No Ro

Talks that may or may not have anything to do with Hala or NWN

Moderator: Top Team

Post Reply
JD Smith
Honor Guard: Church of Pants
Posts: 1009
Joined: Sun Jul 22, 2007 7:06 pm
Location: Wausau, Wisconsin, USA

No Ro

Post by JD Smith »

So - maybe some noticed a lack of Ro. Not too funny a story there.

I was on the internet and got a notice that QuickTime required updating. Then I got a notice that IE required updating. I then went to NWN for a time. While there; I noticed the green light on the face of the computer being on nearly 100% of the time. The sounds of the hard drive running were also noticable. Not a normal thing. Next day; I tried getting onto the forums and then tried getting onto NWN. Then tried a few non-internet games. Nothing ran. Got messages like 'NWN failed to start. NWN infected with W32 Blaster Worm.' What did run was a program I'd not seen on the computer before; called Privacy Protection. It said that the computer had 43 instances of infection; and its firewall said it detected an outside source attempting to access the computer. For the low price of $70 dollars; payable only by Visa or Mastercard, it could remove all the problems. Among the listed viruses were:
W32/Child-Porn.PROXY/SERVER
E-Mail-Worm.Brontok
Backdoor.Win32.Scrab.p
Mal/Generic-A,Trojan.Agent
TrojanDownloader:Win32/Bredolab.x
W32.Blaster.Worm

Does anyone know if this Privacy Protection is a 'real' anti-virus program? Or if I were to load a new anti-virus program and then use it to scan for viruses; could I then remove the malware? If not - how would I clean it up? Would it need be taken in to some computer shop?

And yes; I did have a security program in place, other that that previously mentioned and somewhat questioned Privacy Protection. It just has a habit of turning itself off; and I missed the notice.
A.N. Imus: Simon Colin Bernard
Victoria DeVitale: thankya
Victoria DeVitale: I need something shorter
Victoria DeVitale: Sim?
Moonyju
Minor DM
Posts: 1451
Joined: Mon May 07, 2007 12:37 am
Location: *points up* That's Yana and Zunya (GMT-5/-4)

Post by Moonyju »

Eeek!

I'm no expert (far from it), but if you have never seen this software on your computer before (and I assume you know what software you've installed), I'd get a new antivirus program (and offline one, if you can) and scan the computer. The new program could take care of the viruses.

That'd be my first step. =)

If that fails... then I'd maybe consider taking the puter in for repairs. =(

Hopefully you can get it fixed soon and easily!

Good luck!
Nastr0nd
Major DM
Posts: 823
Joined: Sat Nov 22, 2008 2:06 pm

Post by Nastr0nd »

This is a false anti-virus program. You will need to disinfect it.
Nastr0nd
Major DM
Posts: 823
Joined: Sat Nov 22, 2008 2:06 pm

Post by Nastr0nd »

Starslayer_D
Honor Guard: Holy Church of Big Mouths
Posts: 336
Joined: Wed Sep 15, 2004 6:06 pm

Post by Starslayer_D »

Extremly good forum and help site for the removale of this and tons of other trojans:

Hijackthis (on second thought, and reckeing, the site is in german. :( )

They really helped me 2 years ago when I fell victim to one such fake program wich was hidden in an advert.pdf picture .. go figure, adobe aknowledged the security leak a few weeks later.

In any case, don't go to any link for download or payment, this is a blackmail scam. clicking any links just gets you way more infection...

Getting your computer desinfected may take a week or more too, and may include acomplete reinstall. I hope you have backups of your data.

Good luck, this kind of infection is nasty, with rootkits, trojans and backdoors.
diermace1
Knight of the Holy Church of Annoyance
Posts: 178
Joined: Tue May 16, 2006 3:08 pm
Location: Dorset< South of England

Post by diermace1 »

And hurry back into game, Pug will start charging for doing your job if you are much longer :wink: . good luck sorting it out see you soon i hope :)
albonia
Honor Guard: Church of Pants
Posts: 1292
Joined: Fri Jun 25, 2004 5:00 pm
Location: England (GMT+0)

Post by albonia »

Sorry to hear about your problems. Definatly on no account pay them a penny as has been said it is very unlikely to cure the infection and will just give you more problems.

If we can help in any way let us know.

Come back soon the Amazon outings are not the same and we miss you
A quote from a mage, without my magic I am just an Elf in a bathrobe.
JD Smith
Honor Guard: Church of Pants
Posts: 1009
Joined: Sun Jul 22, 2007 7:06 pm
Location: Wausau, Wisconsin, USA

Post by JD Smith »

Still messing about with this. Finding it difficult to do anything as I can only use the computer in safe mode. But when trying to download Spydoctor; it says Norton is detected and Norton causes Spydoctor to become unstable, and recommends removing Norton. Safe mode says it doesn't want to let me remove anything while in safe mode and to run normally to remove Norton. But when in normal mode; Privacy Protection doesn't let me run anything - just returns a message that whatever program it is I try to run fails to start because it is infected with BlasterWorm.

The recommended site also lists a a way to remove P.P. manually; but does not recommend it unless one is well qualified. It lists some things that is says to stop proccesses of; and remove registry entries and remove files .. but I'm not sure of how to do that all.

Wondering if I should not just find the Windows XP CD that originally came with the computer; try reformatting the Hard Drive and then try installing Windows again?
A.N. Imus: Simon Colin Bernard
Victoria DeVitale: thankya
Victoria DeVitale: I need something shorter
Victoria DeVitale: Sim?
albonia
Honor Guard: Church of Pants
Posts: 1292
Joined: Fri Jun 25, 2004 5:00 pm
Location: England (GMT+0)

Post by albonia »

Okay this is for Win XP i would say forget Norton never been a lover of it since it screwed up my system. I would remove it. There are plenty of better free Virus checkers i use Avast its easy to use and not a resorce hog.

http://www.avast.com/free-antivirus-download

Best way to stop stuff loading is the system configeration utility. Click start-run-then type msconfig in the box-find the tab labled startup. Its not user friendly but it will show you the programmes that load when windows starts up. Just untick the boxes for stuff you dont want to load. But again be very sure what you are doing some of the things that load are needed by windows. If in doubt type the name of the programme into google if it not needed by windows you can untick the box.

To be honest unless you are absolutly sure what you are doing messing with the registory or system config can soon mean windows is unusable if you delete the wrong entry. You can make a backup of your registory but..

Like you say you may be better formatting your HDD and reinstalling windows. You can try backing up anything you dont want to loose but be very sure its not infected or you will be back to square one if you copy infected data back to your new windows setup.

My advice reinstall windows and the drivers, install avast and update it, do a virus scan to make sure windows is clear of any infection. If it is start adding back your programmes.
A quote from a mage, without my magic I am just an Elf in a bathrobe.
Starslayer_D
Honor Guard: Holy Church of Big Mouths
Posts: 336
Joined: Wed Sep 15, 2004 6:06 pm

Post by Starslayer_D »

I had a very good forum wich helped me by directing me to special root kit removers etc. toolwise. Hijackthis.de. It's in german though. :(.

But I am certain if you ask in englis, they'lll direct you to an english equivalent.
Post Reply