Dear BCF - fix my PC

[m0l0t0v]

right. Randomly last night I was surfing the interwebs and all of a sudden firefox just closed and a thing called antivirus xp came up "scanned" the computer in a bout 3 minutes and found 31 evil things that want to steal my shit and stuff.


Now, I've never heard of antivirus xp and I've asked my dear technology retarded family if they installed such a thing. They said no.
So they've got alzheimers or they're telling the truth. I believe it's the latter.

It keeps coming up 24/7 and asking me to register and asking me if I want to block this attack. Yet I don't trust it. Can't say I've EVER used any anti virus/etc but I'm pretty sure it takes more than 5 minutes to scan the whole computer and find virus, etc. Or am I wrong?

Anything I can download to clean my computer of this crap?


Much love
____________________
'99 Hornet 600 , VFR 400 NC30 '92 , Kasawamasaki GT 550 , '98 Hornet 600
**\Tarmacsurfer/** said: It's that immaculately manly coiffure of yours isn't it. One glimpse of your virile locks and the punters can't wait to buy whatever it is you suggest, as it might let them be just a little bit like the Adonis that is our very own Molly Doovydoo said: Its not my fault I can't get it up properly, I just wasn't blessed

[chris-red]

Run Spybot S&D and LavaSoft Adaware, this sorted out my mates when he had that crap on his Laptop.

You may find it gives an error when you try to run the installation files. right click an run as an administrator if that doesn;t work change the .exe extendtion to .com(I think?) then it should run.

You may Also want to Run MSconfig and disable alot of the shite that comes up on startup, you should be able to google the entries to work out wheather they are genuine/needed.
____________________
Well, you know what they say. If you want to save the world, you have to push a few old ladies down the stairs.
Skudd:- Perhaps she just thinks you are a window licker and is being nice just in case she becomes another Jill Dando.
WANTED:- Fujinon (Fuji) M42 (Screw on) lenses, let me know if you have anything.

[SoND]

XP Defender Pro is a dangerous trojan, a variant of Vundo/Virtumonde. It's cropping up a lot recently, I suspect it's an ad somewhere exploiting firefox.
It installs itself very quickly and quietly, you may have noticed a warning saying you were missing a plugin. Even if you say you didn't want to install anything it's already ahead of you.

It can be a massive pain in the ass. It latches onto and disables the first real antivirus software it can find.

If you use Process Explorer you can use it to suspend ave.exe which will pause the fake scanner running and its annoying popups.

Download here - https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

Run Spybot S&D, Malwarebytes, AVG and ComboFix. Only get ComboFix from the links below.

You will regain functionality after one of the above programs gets to run but it won't be gone. Run them all.

It can change a lot of settings on your PC such as your default browser and other programs. I have since stopped using firefox for video streaming and have started using chrome for that purpose. No more infections yet.

Link 1

Link 2


https://forums.malwarebytes.org/index.php?showtopic=43672

https://www.bikechatforums.com/viewtopic.php?t=194941


All hell has broke loose. Notice the very convincing Windows Security Alert window, it's fake. My settings are not set like that so it stands out but apart from that it's almost impossible to tell the difference from the legit window.
https://img.photobucket.com/albums/v612/SoND/VUNDO1.jpg


Sometimes you will be able to start a scan but it is able to abort it on you. Where Spybot failed AVG was able to catch it. It ground the computer to near a halt while scanning, almost looking like it was froze at points. Best not to touch anything while it's working.
https://img.photobucket.com/albums/v612/SoND/ABORTION.jpg

Successful Spybot run

https://img.photobucket.com/albums/v612/SoND/SPYBOT.jpg

It's trying to get into my startup. Always say no.
https://img.photobucket.com/albums/v612/SoND/STARTUPALERT.jpg


False alert when trying to open firefox. I closed the process (ave.exe) rather than touching any of the buttons it provided and tried a different browser, it could be trying to do anything here.
https://img.photobucket.com/albums/v612/SoND/FIREFOX.jpg
____________________
Go back to bed - You have no rights - "Streetfighters ~ Mainstream motorcycling's crackwhore sister."