Member of the Month

KilaTsunami
October, 2024

Online

Welcome to the Newschoolers forums! You may read the forums as a guest, however you must be a registered member to post. Register to become a member today!

NS COMPUTER VIRUS?

profile picture
Lanceasaurus
Posts: 925 - Karma: 109
I got onto NS today to chat away and suddenly my virus blocker told me a Trojan was trying to download itself to my computer. I was on the phone with another NS member and 5 minutes later his computer started to download a virus through his firewall and went through macafee... And basically a fake virus protector was scanning his computer but was actually downloading a Trojan. It pretty much screwed his computer and now he can no longer use his internet and scan his computer for viruses and we were both wondering if anyone else's virus blocker was active while on NS.
Aug 26 2009 1:10AM
0 0
profile picture
JStrathern
Posts: 8747 - Karma: 1,536
THIS IS TRUE. i use firefox and suddenly a box popped up with a picture pretending to be my "My Computer Page" everything starting flashing and it said i had 20 trojans. i quickly got out of that screen but my computer has been running slower since then.
Aug 26 2009 12:41PM
0 0
profile picture
MacMahoooon
Posts: 9009 - Karma: 3,305
I can garuntee this is NOT something we knowingly posted. We're get to the bottom of it ASAP
Aug 26 2009 12:42PM
0 0
profile picture
invader7
Posts: 5756 - Karma: 49
yeah its a nasty one. i got it on ns like a month or two ago. i didnt actually get it cancelled it. but my mom wasnt so smart and got it at work and its not too fun
Aug 26 2009 12:42PM
0 0
profile picture
ace_
Posts: 3189 - Karma: 39
nothing popped up for me, but my lappertop seems to just shut down to protect now. im assuming it could be this
Aug 26 2009 12:46PM
0 0
profile picture
OhMyBosh
Posts: 5056 - Karma: 171
lrn2computers.
Aug 26 2009 12:49PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109
I knew something was up with NS for sure... I hoe this problem doesn't persist.
Aug 26 2009 1:05PM
0 0
profile picture
.AR6rider
Posts: 444 - Karma: -106
i just got it, and it looked fake so i exited as quick as i could, should i be safe?
Aug 26 2009 2:22PM
0 0
profile picture
MacMahoooon
Posts: 9009 - Karma: 3,305
For anyone infected, if its the one I think it is download and run a program called "Combofix" and should get you all cleaned up.

**Disclaimer! I have not actually seen which trojan varient this is and neither I nor NS take any responsibility if you fuck up running the cleaner, but it is generally effective for these types of infections**
Aug 26 2009 2:32PM
0 0
profile picture
bootleg_BEN
Posts: 2499 - Karma: 44
Its got t.r.e.f.a.ll.e.r's computer by the throat. It wont let me open any of our virus software. we have four, i got one to work but half way through the scan the computer shut down.

It really sucks, maybe i will try the combofix or whatever its called.
Aug 26 2009 2:40PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109
As long as your homepage didn't change but idk its a scary virus
Aug 26 2009 2:40PM
0 0
profile picture
bootleg_BEN
Posts: 2499 - Karma: 44
OH and on our background it says danger virus and all this other crap.
Aug 26 2009 2:48PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109
That shits one of the worst you can get no joke.
Aug 26 2009 2:50PM
0 0
profile picture
bootleg_BEN
Posts: 2499 - Karma: 44
Ya i think im screwed. its all jacked up. Maybe i will call the computer guy to come check it out cuz my virus software isnt working and i cant use anything cuz if i click on it it says its infected and wont open.
Aug 26 2009 2:56PM
0 0
profile picture
Baskin.
Posts: 1387 - Karma: 13
for some reason NS makes my computer slow and sometimes while im reading a forum it freezes for 5 seconds and then do you want to stop running this script but after i press yes it fine and sometimes it also gives me viruses
Aug 26 2009 2:57PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109
NS seems glitchy...
Aug 26 2009 3:04PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109
Anyone still having problems?
Aug 26 2009 4:24PM
0 0
profile picture
Crack.
Posts: 6020 - Karma: 84
my uncles computer is so messed up now he can't even get past the loading bar on the windows screen. The only tab I had open was NS. I feel like such a dbag. He has to buy a new laptop and everything.

I tried logging on again and it gets to the loading bar then just said that the computer cannot be taken apart at this time. WTF! I know I got a virus from somewhere but I didn't even consider it to be from NS. This thread confirmed it though, i'm almost 98%.
Aug 26 2009 4:29PM
0 0
profile picture
caucasian_chad
Posts: 4078 - Karma: 3,625
Ok you guys, If a box EVER pops up asking about a virus scan, DO NOT CLICK ANYWHERE ON THE BOX.
Clicking yes will download, clicking no will download, clicking the X will download.  You have to hit crtl alt delete and kill firefox.exe, iexplore.exe, or whatever process your browser is named from the processes tab.  Also, if you see something suspicious and you did click by accident either unplug you ethernet or your router if your wireless and hopefully that will stop the download in time.
Aug 26 2009 4:53PM
0 0
profile picture
PeterNorth
Posts: 1352 - Karma: 1,253
god i love having a mac.
Aug 26 2009 4:53PM
0 0
profile picture
caucasian_chad
Posts: 4078 - Karma: 3,625
Oh and with firefox and adblock plus i have not seen it.
Aug 26 2009 4:54PM
0 0
profile picture
spruitm
Posts: 2221 - Karma: 1,069
im using firefox with adplock plus and it popped up on me
Aug 26 2009 4:59PM
0 0
profile picture
GreenHorn
Posts: 4896 - Karma: 1,209
Too late I'm screwed


Aug 26 2009 5:01PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109
God I love the sense of danger while owning a PC. Ugh I hope everyone is having luck against this virus.
Aug 26 2009 5:01PM
0 0
profile picture
Crack.
Posts: 6020 - Karma: 84
what exactly happened to your comp and what anti virus or firewall or whatever are you using? Im gonna try to watch out for this on my laptop.
Aug 26 2009 5:02PM
0 0
profile picture
GreenHorn
Posts: 4896 - Karma: 1,209
Anybody know how to fix it after you've gotten it?
Aug 26 2009 5:02PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109

Dear t.r.e.f.a.ll....$,

there ya go thats what the moderator just said.

Aug 26 2009 5:06PM
0 0
profile picture
thegreyarea
Posts: 3265 - Karma: 34
Anyone who has a problem should do the following if MacMahooon's suggestion doesn't work. Print out the instructions if you have to because you'll be shutting off your interwebz.

1. Download AVG Free and install it. Get it from http://free.avg.com/ Let the application update itself.
2. Restart in safe mode. In Windows XP and previous OSes, go to Start->Run and type msconfig. The System Configuration Utility will popup. Select the BOOT.INI tab. Under Boot Options, select /SAFEBOOT. Click ok and shutdown your computer.
3. Unplug your computer from the internet and turn your machine on.
4. Run a full virus scan with AVG and see if it finds anything. If it doesn't, go to Start->Run and type regedit. This will drop you into your registry editor. In the tree on the left, navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion and click on the Run folder once. This will show a list of all the startup items for your account. Take a screenshot and save it to your desktop so you can post it back in this thread. Do the same thing for

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

Some of these registry folders might not exist. That's normal
Search google for "how to screenshot windows"
5. When the scan is over, go to Start->Run and type msconfig. Select the BOOT.INI tab and uncheck /SAFEMODE. Restart and you should be ok.

If this doesn't fix the problem or the problem comes back, post your screenshots of the registry as noted in step 4.
Aug 26 2009 5:25PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109
Thank you Thank you Thank you Thank you Thank you Thank you Thank you  :)
Aug 26 2009 5:41PM
0 0
profile picture
mmallender.
Posts: 5805 - Karma: 936
exact same thing has happened to my computer twice, and im on a mac so i knew it was fake
Aug 26 2009 5:44PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109

I thought you couldn't get a virus on macs

Aug 26 2009 6:06PM
0 0
profile picture
Six.0.Tree-ski
Posts: 4059 - Karma: 67
its actually easier to make a virus for a mac or so i read in a previous thres. people just dont do it because most of the world has a pc and the people who make virus' are out to ruin alot of people lives not just a few.
Aug 26 2009 6:15PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109
Ahhh I see but if I was making viruses I would make them for pc and mac lol to ruin everyones life >.< but seriously virus' suck!
Aug 26 2009 6:44PM
0 0
profile picture
Brock.
Posts: 5698 - Karma: 1,332
my old computer got so fucked out of its mind by viruses that i couldnt even re-load xp.
Aug 26 2009 6:52PM
0 0
profile picture
mmallender.
Posts: 5805 - Karma: 936
i dont think ive actually gotten the virus, just the popup that causes it. i close firefox as soon as i see it and then turn off my internet.

by the way i just got it again, second time today, third time this week
Aug 26 2009 7:09PM
0 0
profile picture
tBatt
Posts: 9632 - Karma: 580
This happened once to one of my friends (who is on NS) and twice to me. I'm pretty sure it was called Trojan.vundo.h . The first time I waited a while to do something about it after it happened, so I gave it to a friend who's really good with computers. Second time I used system restore.

I got the same thing where the internet wouldn't work, then the fake ass looking anti-spyware thing.

Since then I've been using MalwareBytes for an anti-virus and it's worked great.
Aug 26 2009 7:37PM
0 0
profile picture
invader7
Posts: 5756 - Karma: 49
yeah thats what weve been running. its a super bomb program.
Aug 26 2009 7:41PM
0 0
profile picture
Franny
Posts: 3980 - Karma: 77
Use AVG and this spyware sweeper. I find avg is good for prevention of viruses and superantispyware is better for scanning, quarantine, and deleting the problem.

Free version(works awesome):

http://www.superantispyware.com/download.html
Aug 26 2009 7:47PM
0 0
profile picture
GreenHorn
Posts: 4896 - Karma: 1,209
I did this but in step 2 I didn't restart in safe mode now I can't get past the dell startup screen

It says run windows normally or safe mode
Aug 26 2009 7:49PM
0 0
profile picture
Franny
Posts: 3980 - Karma: 77
So you cant even get windows to run normally? Pop in your windows disc and reboot.
Aug 26 2009 8:18PM
0 0
profile picture
GreenHorn
Posts: 4896 - Karma: 1,209
I don't think I have it
Aug 26 2009 8:23PM
0 0
profile picture
Six.0.Tree-ski
Posts: 4059 - Karma: 67
then say goodbye to all your shit unless you already have it backed up
Aug 26 2009 8:40PM
0 0
profile picture
kstanz
Posts: 3058 - Karma: 477
this has happened to me before but never on NS, what ur supposed to do is just shut ur computer off right away dont click anything and hope for the best lol
Aug 26 2009 8:44PM
0 0
profile picture
Franny
Posts: 3980 - Karma: 77
I think you may have a corrupted registry. You really need the windows startup disc to fix this. I am good with computer but, registry problems I'm not too certain how to fix without a startup disc.
Aug 26 2009 8:45PM
0 0
profile picture
Franny
Posts: 3980 - Karma: 77
Here is how to solve registry problems (which is a main cause for windows not starting up) but, you NEED the startup disc. If you dont have one I think you can download or order one form microsoft.

http://support.microsoft.com/kb/307545
Aug 26 2009 8:48PM
0 0
profile picture
GreenHorn
Posts: 4896 - Karma: 1,209
Alright thanks for the help I'm going to call the computer guy and have him come over
Aug 26 2009 9:03PM
0 0
profile picture
MacMahoooon
Posts: 9009 - Karma: 3,305
you are not totally fucked, I have sucessfully gotten this off a half dozen machines without having to do anything drastic. Download MalwareBytes, Start up in Safe mode, run malware program, then run the Combfix I mentioned earlier. Should get you running normally, then once you get logged in again update your antivirus and do another search to make sure the infecting program is gone
Aug 26 2009 9:10PM
0 0
profile picture
Lanceasaurus
Posts: 925 - Karma: 109
Hey thanks for helping people out with this issue.
Aug 26 2009 9:27PM
0 0
profile picture
toominator
Posts: 4792 - Karma: 120
.

I didn't get anything because my antivirus picked it up
Aug 26 2009 10:54PM
0 0
profile picture
rontonsoop
Posts: 237 - Karma: 25
this is true to an extent.. the way that the creators code the virus is that every selection on that pop up is going to download, but the "flashiness" of it might change, ie if you hit the big red X then it will still DL but very subtle so you think you are in the clear.. the worst thing you can do is hit the x on it and then immediately restart.. what you need to do is, kill the program through task manager and then reboot in SAFE MODE and run your anti virus. if you restart after hitting that x the virus can contaminate your registry where you are fucked cuz then it can hide itself from the antivirus which will eventually mean you will have to yank the drive and put it on an external scanner to clear it.. even then it doesnt guarantee it  will be gone.. moral of the story dont freak out when that shit pops up. oh and DL Kaspersky Lab Anti Virus. its awesome.
Aug 26 2009 11:18PM
0 0
profile picture
caucasian_chad
Posts: 4078 - Karma: 3,625
this.
Pretty much the exact same thin I said.
Also, if you believe you have been infected with Vundo.H (that's what someone said this is) you should probably disonnect you ethernet cable/block your computer from your router if you are on wireless, since it can download other viruses to your computer.  If you don't have an antivirus installed and dont have another computer, ask your friend to download Malwarebytes for you and burn it to a disc and then intstall it from safe mode on your machine.  You don't wanna be going on the internet.
Aug 26 2009 11:25PM
0 0
All times are Eastern (-5)