Author Topic: Viruses... what to do... (Read 3164 times)

fohfoh · « **on:** July 29, 2010, 04:46:01 AM »

Ok, it's been a long run, but the last viruses I had were probably 4-5 years ago. Recently there's been funny noises from my computer and everything so, I go on the hunt. I find...

win32 meboot trojan on my computer.

Long story short, it's a motherfucker to get rid of since it's on the MBR.

So... do a little searching and it's a motherfucker to repair usually requiring up to 3 programs to deal with it.

Question. Do you think a vista disc to repair the MBR would temporarily work?

Now, I also have to try and figure out where it came from as well. AVG was full retard, Avira caught 3, Avast caught nothing (though I assume it would have caught the same shit as Avira) and it was finally Nod32 that picked up the last (and only I might add) one. No idea how I got it.

But the last one(trojan) is a motherfucker.

wolkec · « **Reply #1 on:** July 29, 2010, 05:44:51 AM »

Nod32 and Norton are the Avs that actually work...

Soryon · « **Reply #2 on:** July 29, 2010, 05:54:02 AM »

throw your computer in the trash and buy a new one, problem solved.
@ Wolkec; there are more then those 2 that really work well, however the 3 that fohfoh listed I had never been happy with. (aside from Nod32, I have no experience with that one)

fohfoh~ just a random stab in the dark, but have you tried with MS Security Essentials? Your running windows it seems, so that should be free for you to get.
also, are all your virus definitions up to date?
otherwise, some viruses you end up needing to remove in DoS or at startup, and can become a pain.

I know I am prolly saying things that would be obvious, but it seems every now and then its the obvious things that get looked over.

fohfoh · « **Reply #3 on:** July 29, 2010, 10:30:54 PM »

That trojan has apparently infected the MBR or w/e it was called so is one big mofo to get rid of.

MSSE? I've heard of it, never really tried it. Might give it a nice roll and see. I'm still considering my options prior to a total reformat. Maybe I'll see which ones AVs are actually good. (I've had issues with nod32 in the past, but this time it was actually not bad)

jaybug · « **Reply #4 on:** July 30, 2010, 12:31:18 AM »

It's nice to even hear that someone even knows nod32. It's saved me at home once this year. Wish we had it on work computer, because IT took over a week to fix it.

fohfoh · « **Reply #5 on:** July 30, 2010, 12:54:58 AM »

Quote from: jaybug on July 30, 2010, 12:31:18 AM

It's nice to even hear that someone even knows nod32. It's saved me at home once this year. Wish we had it on work computer, because IT took over a week to fix it.

Opposite occurred for me in the past. Must be better now.

Currently trying Dr.Web Antivirus based on the walk throughs for this one. I'll try MSSE afterwards and reformat if I don't give enough of a shit this weekend.

Freedom Kira · « **Reply #6 on:** July 30, 2010, 07:20:18 AM »

I heard Kaspersky was among the best of paid AV programs, but I'm not so sure anymore since no one has mentioned it...

BuriaL · « **Reply #7 on:** July 30, 2010, 10:37:15 AM »

Try ad-aware. I remember when i had some hellish virus and none of the anti-virus progs i tried could do the job.
Then the program thats NOT a anti-virus did it easy..

I lost all faith in anti-virus after that.
Not to mention that anti-virus progs for some reason wanna delete things thats NOT viruses. I dont get it..

x5ga · « **Reply #8 on:** July 30, 2010, 12:12:28 PM »

If the virus has infected the MBR you can easily re-create the MBR using the vista startup disk -> repair your computer -> command prompt -> bootrec /fixmbr

Lupin · « **Reply #9 on:** July 30, 2010, 12:56:35 PM »

Quote from: fohfoh on July 29, 2010, 10:30:54 PM

That trojan has apparently infected the MBR or w/e it was called so is one big mofo to get rid of.

MSSE? I've heard of it, never really tried it. Might give it a nice roll and see. I'm still considering my options prior to a total reformat. Maybe I'll see which ones AVs are actually good. (I've had issues with nod32 in the past, but this time it was actually not bad)

MSSE is pretty good at catching/stopping malware. Its settings are lacking though.

Meomix · « **Reply #10 on:** July 30, 2010, 11:56:16 PM »

Quote from: Freedom Kira on July 30, 2010, 07:20:18 AM

I heard Kaspersky was among the best of paid AV programs, but I'm not so sure anymore since no one has mentioned it...

Installed Kaspersky, it turned my computer into a hollow shell of its former self. I'd rather take a trojan than that.

vuzedome · « **Reply #11 on:** July 31, 2010, 01:18:02 AM »

Kaspersky, Jackie Chan, oh yeah~!

morrefule · « **Reply #12 on:** July 31, 2010, 01:53:13 AM »

Kaspersky is great for antivirus, Also a fan of Trend Micro's Titainium.

I'll PM you something to help you get anything you have on it off.

I got him with a Nasty trojan about 4 months ago, and even with my tech knowhow i couldn't get the blasted thing off. But this program worked for me.

Freedom Kira · « **Reply #13 on:** July 31, 2010, 06:35:10 AM »

Quote from: Meomix on July 30, 2010, 11:56:16 PM

Installed Kaspersky, it turned my computer into a hollow shell of its former self. I'd rather take a trojan than that.

Eh? You sure you got the real Kaspersky? Like, you bought the CD?

fohfoh · « **Reply #14 on:** July 31, 2010, 09:24:48 AM »

Tried everything so far except kapersky and trend micro (yes including ad aware)

Actually, MSSE is still scanning... not done with that one yet.

Morrefule, the one you sent me, I used it prior with no avail, but I will try yours again to see if it was a version difference.

as for the visa disc... my laptop never shipped with one. So I need to find/obtain a good one to do it. (though, I'd need to monitor to make sure the virus doesn't just rewire the MBR again.

morrefule · « **Reply #15 on:** July 31, 2010, 12:18:13 PM »

Quote from: fohfoh on July 31, 2010, 09:24:48 AM

Morrefule, the one you sent me, I used it prior with no avail, but I will try yours again to see if it was a version difference.

as for the visa disc... my laptop never shipped with one. So I need to find/obtain a good one to do it. (though, I'd need to monitor to make sure the virus doesn't just rewire the MBR again.

Damn, that thing must be a real bitch... I"ll ask around see if anyone i know knows anything about the Trojan...

vuzedome · « **Reply #16 on:** July 31, 2010, 12:23:10 PM »

If the trojan's in the MBR, then why not just rebuild it?
Sorry but I'm a little lacking in the "trojans in mbr" department.

Meomix · « **Reply #17 on:** July 31, 2010, 07:38:35 PM »

Quote from: Freedom Kira on July 31, 2010, 06:35:10 AM

Quote from: Meomix on July 30, 2010, 11:56:16 PM
Installed Kaspersky, it turned my computer into a hollow shell of its former self. I'd rather take a trojan than that.

Eh? You sure you got the real Kaspersky? Like, you bought the CD?

Nope. Downloaded the Trial version from official site / registered copy = Same result.

fohfoh · « **Reply #18 on:** August 01, 2010, 02:40:13 AM »

Quote from: morrefule on July 31, 2010, 12:18:13 PM

Quote from: fohfoh on July 31, 2010, 09:24:48 AM
Morrefule, the one you sent me, I used it prior with no avail, but I will try yours again to see if it was a version difference.

as for the visa disc... my laptop never shipped with one. So I need to find/obtain a good one to do it. (though, I'd need to monitor to make sure the virus doesn't just rewire the MBR again.

Damn, that thing must be a real bitch... I"ll ask around see if anyone i know knows anything about the Trojan...

Yeah, I keep reading things online about people getting rid of it... but I'm not so lucky with their methods.

MSSE didn't find anything at all... but the issue was the amount of resources it used... Not something I want on this laptop. Throwing another shot at malwarebytes... maybe kapersky a shot after, then need a pirated copy of Vista Business to rebuild the MBR afterwards.

I'm also getting tired of CCleaner cleaning out 3-4GB of windows error reports every boot up.

Freedom Kira · « **Reply #19 on:** August 01, 2010, 05:39:45 AM »

Quote from: Meomix on July 31, 2010, 07:38:35 PM

Nope. Downloaded the Trial version from official site / registered copy = Same result.

Interesting. That's gotta be the first time I've seen such a bad story about it.

Quote from: fohfoh on July 31, 2010, 09:24:48 AM

as for the visa disc... my laptop never shipped with one. So I need to find/obtain a good one to do it. (though, I'd need to monitor to make sure the virus doesn't just rewire the MBR again.

At this point, it might make more sense to boot up into Linux using a live CD, copying all your important data onto a second hard drive, and then installing Windows 7. You'd definitely be fine going this way if you are lucky enough to have access to an MSDN license, but if not, I guess you'll have to keep trying for a while at least.