Fake virus warning messages

Discussion in 'Network Information, Suggestions and Feedback' started by PeterG, Jan 18, 2010.

  1. PeterG

    PeterG Senior Member

    'AdminLady' was in the member list of the forum I had a PM from. First thing I checked. Looked like a bona fide membership account, which it probably was since they only screen non-ISP email accounts on joining. The PM notification email was genuine. It looked like a manual attack.
    Thanks, that's useful and rather clumsy. Check if the deleted account is regenerated.
     
  2. von Poop

    von Poop Adaministrator Admin

    It's like trying to stop the tide, as the only measures that'd keep out all spammers would likely also make a forum unusable.
    Doesn't seem entirely wise to discuss the measures that seem to work quite well here, but whatever you do, 'the human spammer will pretty much always get through'.

    A fine website for checking up on dodgy emails/Ids:
    Stop Forum Spam
    But usually an email address that generates 10,000+ Google hits is a decent clue ;).
     
  3. Stig O'Tracy

    Stig O'Tracy Senior Member

    In the past two days alone I've help clear two computers in Italy over the Internent. If you have been caught the best solution I have found so far is to install the free version of Malwarebytes.org then get into safe mode and run it. I've tested a few other spyware and malware detectors, all have detected these 'security' trojans but only Malwarebytes has completely removed them, including the registry keys.

    Peter

    I can confirm that Malwarebytes from Malwarebytes.org is a very helpful program. I had an infection (browser hijacker) on one of my computers about a year ago. Spybot S&D wouldn't get rid of it, AVG and Avast were powerless against it and Ccleaner didn't do anything either but Malwarebytes killed it.

    My fathers computer was acting a bit odd so I DLed Malwarebytes and it found 264 different infections. I figure it's a good idea just to have this program handy and already on your system just in case something nasty happens to it.
     
  4. Ron Goldstein

    Ron Goldstein WW2 Veteran WW2 Veteran

    Thanks Peter

    Ron
     
  5. Slipdigit

    Slipdigit Old Hickory Recon

    I should perhaps add that WW1Talk has absolutely no connection with WW2Talk.

    ~A

    And who might would own that fine forum, Adam? Any idea? :huh:

    This is a new and very dangerous development. Currently infections are running at an amazing 35 million per month. The problem now of course is that they are copying and mimicking security sites. A very nasty one is 'Windows Security Center', you can find a list of these nasties here Malware Help. Org | PC security, privacy, anonymity and anti-malware Resource. , a typical one is shown here
    How to remove AntiMalware (AntiMalware Removal) | Malware Help. Org

    What I think has happened to WW1 Talk is that their Members data list has been seeded with a rogue bot and emails auto-generated and sent to all members.

    In the past two days alone I've help clear two computers in Italy over the Internent. If you have been caught the best solution I have found so far is to install the free version of Malwarebytes.org then get into safe mode and run it. I've tested a few other spyware and malware detectors, all have detected these 'security' trojans but only Malwarebytes has completely removed them, including the registry keys.

    Peter

    Malwarebytes is good, fairly straight forward and not a resource hog. It is also free, which is a good thing.

    Here is a good webpage on how to get rid of of the malware Antivirus 2010 and other, similar irritants. My computer-illiterate neighbor was able to navigate the shoal waters of malware infestation and clear his computer of that blight all by himself. Depending on how knotted up your PC is, you may have to download the software from this page on another PC, copy it to another media (CD or thumb) and run it from that.

    Here is a good App for killing the processes started by rogue programs. it is also found on the above link. RKill.exe is da bomb. :lol: It will not remove the malware installs, but will stop them until the next reboot. In the meantime, you can be killing them. The malware Antivirus 2010 will throw up a window telling you that the "Administrator" has prevent this app (and any other malware killing apps) from starting. If it does, leave that window up, move it to the side if you want to and then click on your malware-killing application again and it will start this time.

    Don't take this crap from those butt wipes lying down.
     
  6. PeterG

    PeterG Senior Member

    It's like trying to stop the tide, as the only measures that'd keep out all spammers would likely also make a forum unusable.
    Doesn't seem entirely wise to discuss the measures that seem to work quite well here, but whatever you do, 'the human spammer will pretty much always get through'.
    I would agree regarding spam. However, this isn't spam; it's a trojan which you are duped into uploading and installing from a fake security site. Once active it gets to work at once, typically infecting some 37 system files and as a sideline turning the infected PC into a slave spammer for d.o.s. attacks.
     
  7. red devil

    red devil Senior Member

    I get a frequent bombardment of fake av messages from well meaning but misguided contacts and totally ignore all of them. I use Kaspersky Internet suite 2010 and have zero problems in all aspects of pc security.
     
  8. red devil

    red devil Senior Member

    Thanks, that's useful and rather clumsy. Check if the deleted account is regenerated.

    admin lady has been in every forum I know, including football club forums, and had been sending out pm's telling people various messages and linking to sites for an answer. My advice is, if you have not asked for help from a certain source, ignore all offers of help, its safer.

    A useful site I use for Internet and pc advice is Free Computer help, Video editing help, and troubleshooting forum -anything else, stay clear of.

    Remember, no strangers in your email offer help for nothing. Every one has a catch, so ignore them all.

    The best way to avoid these scumbags is to have a moderated registration system OR, like I have in my own forum, a form has to be completed. This is then submitted to me and I create the account because the email address has to be genuine to receive the password from me. The downside is that admin members must be there to do this.
     
  9. PeterG

    PeterG Senior Member

    I get a frequent bombardment of fake av messages from well meaning but misguided contacts and totally ignore all of them.
    What you are referring to are hoax warnings, what I warned you about is something quite different and is not a hoax. You can always check for hoaxes here F-Secure : Security Information Center
     
  10. red devil

    red devil Senior Member

Share This Page