Member of the Month

hi_vis360
November, 2024

Online

Welcome to the Newschoolers forums! You may read the forums as a guest, however you must be a registered member to post. Register to become a member today!

Malware Fun!

profile picture
user098123
Posts: 6072 - Karma: 18
Decided to delete my whole desktop. Technically the folder is still there, but completely inaccessible and I can't do anything on the black part at all...

Rest of the taskbar and start menu work though, time to dig in to the registry. Anyone have any ideas on a solution?

Click for larger image
Nov 30 2010 10:59PM
0 0
profile picture
ride_on
Posts: 317 - Karma: 33
why would you delete your desktop in the first place
Nov 30 2010 11:01PM
0 0
profile picture
user098123
Posts: 6072 - Karma: 18
Reading comprehension fail. The title is "malware fun"...as in, "the malware decided to delete my whole desktop"
Nov 30 2010 11:01PM
0 0
profile picture
theblackrod
Posts: 2162 - Karma: 575
ouch that sucks
Nov 30 2010 11:05PM
0 0
profile picture
ride_on
Posts: 317 - Karma: 33
2 points:

Point 1: Clicking on the internet and logging onto ns, or googleing stuff is about all i know how to do when it comes to computers, as malware is a computer related term i techinically had no idea what the hell it was. so to me the title may have read something like " I deleted my desktop, lets have some Malware type fun and help restore it"!

Point 2: my bad
Nov 30 2010 11:05PM
0 0
profile picture
user098123
Posts: 6072 - Karma: 18
Haha ya...it does. The question is how do I fix it?
Nov 30 2010 11:06PM
0 0
profile picture
uni-corn
Posts: 13846 - Karma: 651
Restore to back before. Then run in Safe Mode and scan the shit out of it.
Nov 30 2010 11:06PM
0 0
profile picture
dex.
Posts: 2973 - Karma: 62
should've

















































































bought a mac
Nov 30 2010 11:06PM
0 0
profile picture
user098123
Posts: 6072 - Karma: 18
System restore doesn't work, it errors.

Buying a mac is a pointless argument. Just wait, a couple more years and all of these problems will be on macs too. Stupid fanboys that don't know what they are talking about. Look up hacking contests, macs almost always fail first because they are so pathetically insecure...

Anyway, enough ranting. I run two windows 7 partitions and an Unbuntu partition, I'm not too worried if one goes down. Mostly just curious as to how it happened.

Task manager is back up and running, that's a plus at least!
Nov 30 2010 11:17PM
0 0
profile picture
uni-corn
Posts: 13846 - Karma: 651
Are you able to start in Safe Mode?
Nov 30 2010 11:19PM
0 0
profile picture
fsscott
Posts: 4684 - Karma: 114
Well before you do any of this restore shit, click start and get all the important shit you have on that HDD to another hard drive.

Second, if it won't boot into safe mode, and you can't open the internet or any of the security software you should have installed, your only option is to reinstall and not DL spyware.

Nov 30 2010 11:20PM
0 0
profile picture
YourBoyBlue
Posts: 213 - Karma: 10
Click for larger image
Nov 30 2010 11:45PM
0 0
profile picture
nolan.
Posts: 909 - Karma: 59

yeah some of the people seemed to know what's up..try to reboot in safe mode if possible and as soon as you get on, go to internet and download a program called RKill to your desktop, run this program and it quickly finds the malware and closes all of its resources / processes. once this is done, download the program MalwareBytes - it is freeware and you can trust it, just get it right off the website..both these are easy to find from legit sources. Do a full scan with MWBYTES and then quarantine/delete the files that it finds infected (it will do this for you). Once this is done, reboot computer and hope this solves the problem. If this doesn't solve the problem, there could possibly be some changed register errors, but usually MWBYTES will find these and correct these for you..

hope this helps! :)

Nov 30 2010 11:49PM
0 0
profile picture
notadoctor
Posts: 408 - Karma: 661
this
inb4 delete system 32
Dec 1 2010 1:32AM
0 0
profile picture
user098123
Posts: 6072 - Karma: 18
MWBytes didn't fix it. I could boot in to safe mode.

I ended up fixing it by running startup repair after significantly editing the registry. I removed most of the traces manually, but some of the still persisted. I was able to get in to the task manager again, which helped, but even after a full scan with multiple programs it wasn't being detected.

It was actually a pretty interesting piece of malware. I have no idea where I downloaded it from. It made it through my firewall(and I use a good one) at about 9:15 pm, and then it waited in my temp for about an hour before striking, so that it could cover the file it was from.

It also used a two randomly generated .exe files, so that it can be less likely to be picked up by programs like MWBytes and things like that. With the random naming on the .exe files, it's harder to categorize.

I ended up being able to run a system restore through the start up repair. Like I said I wasn't overly worried, I still had full access to the drive from my other Windows partition as well as access to everything from my Linux partition too.
Dec 1 2010 9:03AM
0 0
profile picture
I_Am_Mod
Posts: 13214 - Karma: 3,753
usually when things like that begin to happen, i sell my pc and get a new one ....
Dec 1 2010 9:09AM
0 0
profile picture
user098123
Posts: 6072 - Karma: 18
Why? If you know anything about computers you always have the option of wiping everything and starting from scratch. No reason to buy a new one at all.
Dec 1 2010 9:14AM
0 0
profile picture
BrewskiJr
Posts: 5738 - Karma: 1,478
Damn. That sucks. Thats why I back up my whole computer once a week onto a hard drive.
Dec 1 2010 11:35AM
0 0
profile picture
thisandthatfilms
Posts: 7714 - Karma: 526
jesus thats a lot of work
Dec 1 2010 1:26PM
0 0
profile picture
AHSkier
Posts: 563 - Karma: 42
buy a new computer and do file transfer
Dec 1 2010 1:28PM
0 0
profile picture
theabortionator
Posts: 51738 - Karma: 163,453
Completely unrelated, but fun.


screenshot desktop, save as wallpaper. Delete all icons. Laugh at people profit. It's been a while, but I'm sure it's still fun
Dec 1 2010 1:31PM
0 0
profile picture
user098123
Posts: 6072 - Karma: 18
If you have any icons on the desktop that are actually document files and shortcuts, make sure you don't clear out the recycle bin or else you could be seriously screwed.

And to people who say buy a new computer, you must be seriously lacking in computer skills. Catch up to the rest of the world!
Dec 1 2010 4:12PM
0 0
All times are Eastern (-5)