Help With FBI Fake Virus - Malwarebytes Did Not Detect It

Discussion in 'Security' started by muskyx1, Nov 5, 2012.

  1. R0H1T

    R0H1T Platinum Member

    Joined:
    Jan 12, 2013
    Messages:
    2,515
    Likes Received:
    123
    Well firstly anyone who's using MBAM for realtime protection is just asking for trouble ! MBAM is at best a malware remover, it can't possibly substitute the likes of AVAST/ESET/KASPERSKY/NORTON et al :rolleyes:

    Just FYI anyone who's interested in a nice AV for free can try this giveaway from Bitdefender ~ http://www.bitdefender.de/media/html/de/pcwelt/index_2013.html

    P>S> Use google translate if need be ^_^
     
  2. tcsenter

    tcsenter Lifer

    Joined:
    Sep 7, 2001
    Messages:
    17,805
    Likes Received:
    13
    I'll be needing one soon since I've been running Windows Vista in reduced functionality mode for two months (and in grace mode for three months prior to that, and three more months prior to that), Security Essentials is warning me it will cease to function if I don't activate in two days. I'll just backup, format and install Windows again. :sneaky:
     
  3. R0H1T

    R0H1T Platinum Member

    Joined:
    Jan 12, 2013
    Messages:
    2,515
    Likes Received:
    123
    Vista, that ancient piece of junk :hmm:

    You can always try Win7 Enterprise Edition for a full year & IIRC the latest Win8 one for 180 days legally without a license, then of course format/reinstall that over & over again :awe:
     
  4. tcsenter

    tcsenter Lifer

    Joined:
    Sep 7, 2001
    Messages:
    17,805
    Likes Received:
    13
    I've been running Vista since SP1 (I have SP1 and SP2 integrated install images). I've installed W7 a couple times and ran it for a few weeks each time but I keep going back to Vista because I still have a POP3 mail account and grew accustomed to Outlook Express, which became Windows Mail in Vista but was then stripped from W7. I tried the Windows Live Mail and didn't like it, plus it never imports my emails and folders correctly.

    I've never noticed anything really superior about W7, except for some little things like adjustable UAC prompts and System Restore disk space allocation. Bring enough RAM and GPU, which hasn't been much for the past four years (e.g. 3GB RAM and GT9400, HD4350, Intel HD3000 level GPU) and Vista runs just as well as W7. There is a reason Microsoft didn't even bother to rename Windows Server 2008 based on W7, instead just appending "R2" to the name (because W7 is little more than Vista R2).
     
  5. MadScientist

    MadScientist Platinum Member

    Joined:
    Jul 15, 2001
    Messages:
    2,015
    Likes Received:
    1
    Getting a bit OT, but why would anyone go back to Vista from Win 7????

    I also still have a POP3 mail account. Use Microsoft Outlook from Office 2007 in Win 7. You should be able to find a cheap version somewhere or from a friend.
    Or use a free one like Thunderbird. http://www.mozilla.org/en-US/thunderbird/
     
  6. Kaido

    Kaido Elite Member & Kitchen Overlord

    Joined:
    Feb 14, 2004
    Messages:
    39,881
    Likes Received:
    678
    I take the opposite approach...scorched earth policy :D If I do PC work on the side, it's easier (faster) for me to just do a factory re-install. My basic procedure is:

    1. Clone the drive using Macrium Reflect & test boot drive with HDtune
    2. Reinstall OS/drivers/apps/updates (factory reset + updates basically)
    3. Setup MSE, Malwarebytes, CCleaner, and Chrome in Incognito
    4. Copy the image clone to their desktop & dump their Desktop/My Docs files back

    This ensures that:

    1. They have a 100% clean PC install
    2. They save 100% of their files (always accessible from the read-only image clone, which mounts virtually like a second hard drive using the Reflect software - people always save stuff in weird places like the root C: \ or some random non-standard folder somewhere)

    You can even do a few things to make it easier:

    1. Have a USB/eSATA IDE/SATA dock handy for cloning the boot drive
    2. Have a small 60gb SSD for doing a fast OS/apps install (then clone back to their drive later)
    3. Have an 8GB USB stick with the Windows 7 retail installer on it (saves some time over the disc-based install, if they have a retail key)
    4. Setup a WSUS server (VMware works great for a virtual update server) and zap Windows/Office updates quickly (requires a quick non-domain PC mod on the client PC) instead of waiting for the online updates
    5. Keep a monthly-updated apps package on a USB stick (7zip, Paint.NET, etc.), which you can make even easier to install if you are willing to invest some time into tools like AutoIT
    6. Digitize all of their software to ISO files on a USB stick for faster installs once the OS reinstall is done

    The only slowdown comes if their PC has a HDD-based recovery program, in which case I'll make them a free CD/DVD/USB recovery disc set if the recovery program allows for it, otherwise I just have to wait for the partition-to-partition factory reset to do its magic.

    From there, I usually install join.me for quick remote support (lets you keep an icon on the desktop). Then I remove all Internet Explorer links (desktop, quick start, Start Menu) unless they have special needs (ex. older banking websites that use ActiveX, although there are some nice plugins available for Chrome for that as well) and put a shortcut to Chrome with Incognito mode enabled (doesn't save history or do autofill, but also doesn't allow loading of junk coupon/search/etc. toolbars or auto-running of stuff that automatically downloads). Then I throw on MSE, which isn't the best AV in the world, but it's zero-maintenance and low-annoyance (auto-updates, auto-scans, only pops up to notify if a virus was found). So they have updates and a basic, free, bug-me-not security package. I also do basic tweaks to speed things up & get rid of popups/annoyances (Classic theme, disable UAC/Action Center, etc.).

    Sometimes just cleaning the computer off without doing a fresh OS install can be a bit faster, but if the computer was made in the last 10 years, it usually only takes an hour or two (mostly automated via installers like off the Windows CD) to zap it clean and have the knowledge that the computer is "perfect". If I have the computer overnight, I'll usually clean it out with air & wipes and run Memtest86+ on it overnight to make sure the RAM is good & there isn't anything funny going on with the hardware (overheating, fan issues, etc.).

    So it's a bit more work, but it's stuff you already know how to do instead of possibly having to figure out (sometimes for hours or days), so you can speed through every computer pretty quickly. Then the user gets a nice, fresh machine with all their stuff, and a desktop link to join.me if they need some quick remote help over the phone. This is pretty much the only way I do side work these days, because I don't want to hear back from them down the road :D :thumbsup:
     
  7. Danimal1209

    Danimal1209 Senior member

    Joined:
    Nov 9, 2011
    Messages:
    355
    Likes Received:
    0
    Sorry, edited to remove
     
  8. gamerguy2

    gamerguy2 Member

    Joined:
    Aug 9, 2008
    Messages:
    143
    Likes Received:
    0
    lmfao. Damn porn sites. It will be in one of the document folders. I think you need to remove it even after the restore. Its in one of the document folders just locate it from the firewall results in the log. I think its a foreign file so impersonating the FBI doesnt apply to them. Its a legitimate free site, but not all the videos are legit.
     
    #33 gamerguy2, Mar 21, 2013
    Last edited: Mar 21, 2013
  9. Sharla

    Sharla Junior Member

    Joined:
    Aug 18, 2013
    Messages:
    2
    Likes Received:
    0
    This virus popped up on me, when I was downloading legit free wallpapers of Nature scenes. I do not look at Porn, steal music, or pics, so it is PROOF that it had to be embedded on one of the sites that advertise "FREE HD WALLPAPERS".
     
  10. Sharla

    Sharla Junior Member

    Joined:
    Aug 18, 2013
    Messages:
    2
    Likes Received:
    0
    Funny, I have total Kapersky protection, and it still got thru... know-it-all's don't know it all, do they?
     
  11. Soundmanred

    Soundmanred Lifer

    Joined:
    Oct 26, 2006
    Messages:
    10,784
    Likes Received:
    3
    FREE HD WALLPAPERS

    LOLcapz
     
  12. John Connor

    John Connor Lifer

    Joined:
    Nov 30, 2012
    Messages:
    21,402
    Likes Received:
    374
    Firefox, Noscrip. Comodo firewall and the free Bitdefender Yo!
     
  13. Minerva

    Minerva Platinum Member

    Joined:
    Nov 18, 1999
    Messages:
    2,096
    Likes Received:
    1
    Way too much to do nowadays when you can deep freeze it.

    http://www.faronics.com/products/deep-freeze/standard/

    Or run FF with adblock and noscript. Getting infected these days just shows lack of common sense (for the so called "pc literate" crowd) and users that don't know better think they are protected (so called "security" suites! haha) get nailed with drive bys. They are not going to update java/flash/adobe reader crap ever and this stuff gets in so easily. If you don't allow scripts to run globally using noscript, right there that will stop 99% of the crap. Sure it's a learning curve but it pays in the long run and your computer is more responsive too.

    For those that just want to run "wide open" with no worries or have teens that open everything there's the deep freeze option. A simple reboot fixes the problem!
     
  14. JEDIYoda

    JEDIYoda Lifer

    Joined:
    Jul 13, 2005
    Messages:
    24,457
    Likes Received:
    67
    PEOPLE I posted several months ago a step by step way to get rid of the FBI virus...
     
  15. John Connor

    John Connor Lifer

    Joined:
    Nov 30, 2012
    Messages:
    21,402
    Likes Received:
    374
    This is the Internet and no one can read.