Omega Owners Forum

Chat Area => General Discussion Area => Topic started by: Mr Skrunts on 28 May 2013, 17:38:48

Title: PC Virus
Post by: Mr Skrunts on 28 May 2013, 17:38:48
Just had a rather paniky phone call from a mate, his mate turned up with his laptop trying to get help regards sorting out what may be malware or similar.

Seems he has had his computer looked with a Police warning, I am guessing it is some sort of scam to extract money from him.

I suggested he flatend it and started over, there is a code sticker on the bottom of the laptop so I am guessing he has the original disks for it.  If not, then whats the best best way to deal with it, and the best software to use.  Also guessing there is no antivirus on it either.

TIA.  :y 
Title: Re: PC Virus
Post by: cnj on 28 May 2013, 18:11:29
suggest Malware antibytes for the spam, and any good antivirus, most of the major ones will catch 99.9% of viruses !
Title: Re: PC Virus
Post by: Murph on 28 May 2013, 18:41:27
I tend to use Avast free antirus.
I would also install superantispyware then run a scan, then do the same with Spybot S&D.
You can all three of those free from Download.com (http://www.download.com).

If that lot doesn't get rid of any problems then maybe start thinking about wiping the drive, but not before!
Title: Re: PC Virus
Post by: zirk on 28 May 2013, 18:47:35
suggest Malware antibytes for the spam, and any good antivirus, most of the major ones will catch 99.9% of viruses !

The real one http://www.malwarebytes.org/ download, intall, uodate then run in safe mode for best results.  :y
Title: Re: PC Virus
Post by: TheBoy on 28 May 2013, 20:21:44
If rebuilding, hopefully he has recovery disks or a recovery partition. Its part of the OEM licence agreement that if you don't provide a recovery partition (or recovery media - but this is a more expensive OEM licence), the system has to prompt to clone/ghost the disk shortly after first use.

NOTE: The key on the COA sticker may actually be disabled if its Vista or later.
Title: Re: PC Virus
Post by: Mr Skrunts on 28 May 2013, 21:47:27
If rebuilding, hopefully he has recovery disks or a recovery partition. Its part of the OEM licence agreement that if you don't provide a recovery partition (or recovery media - but this is a more expensive OEM licence), the system has to prompt to clone/ghost the disk shortly after first use.

NOTE: The key on the COA sticker may actually be disabled if its Vista or later.

Have never in my life done a system restore, so that should be fun if thats the case, I have been told its windows 7, but at this point thats all I know, the owner has gone home to ask his wife if these are any system cd/dvd's with it, untill then I dont know any more.  :-\
Title: Re: PC Virus
Post by: JWDF on 28 May 2013, 22:39:02
Methinks
everytime you switch it on it will be "Groundhog day" ;D, and will lock every time.(will be in registry startup) you will need to change it to boot from cd-rom first then stick windows 7 disc in then start the computer and it will boot from cd-rom first.
Hope i'm wrong
Good luck Mr Skrunts :) :y
Title: Re: PC Virus
Post by: Broomies Mate on 28 May 2013, 22:48:16
Start > Run > Msconfig

Go to the 'Boot' tab and uncheck everything.

Reboot and best of luck.

Or, (if you know what you are doing)

Start > Run > Regedit

Hkey User > Software > Microsoft > Windows > Current version > Run     Delete everytihg in here.

Then do the same in Hkey Machine.

Title: Re: PC Virus
Post by: Olympia5776 on 28 May 2013, 23:18:09
http://forums.anvisoft.com/viewtopic-54-3949-0.html
Title: Re: PC Virus
Post by: dbug on 28 May 2013, 23:43:04
Start > Run > Msconfig

Go to the 'Boot' tab and uncheck everything.

Reboot and best of luck.

Or, (if you know what you are doing)

Start > Run > Regedit

Hkey User > Software > Microsoft > Windows > Current version > Run     Delete everytihg in here.

Then do the same in Hkey Machine.

Won't work with this one mate - it reseeds itself :)

See Olympia5776's post above for removal  ;)
Title: Re: PC Virus
Post by: tigers_gonads on 29 May 2013, 08:14:45
Turn off the computer.
Boot up in "safe mode"
Download 30 day trial version of Malwarebites from t'internet.
Run a full scan of the pc  ;)

Now you should be free of the little baststeward  :y

How do I know this ............... eh, I had the same thing last month  >:(
Infact mine decieded to take a picture of my ugly mug via the webcam then tell me that if I didn't pay up, they will send the boys round  ;D
Title: Re: PC Virus
Post by: Terbs on 29 May 2013, 08:20:04
I have had a couple of these pop up. Just closed them down, in fact it may have been a forced shutdown, by holding the button in.... ran a scan. No problems at all since. :y

In fact I had the piccy...realized how ugly I was, so took the webcam down ;D
Title: Re: PC Virus
Post by: tigers_gonads on 29 May 2013, 08:33:16
I normally end up with one when i'm watching sky sports footie streams of one of those slightly dodgy internet sites  ;D ;D
Personally, I blame tunnie  ;D ;D :D :D
Title: Re: PC Virus
Post by: Gaffers on 29 May 2013, 18:50:56
Often with ransomware they not only encrypt he hard drive they also infect the boot sector so make sure you clean that disk well.