Virus about

The place to ask for help or solve each others technical issues and discuss hardware

Postby happytraveller » Wed Jan 28, 2009 7:12 am

Just to warn others that there is yet another mass virus going about, and despite being up to date with the anti-virus, it has got into my computer. I am now having a lot of headaches to restore the computer, but at least I was up to date on the back-ups. I keep a separate 500gb external drive just for backing up the computer, and luckily have not lost any data.

Got rid of the virus, but the damage is still there, so it will be a full re-install. Given that I had been debating for a long time about going back to XP, then this was the push that I needed. I have now ordered the XP Pro cd so will have a lovely weekend coming up installing everything, not just the FSX. So not much (if any) simming for a time, but I thought that I would warn others to check that you are up to date with the anti-virus (for what its worth) and also with your back-ups. Things are not so serious when you know that there is a separate hard drive there will all the important stuff on it.

So watch out for the downadup virus. Sounds like it is a serious one, from what I read on the net.

Hoping to be back with the FSX before too long, hopefully working at great speed with XP instead of the troublesome Vista. Back up now before it is too late!!


Would anybody like to place any bets on how long it will take me to install XP, then all the other programs (including registration again) then reinstall FSX with all the add-ons?????

Answers on a postcard........

Smooth landings (soon with XP again).
Last edited by happytraveller on Wed Jan 28, 2009 7:14 am, edited 1 time in total.
happytraveller
Senior Member
 
Topic author
Joined: Sun Jun 18, 2006 10:44 pm
Posts: 1109

Postby creator2003 » Wed Jan 28, 2009 9:57 am

Thanks for tha heads up ill be making sure my virus ware is upto date,, its been having a cow over some update ctc file ,,so ill just reinstall AVG again
User avatar
creator2003
NZFF Pro
 
Joined: Fri Jun 16, 2006 12:08 am
Posts: 4633
Location: Cant U C im LOCO

Postby pilot.masman » Wed Jan 28, 2009 10:19 am

i think thats what tried attacking me the other day.

i was worried that it was gonna screw me over but it was faithfully blocked by Noddy tongue.gif
Current PC - 3.2Ghz quadcore , GTX470, 750W PSU, 3.5tb, 12gb ddr3
User avatar
pilot.masman
Sim-holic
 
Joined: Sat Mar 08, 2008 9:21 pm
Posts: 586
Location: Tauranga

Postby Adamski » Wed Jan 28, 2009 11:43 am

happytraveller wrote:
QUOTE (happytraveller @ Jan 28 2009, 08:12 AM) <{POST_SNAPBACK}>
Just to warn others that there is yet another mass virus going about, and despite being up to date with the anti-virus, it has got into my computer.

Arrgh ... bummer. What anti-virus were you using? If it don't work, we need to know! Was your system up-to-date? I thought the latest MS patches were supposed to help <?>.
Image
User avatar
Adamski
NZFF Pro
 
Joined: Thu Nov 01, 2007 2:22 am
Posts: 5029
Location: Birkenhead, Auckland

Postby toprob » Wed Jan 28, 2009 12:35 pm

I'm always a bit wary of this type of post, mainly because there is a great risk of spreading mis-information. I would recommend that you NEVER get your virus information from public forums! Any protection you get from this forum will be too little, too late. Your computer is always under threat, and there are a lot of ways you can protect yourself, none of which are foolproof.

Downadup/Conficker is no better/worse than any other threat, but it is the threat currently favoured by the media at the moment. It's main claim to fame is the rapid way it spread in the run-up to Christmas, and the speed in which it infected large networks. This was mainly because the infected networks did not have up-to-date security patches. (The worm relies on an already-patched vulnerability as it's main infection vector.)

It also spread through the pirate community, mainly because if you have a pirated version of Windows, you don't have easy access to the security updates.

There are other ways it can spread. An infected machine can try a number of 'standard' passwords over a network to gain admin rights. In also infects things like USB drives, by installing itself as an autorun file.

In fact, on a system with up-to-date security, a good hardware/software firewall, and a strong admin password it would be very, very difficult to install this particular worm.

One of the most likely scenarios to catch it here is to plug your USB drive into a school,uni or similar network.
User avatar
toprob
NZFF Pro
 
Joined: Sat Apr 29, 2006 4:56 pm
Posts: 6711
Location: Upper Hutt

Postby Adamski » Wed Jan 28, 2009 12:47 pm

toprob wrote:
QUOTE (toprob @ Jan 28 2009, 01:35 PM) <{POST_SNAPBACK}>
It also spread through the pirate community, mainly because if you have a pirated version of Windows, you don't have easy access to the security updates.

On a [slightly] related note. I had to dump my (Ubuntu) Linux OS on an old system because SHE was used to Windows winkyy.gif ... so I managed to source a used copy of XP Pro off Trademe (along with a whole heap of hardware). The hardware was a good deal in itself, so I wasn't too bothered if activation turned out to be a problem.

Anyway ... I did the MS phone activation dance, which took about as long as it takes to recite/type in 7 sets of 6-digit numbers ... and that was it. They couldn't have been more helpful. So ... the moral of the story is ... you can still get a fairly cheap *LEGAL* copy of XP up and running - and keep up with all the security updates etc.
Image
User avatar
Adamski
NZFF Pro
 
Joined: Thu Nov 01, 2007 2:22 am
Posts: 5029
Location: Birkenhead, Auckland

Postby happytraveller » Wed Jan 28, 2009 6:35 pm

I was using AVG with automatic updating, together with Spybot Search & Destroy, so I assumed that I was up to date. I suspect that it may have got in from when I logged on to an unsecured network whilst travelling. I guess that the virus was in their system and somehow bypassed the AVG etc. to get in. Anyway, it will be XP shortly.

smooth landings.
happytraveller
Senior Member
 
Topic author
Joined: Sun Jun 18, 2006 10:44 pm
Posts: 1109

Postby pilot.masman » Wed Jan 28, 2009 6:43 pm

the only reason i had the attack was because i was in the process of installing vista ultimate so it had no updates, luckily i installed my NOD first and it auto updated to the latest database. i then went on to install all the updates for vista and now my pc is completely secure until the next virus is scripted smile.gif. i think it was a Dreamscene download that contained it that i was downloading.
Current PC - 3.2Ghz quadcore , GTX470, 750W PSU, 3.5tb, 12gb ddr3
User avatar
pilot.masman
Sim-holic
 
Joined: Sat Mar 08, 2008 9:21 pm
Posts: 586
Location: Tauranga

Postby Kahu » Wed Jan 28, 2009 7:01 pm

creator2003 wrote:
QUOTE (creator2003 @ Jan 28 2009, 09:57 AM) <{POST_SNAPBACK}>
Thanks for tha heads up ill be making sure my virus ware is upto date,, its been having a cow over some update ctc file ,,so ill just reinstall AVG again


Mine was doing that too a month back then came right and now its doing the same thing again. Not to sure if its just on the free versions.
Image
User avatar
Kahu
Sim-holic
 
Joined: Sat May 05, 2007 3:59 pm
Posts: 578
Location: Tauranga

Postby Adamski » Wed Jan 28, 2009 7:05 pm

happytraveller wrote:
QUOTE (happytraveller @ Jan 28 2009, 07:35 PM) <{POST_SNAPBACK}>
I was using AVG with automatic updating, together with Spybot Search & Destroy, so I assumed that I was up to date. I suspect that it may have got in from when I logged on to an unsecured network whilst travelling. I guess that the virus was in their system and somehow bypassed the AVG etc. to get in. Anyway, it will be XP shortly.

Umm ... AVG (free) and Spybot S&D is what I use - and I'm fanatical about updating them.

I'm still intrigued as to how it got past your defences (in case I'm vulnerable myself):

1) "so I assumed that I was up to date" ... where you actually up to date, you reckon?
2) Was your system updated with all the latest MS security fixes?

The downadup vulnerability was patched a fair while ago by MS <??>. The reason it's spread so much (as with other viruses) is that far too many people fail to apply the updates.
Image
User avatar
Adamski
NZFF Pro
 
Joined: Thu Nov 01, 2007 2:22 am
Posts: 5029
Location: Birkenhead, Auckland

Postby brownbox » Sat Jan 31, 2009 10:02 pm

what exactly does this virus do to the system?
Desktop:Core 2 Duo E4300 1.8@ 3.0Ghz@ 1.36v. 4Gb Supertalent DDR2-800 2.1v@ 5-5-5-15. Asus P5N-E SLI Pencil Modded. Corsair TX 650. 512MB Palit Geforce 8800GT. 2x200GB IDE+640GB SATAII. Windows Vista Ultimate X86. Samsung SH-S222A
Phone:Nokia N900 Vodafone
Car: 1993 Mitsubishi Mirage Asti Z. Steel Blue Pearl

1996 Toyota Curren 2.0L 5 Spd Manual Silver. 205/50/R16 on Enkei K-95. Lowered on Jamex Superlows. Remote locking. Remote boot release. Cruise control
1996 Mitsubishi GTO MR

Image
User avatar
brownbox
Senior Member
 
Joined: Thu Apr 27, 2006 10:55 pm
Posts: 1318

Postby happytraveller » Sat Feb 14, 2009 6:34 am

Apparently the virus stops Windows from updating, so leaves computers open to potential threats in the future. Since being infected, I have been unable to download MS updates, although I have removed (I think) the actual virus. That said, it was the final straw for me with Vista, so waiting to be installed is an XP CD as I had been cursing Vista for too long. So it will be back to XP which will mean a long weekend of reinstallation.

If anybody else has the virus still in their computers, then some of the antivirus companies have issued fixes to remove the actual virus, although the damage to the Vista installation cannot be undone easily (the virus removed the restore points). As I log on through a lot of unsecured wireless networks, I assume that the virus entered through this way. I had a search around the net, and it looks like the virus has now been defeated, although the 10+ million computers that are said to have been infected have already been damaged.

I thought that automatic updates were enough but perhaps if you are not online enough then the viruses can still find a way in.

Looking forward to getting upgraded to XP from Vista.

smooth landings.
happytraveller
Senior Member
 
Topic author
Joined: Sun Jun 18, 2006 10:44 pm
Posts: 1109

Postby ardypilot » Sat Feb 14, 2009 12:35 pm

QUOTE
Apparently the virus stops Windows from updating[/quote]
Eeek! I've been ignoring this post as I was sure I wasn't infected, but noticed a little banner pop up when I turned my laptop on this morning telling me Windows was unable to update! ohmy.gif

Not sure if it is the first time I've seen that before, but it's the first time I can recall noticing it- I'm running a 100% legit version of Vista Home Basic, with a McAfree Security Centre program that has a year's paid subscription from last July... fortunatly (I think) however, I spent a few days last week backing up all my data from both this laptop and my main PC onto a portable 320GB harddrive- even though what I've copied is mainly my huge FS folder, my FS installation files folder, then all my pictures, videos and music from the infected computer- what is the likley hood that the virus has copied itself across to the portable HDD- and if it has, what risk will it cause? Should I make a new restore point on my Vista machine now?
User avatar
ardypilot
NZFF Pro
 
Joined: Wed Apr 26, 2006 10:01 am
Posts: 6802
Location: Auckland

Postby creator2003 » Sat Feb 14, 2009 12:57 pm

Yeah ive got some things going alittle werid so im reinstalling this weekend ,actully i enjoy starting out again "FRESSSSHHHHHH" ah im looking forward to it, XP all the way for me still
User avatar
creator2003
NZFF Pro
 
Joined: Fri Jun 16, 2006 12:08 am
Posts: 4633
Location: Cant U C im LOCO

Postby happytraveller » Sat Feb 14, 2009 7:58 pm

There are a few virus removal utilities out on the internet, here is the one that I used to get rid of the virus, from Symantec

http://www.symantec.com/security_response/...-99&tabid=3

bad thing is that the restore points and ability to have Windows updates has probably been erased.

smooth landings.
happytraveller
Senior Member
 
Topic author
Joined: Sun Jun 18, 2006 10:44 pm
Posts: 1109

Postby pilot.masman » Sat Feb 14, 2009 10:38 pm

got some truly wierd stuff happening this weekend, my Windows update, Nod32 and win defnder all refused to update. i seem to have fixed it, think it was my sister trying to burn some songs from her external to her MP3...(on her external, ive since done a clean sweep of her ext and MP3 and came up wih something on the ext)
Current PC - 3.2Ghz quadcore , GTX470, 750W PSU, 3.5tb, 12gb ddr3
User avatar
pilot.masman
Sim-holic
 
Joined: Sat Mar 08, 2008 9:21 pm
Posts: 586
Location: Tauranga

Postby creator2003 » Sat Feb 14, 2009 11:08 pm

Yeah no hassle reboot of XP and up and running again with fsx sp1/2/acceleration and the SDK etc still have some addons to activate but yeah all working sweet in about 3hours total ...
User avatar
creator2003
NZFF Pro
 
Joined: Fri Jun 16, 2006 12:08 am
Posts: 4633
Location: Cant U C im LOCO


Return to Technical Issues

Who is online

Users browsing this forum: No registered users and 2 guests