuncher = statistically so close to immune as to make no difference.

Pete,

 

SEP is also what we switched to from the old SAV corp version. Sav corp is useless. SEP is much better. We are transiting to Eeye and there's another product that we're looking at perhaps later that examines machines in realtime. It's neat.

I use Firefox and AVG, no problems.

 

When I was in IT at the school I taught at, we used Norton's Enterprise which worked fine, but that was back in 2000-2005. It updated the virus definition files at east once a day on the server and we had our computers pretty locked down.

 

People in my car club are getting hosed all the time and I tell them 1. put AVG on your computer, 2. Stop using Explorer and 3. stop clicking on links in your emails.

Pete,

 

SEP is also what we switched to from the old SAV corp version. Sav corp is useless. SEP is much better. We are transiting to Eeye and there's another product that we're looking at perhaps later that examines machines in realtime. It's neat.

Is it Eeye Blink? Eeye calls me almost once a week to see if we want to stop using Symantec and switch to their product On paper it seems like a decent product, but haven't had the time to sit down with them to get all the details.

Pete,

 

SEP is also what we switched to from the old SAV corp version. Sav corp is useless. SEP is much better. We are transiting to Eeye and there's another product that we're looking at perhaps later that examines machines in realtime. It's neat.

Is it Eeye Blink? Eeye calls me almost once a week to see if we want to stop using Symantec and switch to their product On paper it seems like a decent product, but haven't had the time to sit down with them to get all the details.

 

Yeah, eeye Blink.

 

Buddy of mine is the IT Security analyst for the State of Nevada and he turned me on to it. Its not a giant resource hog like SEP. Shrug, take a look at it when you get the time, it's a well done piece of software.

 

The other solution is http://www.youtube.com/watch?v=QlW9vBp3jWU <--introduces malware just like at the top of this thread. A completely unknown malware can attack a machine and within a few moments it's checked it out and restored the machine back to its working state. That's a pretty elegant solution that doesn't require any user intervention.

For better or worse, we're stuck with SEP for a while. My bosses like names they know :roll:

 

Triumphant looks pretty good based on that demo. Programs like that are really the direction everyone is heading in these days. Detection solely based on signatures just doesn't cut it anymore