Beware using IE9.. new virus... nasty on General Discussions Message Board - Page 2

DABhand · 7/27/2012

As per title, start to use Chrome, Firefox etc except for IE9. There is a nasty little virus that wh

AUTHOR

Neo7 posted on Jul 28, 2012 7:27:24 AM - Report post

IE7 is the absolute worst browser still supported. At least IE9 follows web standards.

Your bitterness, I will dispel

ELITE

pisces posted on Jul 28, 2012 7:58:35 AM - Report post

How about using Combofix to remove the virus?

All in all, formatting would remove most virus infections.

~ Change takes time, not at that time ~

AUTHOR

Neo7 posted on Jul 28, 2012 8:03:07 AM - Report post

It sounds like it comes with a rootkit making it really hard to fix. If you want a chance to fix it by not reformatting then I would recommend Kaspersky's Rescue Disk. The description that DABHand has given though I don't think even that will succeed though.

Your bitterness, I will dispel

PHAT CAT

DABhand posted on Jul 28, 2012 10:41:00 AM - Report post

Its a nasty piece of work, attacks via root 0 access and stops services, infects them, and restarts them.

If you remove the main infector (being those 2 files) it causes the other services which are infected to stop working (no doubt cause the infector loads its own library which the other services need). So it causes a 1 min shutdown.

So yeah reinstall of Windows is needed in this case, thats until AVs catch up.

Oh and Don't forget some tuts on ASM and defeating DMA

Clicky Here for them

AUTHOR

Neo7 posted on Jul 28, 2012 11:21:49 AM - Report post

quote:

originally posted by DABhand

Its a nasty piece of work, attacks via root 0 access and stops services, infects them, and restarts them.

If you remove the main infector (being those 2 files) it causes the other services which are infected to stop working (no doubt cause the infector loads its own library which the other services need). So it causes a 1 min shutdown.

So yeah reinstall of Windows is needed in this case, thats until AVs catch up.

The shutdown can be averted with a "shutdown -a" command though. It ignores crashes at the cost of whatever functionality will be lost.

Your bitterness, I will dispel

PHAT CAT

DABhand posted on Jul 28, 2012 12:38:50 PM - Report post

That would be great if .bat files or the command prompt would work though :P

They don't after its aftermath >.<

Oh and Don't forget some tuts on ASM and defeating DMA

Clicky Here for them

AUTHOR

Neo7 posted on Jul 28, 2012 7:03:35 PM - Report post

Well you can run it from the Run command (Win + R), Windows Powershell, Task Manager, or from the search box as well.

[Edited by Neo7, 7/28/2012 7:04:47 PM]

Your bitterness, I will dispel

VETERAN

Mirraluka posted on Jul 29, 2012 9:48:27 AM - Report post

quote:

originally posted by N1YTR0

With that being the case, i whole-heartedly agree with Pwiz.
As much as i like technology, if my job included the use of a PC or even an office i would love to get a virus that could render my working equipment unusable.

And thats what made me Laugh at PWizards comment,i never thought of CHU getting that Virus.