FingerLakes1.com Forums
Topic Options
#1373284 - 11/14/12 02:02 PM Virus?????
SilverFox Offline
Senior Member

Registered: 11/19/00
Posts: 6375
Loc: Waterloo
Has anyone else had this popup on your screen and have your computer locked? Code Red got it for the second time this morning while on FL1. Last time in efforts to release his computer and get rid of it, his computer crashed and he lost everything. He really doesn't want to have to go through that again. I am pretty sure it is a scam virus but it does totally disable his computer. No, he was not on a porno site - it was FL1. LOL Can you computer techs give him some suggestions? Thanks

_________________________


Don't blame me. I voted for Romney.

Top
FingerLakes1.com
#1373285 - 11/14/12 02:08 PM Re: Virus????? [Re: SilverFox]
FL1 Staff Offline


Senior Member

Registered: 04/13/00
Posts: 779
Loc: Seneca Falls, NY
This is likely "hostage-ware". It is a virus that infects your computer and attempts to let you "buy" a solution on the spot.

It has nothing to do with the fact he was browsing FingerLakes1.com when this notification appeared.

Top
#1373287 - 11/14/12 02:13 PM Re: Virus????? [Re: FL1 Staff]
SilverFox Offline
Senior Member

Registered: 11/19/00
Posts: 6375
Loc: Waterloo
That is exactly what I told him. I thought you would want to know because it happened while he was using FL1. Now have you any suggestions for eliminating it? I advised booting is safe mode and running antivirus.
_________________________


Don't blame me. I voted for Romney.

Top
#1373292 - 11/14/12 02:27 PM Re: Virus????? [Re: SilverFox]
DR. D Offline
Senior Member

Registered: 07/25/03
Posts: 6056
Loc: Waterloo/Seneca Falls/Junius/T...
Its ransom ware and a pain to get rid of sometimes. I have succesfully removed it in the past with with Malwarebytes along with SuperAntiSpyware Free Edition while it was in safe mode. Both are available from download.cnet.com.

Also a good antivirus like Microsoft Security Essentials is suggested, on the 3 occasions I have delt with it 2 have been with AVG and 1 with Norton.

Top
#1373298 - 11/14/12 03:08 PM Re: Virus????? [Re: DR. D]
SilverFox Offline
Senior Member

Registered: 11/19/00
Posts: 6375
Loc: Waterloo
Thank you Dr. D. He is already running MS Security Essentials and somehow it slipped through.

I am in no way blaming FL1 or thinking they had anything to do with it. I was just trying to let others know about it incase they had it show up on their computer screens. It just happened to show up while he was on Fl1,
_________________________


Don't blame me. I voted for Romney.

Top
#1373300 - 11/14/12 03:44 PM Re: Virus????? [Re: SilverFox]
SilverFox Offline
Senior Member

Registered: 11/19/00
Posts: 6375
Loc: Waterloo
Dumb question. Are you able to download those programs in safe mode? If not can you download on another computer, burn to a disk and install that way in safe mode?
_________________________


Don't blame me. I voted for Romney.

Top
#1373305 - 11/14/12 03:50 PM Re: Virus????? [Re: SilverFox]
ovidtech Offline
Senior Member

Registered: 07/13/07
Posts: 2848
Loc: Between.
I'm sure he didn't actually lose everything, it will still be there.
_________________________
We now have a goverment of the feckless, by the crooked, for the connected.

Top
#1373309 - 11/14/12 04:18 PM Re: Virus????? [Re: ovidtech]
SilverFox Offline
Senior Member

Registered: 11/19/00
Posts: 6375
Loc: Waterloo
LOL The first time he did lose all his files because in frustration and not knowing what to do,he restored the computer. He thought he was doing the restore that saves the files and he wasn't. End result computer was restored back to its original "out of the box" condition. That is why we are trying to find out how to avoid that this time.
_________________________


Don't blame me. I voted for Romney.

Top
#1373398 - 11/15/12 03:36 AM Re: Virus????? [Re: SilverFox]
Code Red Offline
Senior Member

Registered: 06/17/06
Posts: 6431
Loc: Out of my mind....
Dr D. Thanks for the advice. First I ran the SuperAntiSpyware,it found on Trojan. But the crap still came up on the reboot. So back to safe mode. I then ran the Super Maleware. This found 6 more trojans(a regular orgy). This time on reboot it was fine. I hit the icon to connect and the crap appeared for 2 seconds, then the FL1 home page came up, and it has been fine since. BUT I have a question. When it was scanning, I watched and in the C drive, I saw where it was scanning my music that I had lost. Is it buried there some where and there still is hope of recovering it?
_________________________
A car hits another car, its an accident. A car hits a motorcycle, its usually a tragedy.

Top
#1373399 - 11/15/12 04:30 AM Re: Virus????? [Re: Code Red]
DR. D Offline
Senior Member

Registered: 07/25/03
Posts: 6056
Loc: Waterloo/Seneca Falls/Junius/T...
How did you lose your music?

Have you searched your C:\ drive for .mp3 or did a virus hide it?

Top
#1373400 - 11/15/12 04:32 AM Re: Virus????? [Re: SilverFox]
DR. D Offline
Senior Member

Registered: 07/25/03
Posts: 6056
Loc: Waterloo/Seneca Falls/Junius/T...
Originally Posted By: SilverFox
Dumb question. Are you able to download those programs in safe mode? If not can you download on another computer, burn to a disk and install that way in safe mode?


Safe mode with networking will do it for ya, just keep hitting the F8 key after you first turn it on. However i would put it on a cd or one of those thumb(flash) drives and plug it in and install the software while it was in safe mode.

Top
#1373424 - 11/15/12 10:59 AM Re: Virus????? [Re: DR. D]
Code Red Offline
Senior Member

Registered: 06/17/06
Posts: 6431
Loc: Out of my mind....
Guess I got too excited, its back. As soon as I posted my post this morning, as I shut down, back it came. I am in safe mode right now. I will keep trying these virus scans until time for work today. It seemed after it reappeared that as long as I connected with in a split second of my icon screen coming up I was fine. But if I hesitaed a second too long, I was doomed. Now this morning I can't beat it, it comes up even faster.
_________________________
A car hits another car, its an accident. A car hits a motorcycle, its usually a tragedy.

Top
#1373428 - 11/15/12 11:46 AM Re: Virus????? [Re: Code Red]
DR. D Offline
Senior Member

Registered: 07/25/03
Posts: 6056
Loc: Waterloo/Seneca Falls/Junius/T...
1. Reboot your computer and keep pressing F8 key on your keyboard.
2. Pressing this key continuously at startup will show you Windows Advanced Startup menu.
3. Please press down arrow key and select “Safe Mode With Command Prompt”.
4. When you boot up in Windows, you’ll see Command prompt Window.
5. Type “explorer.exe” there and this will show boot up the computer and you’ll be able to see Desktop.
6. Click on Start—>Run, type “rstrui” and click OK button.
7. This will show “System Restore” application to you. Please restore your computer’s settings to one or two weeks back when your computer was virus free.
8. Once the System Restore is complete, reboot your computer and you should be able to Log On successfully in Normal Mode.
9. Please note that so far you’ve just removed the startup entry of MoneyPak Virus so that It can’t bug you at startup and you can use malware removal tools. Now you need to remove its hidden files and folders from your computer.

After that download and run malwarebytes and the superantispyware. Make sure after it finds what it finds you put the check marks in ALL the boxes and select remove.

Top
#1373456 - 11/15/12 03:23 PM Re: Virus????? [Re: DR. D]
I did it! Offline
Senior Member

Registered: 06/26/12
Posts: 1960
Loc: West Coast 29 Palms
You are a pretty smmart Dr. Dr.D
a few months ago it also happened to me where Staples had to reinstall my windows 7 back from the very first day I had purchased it. They couldn't figure it out either so for $175
they just reinstalled it all over again and it'sbeen fine so far.
_________________________
“The manner in which it is given is worth more than the gift”.

Top
#1373502 - 11/15/12 06:13 PM Re: Virus????? [Re: I did it!]
DR. D Offline
Senior Member

Registered: 07/25/03
Posts: 6056
Loc: Waterloo/Seneca Falls/Junius/T...
Originally Posted By: I did it!
They couldn't figure it out either so for $175
they just reinstalled it all over again and it'sbeen fine so far.


Uh for $175 they better have bought you dinner and flowers for the remainder of the service.

I cannot understand how anyone can justify charging that price for what most techs consider a simple re-install.

Top
#1373570 - 11/16/12 11:36 AM Re: Virus????? [Re: DR. D]
Code Red Offline
Senior Member

Registered: 06/17/06
Posts: 6431
Loc: Out of my mind....
DR.D, I thank you for the help you have listed.I tried it last night, but I couldn't figure it out. So I went back to waving a dead chicken over it while I had a oreo cookie holding my bottom lip out. I slipped off the chair , dropped the chicken, and banged my chin on the desk. So out of a fit of anger I hit F10 again and wiped it back again. This time I am running all the scans multiple times. So far so good. For the amount of time I used trying to get it fixed again, I could have just done this in the begining. I hope that virus doesn't come back, and hopefully I can figure out a way to retrieve my music and picture files. When I do a complete scan, it lists them as being scanned so maybe there is hope. Thanks for trying to talk the computor illiterate through it. Bill.
_________________________
A car hits another car, its an accident. A car hits a motorcycle, its usually a tragedy.

Top
#1373607 - 11/16/12 04:44 PM Re: Virus????? [Re: Code Red]
Timbo Offline
Senior Member

Registered: 07/18/12
Posts: 9561
Loc: CNY
Originally Posted By: Code Red
DR.D, I thank you for the help you have listed.I tried it last night, but I couldn't figure it out. So I went back to waving a dead chicken over it while I had a oreo cookie holding my bottom lip out. I slipped off the chair , dropped the chicken, and banged my chin on the desk. So out of a fit of anger I hit F10 again and wiped it back again. This time I am running all the scans multiple times. So far so good. For the amount of time I used trying to get it fixed again, I could have just done this in the begining. I hope that virus doesn't come back, and hopefully I can figure out a way to retrieve my music and picture files. When I do a complete scan, it lists them as being scanned so maybe there is hope. Thanks for trying to talk the computor illiterate through it. Bill.


OK, so it's chicken > Oreo > chin > F10 > scan... in that order, right?
_________________________
Everyone's entitled to their own opinions, but not their own facts.

Top
#1373632 - 11/16/12 10:37 PM Re: Virus????? [Re: Timbo]
Sallie Offline
Senior Member

Registered: 09/06/07
Posts: 668
Loc: NY
OK, so it's chicken > Oreo > chin > F10 > scan... in that order, right? plus add a pack of cigs smoked to that \:\)

Dr D is right you got to go back before the virus and run those scans in safe mode. This is why we do BACKUPS! This is war online now a days with these kinds of malware, adwares etc. Many are not destructive but PIA's to get rid of. I recently had all my documents turned into Chinese. Only way to get rid of it was to restore back far enough.
_________________________
Live Free & Breathe While It Is Still Legal!

Top
#1373635 - 11/16/12 10:45 PM Re: Virus????? [Re: SilverFox]
zipdrive Offline
Member

Registered: 06/21/01
Posts: 240
Loc: Seneca Falls NY
You might take a look at and try "The Security Tango" here:
http://securitytango.com/
It's free, written by Nick Francesco of RIT.

Top