Security Tools 2009-2010

Has anyone else noticed a major pickup in infections of this malware? I have fixed like 6 of these in the last week and two within the last 24 hours.

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

RobertKaucher

Mmmmm. Does not bode well for my weekend then.

Pash

Yes and in paticular Win 2010 spyware removal tool hoaxes, these have been real pains to remove.

Hyper-Me

AV 2010 has been plaugeing our customers lately.

We even had a real nasty booger that hijacked outlook and sent thousands of spam emails through exchange within a matter of 2-3 minutes. So many in fact that they got blacklisted in most of the major spam blocklist feeds.

Bl8ckr0uter

Hyper-Me wrote: »

AV 2010 has been plaugeing our customers lately.

We even had a real nasty booger that hijacked outlook and sent thousands of spam emails through exchange within a matter of 2-3 minutes. So many in fact that they got blacklisted in most of the major spam blocklist feeds.

That sucks.

Malware looks more and more realistic with each passing year. I was browsing the interwebz the other day and a pop up came up stating that I had 63 infected objects on my machine and my credit card info was being sent to hijackers. It even had very realistic simulated "windows" screens. The only issue was that I was on my Ubuntu box. Still I can't blame Joe/Jane User for getting infected and in fact I encourage it (since it is currently bringing me some cash).

tbgree00

I have seen a ton of these lately too. Last week I cleared four and I have two scheduled for this week. The most interesting thing is that last week one of my clients actually purchased the bogus protection. It left the registry key that kept his user account from runing exe files but it stopped any of the bogus malware's processes from loading on startup.

What do you use to clean them? I generally go into safe mode and install malwarebytes. It seems to get rid of everything. If that doesn't work I do a backup of their documents, install combofix and run it. I do the backup just in case combofix causes problems. It doesn't often but I have had a machine fail to boot after runing it.

pml1

Fake Anti-Viruses have been plaguing our users. We've been seeing a handful of infections a week for the last few months. Usually a scan with malwarebytes takes care of it though.

Bl8ckr0uter

tbgree00 wrote: »

I have seen a ton of these lately too. Last week I cleared four and I have two scheduled for this week. The most interesting thing is that last week one of my clients actually purchased the bogus protection. It left the registry key that kept his user account from runing exe files but it stopped any of the bogus malware's processes from loading on startup.

What do you use to clean them? I generally go into safe mode and install malwarebytes. It seems to get rid of everything. If that doesn't work I do a backup of their documents, install combofix and run it. I do the backup just in case combofix causes problems. It doesn't often but I have had a machine fail to boot after runing it.

Malwarebytes, combofix, win security essentials, spybox FTW.

If that doesn't work I will just reimage the machine because chances are, even if I do go ahead and manually remove the virus, something will still come back and I don't want to deal with that bull. I tell people straight up,if this doesn't work, I will be calling you for the windows disc (and any apps disc that they have)

earweed

I used spybot search and destroy on my cousins pc to get rid of antivirus 2009. She had given up using her pc because av2009 was locking up everything. I'm gonna have to try malwarebytes, is it free?

cgrimaldo

earweed wrote: »

I used spybot search and destroy on my cousins pc to get rid of antivirus 2009. She had given up using her pc because av2009 was locking up everything. I'm gonna have to try malwarebytes, is it free?

Yes, it's free. It's a great program that has been successful in getting rid of the most popular malware to date. At least in my case.

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol

the_Grinch

Our customers have been reporting a lot of infections recently. Generally we remote on, run a scan, and clean what we can. We explain that though we do the scan, we recommend the wipe and reload. If I am doing side work, I remove the hard drive and put it in an enclosure. I then run Malwarebytes and Symantec on it. I've found I get just about everything doing it that way. The other thing I do is run Bitdefenders bootable linux disc and that usually works pretty good. Boots Knoppix and if it detects the network card (only had one laptop not work) it will download the latest updates.