Go Back   oOple.com Forums > General > The PlayGround

Reply
 
Thread Tools Display Modes
  #1  
Old 26-05-2009
telboy's Avatar
telboy telboy is offline
*SuPeRsTaR mEmBeR*
 
Join Date: Sep 2006
Location: chesterfield - no-mans land!
Posts: 3,175
Send a message via MSN to telboy
Default WinPC virus?!

Hey all, I have a virus on my laptop.
I started getting loads of crap poping up for 'WinPC' saying that I had a virus and I 'needed' thier antivirus, and would I be kind enough to give them my card details and order it NOW!!

Obviously, i sussed out that it was a scam, as the 'very good looking' windows popups, were not quite perfect enough.
By the time I realised that all this was crap, it was too late, and it's put a virus on my comp.

Anyone have any Idea how to get rid?

It now keeps freezing the comp up after so long, and sometimes wont even let me get onto it. also it has dissabled all the programs etc, that are used to 'system restore' and to completely re-boot it. So I cant even do that.

Its really p'ing me off now.
Reply With Quote
  #2  
Old 26-05-2009
DCM's Avatar
DCM DCM is offline
Spends too long on oOple ...
 
Join Date: Oct 2005
Location: Marvelous South Wales!!
Posts: 8,896
Default

I sorted a friends laptop only last night, it downloads with a CODEC or something similar.

I installed AVG Free, patched it with the latest updates, then did a full scan, all sorted.
__________________
dragon paints : team tekin : fusion hobbies :SCHUMACHER RACING : Nuclear R/C for all my sticky and slippery stuff - if it needs gluing or lubing, Nuclear RC is the man!
Reply With Quote
  #3  
Old 26-05-2009
DaSloth's Avatar
DaSloth DaSloth is offline
Senior Member
 
Join Date: May 2009
Posts: 602
Default

just delete it from c:\docs n settings\%user%\app data

Simple
Reply With Quote
  #4  
Old 26-05-2009
DCM's Avatar
DCM DCM is offline
Spends too long on oOple ...
 
Join Date: Oct 2005
Location: Marvelous South Wales!!
Posts: 8,896
Default

it is also elswhere to dude
__________________
dragon paints : team tekin : fusion hobbies :SCHUMACHER RACING : Nuclear R/C for all my sticky and slippery stuff - if it needs gluing or lubing, Nuclear RC is the man!
Reply With Quote
  #5  
Old 26-05-2009
rowanp25 rowanp25 is offline
Member
 
Join Date: Mar 2008
Location: glasgow
Posts: 254
Default

usual run of the mill is to disable system restore (which may be tricky in your case) but makes that sector readable by the virus scan. boot into safe mode and do a scan hopefully thatll fix it. if not then youd need the actual viruses name the can get a list of registry entries to delete and modules to dissable on startup. n f that fails do a reinstall from cd (if system restore is on Hd you can get a restore cd from microsoft thats for vista btw)
__________________
Diementia would like to invite you to vote for us on Total Biker FM here : http://lnk.ms/TPsV9 and share this link. Please also share this link.Thankyou for your support \m/ www.reverbnation.com/diementia
Reply With Quote
  #6  
Old 26-05-2009
rowanp25 rowanp25 is offline
Member
 
Join Date: Mar 2008
Location: glasgow
Posts: 254
Default

or try looking here http://www.2-spyware.com/remove-winpc-defender.html
__________________
Diementia would like to invite you to vote for us on Total Biker FM here : http://lnk.ms/TPsV9 and share this link. Please also share this link.Thankyou for your support \m/ www.reverbnation.com/diementia
Reply With Quote
  #7  
Old 26-05-2009
Rich D's Avatar
Rich D Rich D is offline
*SuPeRsTaR mEmBeR*
 
Join Date: Apr 2008
Location: Lincolnshire
Posts: 2,449
Default

Terry

Download and install this - it removes all the registry keys too unlike just removing the contents of the appdata folder. You wont even be able to see that folder anyway unless you have " show hidden folders and files" ticked in folder options.

Shout back if you need more help mate ........

http://dw.com.com/redir?edId=3&siteI...54cb3038aaf623
__________________
Richard Drury

See My Feedback

Reply With Quote
  #8  
Old 26-05-2009
DCM's Avatar
DCM DCM is offline
Spends too long on oOple ...
 
Join Date: Oct 2005
Location: Marvelous South Wales!!
Posts: 8,896
Default

AVG removed the registry entries too, person hasn't reported any more popup issue's.

I am not a great fan of downloading more 'free software' to remove something dodgy.
__________________
dragon paints : team tekin : fusion hobbies :SCHUMACHER RACING : Nuclear R/C for all my sticky and slippery stuff - if it needs gluing or lubing, Nuclear RC is the man!
Reply With Quote
  #9  
Old 26-05-2009
Rich D's Avatar
Rich D Rich D is offline
*SuPeRsTaR mEmBeR*
 
Join Date: Apr 2008
Location: Lincolnshire
Posts: 2,449
Default

I know where you are coming from with your theory on this - some do more harm than good !

Just do a search of some of the geek PC forums, MalwareBytes is one of the good guys along with Lavasofts Adaware and Spybot - Search and Destroy.

I have been building, repairing, overclocking and generally fidling with computers since the advent of the 16k ZX Spectrum

Use it,its great.
__________________
Richard Drury

See My Feedback

Reply With Quote
  #10  
Old 26-05-2009
DCM's Avatar
DCM DCM is offline
Spends too long on oOple ...
 
Join Date: Oct 2005
Location: Marvelous South Wales!!
Posts: 8,896
Default

I just have a general 'distrust' for most things free.... and anything PCWorld, lol

ZX Spectrum, that goes back some, I was a BBC B person, myself.
__________________
dragon paints : team tekin : fusion hobbies :SCHUMACHER RACING : Nuclear R/C for all my sticky and slippery stuff - if it needs gluing or lubing, Nuclear RC is the man!
Reply With Quote
  #11  
Old 26-05-2009
Gibsy's Avatar
Gibsy Gibsy is offline
Senior Member
 
Join Date: Mar 2009
Posts: 362
Default

Quote:
Originally Posted by DCM View Post
it is also elswhere to dude


yer it will hide itself in loads of files
__________________
Mardave V12
Hara Twisted 2.2 Carbon
Team Orion 3200 lipo
Micro 2.4ghz Reciever
Reply With Quote
  #12  
Old 26-05-2009
cwilson's Avatar
cwilson cwilson is offline
Senior Member
 
Join Date: Mar 2008
Location: new addington
Posts: 423
Default

Quote:
Originally Posted by DCM View Post
I sorted a friends laptop only last night, it downloads with a CODEC or something similar.

I installed AVG Free, patched it with the latest updates, then did a full scan, all sorted.

i had same problem and i did this and it worked really well. i seems to have gotton rid of the virus
__________________
TLR XXX-T & 22 KYOSHO ZX-5
(\__/)
(O.O)
(> <)
This is harold. Help Harold spread happyness by posting him to your sig.
Reply With Quote
  #13  
Old 26-05-2009
redonesgofaster's Avatar
redonesgofaster redonesgofaster is offline
Member
 
Join Date: May 2008
Location: Southport
Posts: 54
Default

Hi,

Malwarebytes is free and excellent ...
Cheers,

Ian
Reply With Quote
  #14  
Old 26-05-2009
telboy's Avatar
telboy telboy is offline
*SuPeRsTaR mEmBeR*
 
Join Date: Sep 2006
Location: chesterfield - no-mans land!
Posts: 3,175
Send a message via MSN to telboy
Default

Thanks for the info dudes.

I got the AVG free, but the virus was freezing the computer before it had time to do a full scan, so that didn't work.

I eventually found the file, by right clicking the icon it put on the desktop, and just clicked, 'find file'. I did delete it but it didn't make any difference, as it just kept re-applying itself and re-installing later on....little b'stard!

Eventually just re-booted the system off a disk my dad had. So problem solved...for now.
Unfortunately I didn't have time to back loads of stuff up before it hit. I normally back up at the end of every month, so....

The virus hit when I was on Facebook, on the Fantasy F1 thing. So not sure if thats where I got it from. Used it many times without a problem.
Reply With Quote
  #15  
Old 26-05-2009
mark christopher's Avatar
mark christopher mark christopher is offline
Spends too long on oOple ...
 
Join Date: Jan 2007
Location: haxey, doncaster
Posts: 7,787
Send a message via MSN to mark christopher
Default

Quote:
Originally Posted by DCM View Post
I sorted a friends laptop only last night, it downloads with a CODEC or something similar.

I installed AVG Free, patched it with the latest updates, then did a full scan, all sorted.
Quote:
Originally Posted by DCM View Post
AVG removed the registry entries too, person hasn't reported any more popup issue's.

I am not a great fan of downloading more 'free software' to remove something dodgy.
Quote:
Originally Posted by DCM View Post
I just have a general 'distrust' for most things free.... and anything PCWorld, lol

ZX Spectrum, that goes back some, I was a BBC B person, myself.
am i missing somthing here?
__________________
MBModels - Schumacher Racing - Vapextech.co.uk - MRT - Savox - SMD
Reply With Quote
  #16  
Old 26-05-2009
Rich D's Avatar
Rich D Rich D is offline
*SuPeRsTaR mEmBeR*
 
Join Date: Apr 2008
Location: Lincolnshire
Posts: 2,449
Default

Quote:
Originally Posted by redonesgofaster View Post
Hi,

Malwarebytes is free and excellent ...
Cheers,

Ian

Occupation - Computer Engineer - nuff said, thanks Ian, pleased someone believes me
__________________
Richard Drury

See My Feedback

Reply With Quote
  #17  
Old 27-05-2009
kek23k kek23k is offline
Senior Member
 
Join Date: Sep 2007
Posts: 347
Default

Quote:
Originally Posted by Rich D View Post
Occupation - Computer Engineer - nuff said, thanks Ian, pleased someone believes me
Vote #3 for malwarebytes here, it helped me provide engineers with a solution to that Antivirus 2008 scam (similar to this from the sounds of it) last year. It's now part of my permanent tool kit along with Spybot and a decent antivirus.

I dont understand why free makes people suspicious, as this virus is evidence that payment required is more suspicious lol!

All my favourite tools have to fulfill 3 criteria:

1)Free (as in free, not stolen/pirated lol)
2)Doesn't install, ie just an executable
3)Can't actually remember this one...I think it was size (ie small filesize and memory footprint)

You just have to do your research before trying anything new, and recommendation from a knowledgeable friend is always a good source of information.

Hope you get it all sorted
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 09:29 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
oOple.com