Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Stubborn Garda virus

  • 10-01-2013 6:39am
    #1
    Registered Users, Registered Users 2 Posts: 1,189 ✭✭✭


    This is on my laptop as of this morning and any help would be very appreciated.

    I've tried accessing the Safe Mode with Command Prompt option and then typing explorer.exe and clicking the System Restore option...but no joy, the Garda warning comes up straight away.

    Also does so in any other safe mode I tried.

    Is there anything else I can try?

    Hoping I can get to a stage where I can access the internet and download the necessary tools to remove it...


«13

Comments

  • Registered Users, Registered Users 2 Posts: 78 ✭✭Tommay


    You could try downloading the Kaspersky rescue disk (If you have another PC spare ofcourse)

    https://support.kaspersky.com/4162

    Burn it to a CD/DVD and then boot your computer from it (usually F12 as the PC is booting up)

    You can then run a scan.


  • Registered Users, Registered Users 2 Posts: 2,912 ✭✭✭sparrowcar


    Create a bootable USB flash drive from here on a different pc...

    http://www.avg.com/ie-en/avg-rescue-cd-download

    Stick it into infected pc and follow instructions.

    Worked a treat for me recently as I had deleted all my system restore points so was up sh!t creek without a paddle.


  • Registered Users, Registered Users 2 Posts: 10,761 ✭✭✭✭degrassinoel


    got this last night, AVG spotted it but didnt remove it.

    temp fix worked for me here

    reboot.
    F8 on boot to enter safemode
    open msconfig and click startup
    unselect the russian font name program (you'll know it when you see it, it was at the very end of the list)

    I've just updated AVG and running a full scan again to see if i can get rid of it while it's been disabled


  • Moderators, Business & Finance Moderators, Regional South Moderators Posts: 6,854 Mod ✭✭✭✭mp22


    As above,then download and install malwarebytes or superanti spyware, update and run a full scan.


  • Registered Users, Registered Users 2 Posts: 1,196 ✭✭✭quaalude


    got this last night, AVG spotted it but didnt remove it.

    temp fix worked for me here

    reboot.
    F8 on boot to enter safemode
    open msconfig and click startup
    unselect the russian font name program (you'll know it when you see it, it was at the very end of the list)

    This worked recently for me also.


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 1,189 ✭✭✭Gekko


    Thanks for all replies. I forgot to say I tried opening msconfig a swell from the C Prompt in safe mode but it wouldn't work.

    I'll try and create a bootable USB and then use AVG


  • Registered Users, Registered Users 2 Posts: 2,912 ✭✭✭sparrowcar


    Gekko wrote: »
    Thanks for all replies. I forgot to say I tried opening msconfig a swell from the C Prompt in safe mode but it wouldn't work.

    I'll try and create a bootable USB and then use AVG

    The AVG software sets your USB key up as a bootable drive automatically....magic :D


  • Registered Users, Registered Users 2 Posts: 1,189 ✭✭✭Gekko


    Tried the AVG boot from USB...couldn't configure it so it'd connect via wifi and update, ran it anyway but it had an error at 99% scan and didn't complete nor did it find infected files.

    May try a Kaspersky one if my patience doesn't run out!


  • Registered Users, Registered Users 2 Posts: 4,056 ✭✭✭Sparks43


    Well im just about to have a crack at this nasty piece of work.

    Hope they have a good stock of coffe in the press for me :D


  • Registered Users, Registered Users 2 Posts: 1,189 ✭✭✭Gekko


    Sparks43 wrote: »
    Well im just about to have a crack at this nasty piece of work.

    Hope they have a good stock of coffe in the press for me :D

    Good luck, had no joy so had to take it to local computer repair place.

    They couldn't sort it either so they're doing a complete recovery of the laptop :-(

    I'll be €80 poorer as a result


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 4,056 ✭✭✭Sparks43


    Gekko wrote: »
    Good luck, had no joy so had to take it to local computer repair place.

    They couldn't sort it either so they're doing a complete recovery of the laptop :-(

    I'll be €80 poorer as a result

    Sorry to hear that man:mad:

    Took me 2 hours but i managed to get it off the pc by using mbam in safe mode after stoping all procceses to do with the malware.


    Not meaning to be bad but if they couldnt sort the virus out there is no way i would let them do any kind of reinstall.

    Really impressive bit of software cant help but tip my cap to the creator.


  • Registered Users, Registered Users 2 Posts: 10,761 ✭✭✭✭degrassinoel


    Gekko wrote: »
    Good luck, had no joy so had to take it to local computer repair place.

    They couldn't sort it either so they're doing a complete recovery of the laptop :-(

    I'll be €80 poorer as a result


    That's a joke, 80quid? this malware issue can be resolved in less than 5 minutes without a complete recovery or being 80quid lighter in the wallet.

    I'd hate to see this as a solution.


  • Banned (with Prison Access) Posts: 1,435 ✭✭✭areyawell


    Download Rkill.exe in safe. This kills all processes and whatever way its made you can still launch it. this will kill all processes that are not windows processes.

    Run Malware anti Malware to get rid of it then. I would rather let my balls in a mouse trap to eat cheese than pay 80 quid to get a virus removed.

    You were willing to let windows be reinstalled. Thats a different story.
    To reinstall windows is simple and anyone here could have talking you through it. If you were willing to reinstall windows why did you pay 80 euro? Takes two clicks of a mouse and anyone here could have showing you how. Hundreds of videos on youtube about it as well but is completely easy!


  • Registered Users, Registered Users 2 Posts: 1,189 ✭✭✭Gekko


    As far as I can tell any solution would have needed to be done through the C Prompt screen as it wouldn't let you do anything in safe mode.

    Maybe I resorted to the repair centre option too quickly in hindsight.

    To make it worse I have lost a lot of MS Outlook emails despite the guy at the repair centre telling me he'd be able to save all my data...

    I know I'm at fault for not regularly backing up but this guy should surely have checked with me?!

    If anyone knows of a way I might retrieve these any advice would be welcome....have to admit I feel pretty dumb now.
    areyawell wrote: »
    Download Rkill.exe in safe. This kills all processes and whatever way its made you can still launch it. this will kill all processes that are not windows processes.

    Run Malware anti Malware to get rid of it then. I would rather let my balls in a mouse trap to eat cheese than pay 80 quid to get a virus removed.

    You were willing to let windows be reinstalled. Thats a different story.
    To reinstall windows is simple and anyone here could have talking you through it. If you were willing to reinstall windows why did you pay 80 euro? Takes two clicks of a mouse and anyone here could have showing you how. Hundreds of videos on youtube about it as well but is completely easy!


  • Banned (with Prison Access) Posts: 3,571 ✭✭✭newmug


    I have this stupid virus too. But now whenever windows starts, the screen goes white. And whenever I start it in safe mode, it just shuts itself down automatically.

    Of the suggestions above, could somebody please give a step-by-step version of what buttons to press and what exactly to click? I'm not tech savvy, and saying something like "open MSconfig" means nothing to me. How do you open MSconfig? I'd really, really appreciate it.


  • Registered Users, Registered Users 2 Posts: 22 nizarol


    just got rid of this using ye're help so thanks guys. A very clever but nasty bug.
    opened in safe mode
    in search box type run enter
    when run box opens type msconfig enter
    when window opens select start tab
    scroll down til until you see an option written in Russian (sample, образец)
    un-tick this option
    open internet and go to malware site identified above in other posts, download, run and 3hrs later when run is complete it is gone


  • Banned (with Prison Access) Posts: 3,571 ✭✭✭newmug


    nizarol wrote: »
    just got rid of this using ye're help so thanks guys. A very clever but nasty bug.
    opened in safe mode
    in search box type run enter
    when run box opens type msconfig enter
    when window opens select start tab
    scroll down til until you see an option written in Russian (sample, образец)
    un-tick this option
    open internet and go to malware site identified above in other posts, download, run and 3hrs later when run is complete it is gone


    Right!

    1) How do you start a computer in safe mode? The only way I can do it is by taking out the battery and forcing a shutdown, and the the next time I start it, it gives me a safe mode option. But other than that, how do you do it?

    2) I managed to start in "safe mode with command prompt", using method above. The old MS Dos type screen came up. On this screen, I typed in "msconfig", and I got a window with various menus, one of which was called "start". I went through it, there are boxes to check and uncheck alright, but no russian writing. I went through all the menus and sub-menus, no russian anywhere.

    3) Using another PC, I downloaded that AVL CD rescue in the link above. It took about 8 hours. I put the USB stick into my laptop, booted from it, and another ms dos looking window came up, with various options, eg scan, view scan results etc. I highlighted the top one, "run scan", and pressed enter. It ran a scan, took about an hour, and it found 1 trojan horse. More options were presented, the one I chose was called something like "heal issue". It did its job, and I chose "shutdown system". The I started the laptop up as normal, but no difference. It still goes to a white screen after the screen asking for your password.


    What should I do?


  • Registered Users, Registered Users 2 Posts: 125 ✭✭RealExpert


    "Santa" brought my daughter a laptop (Toshiba)this christmas and before dinner on christmas day she got this nasty annoying virus (the garda one)that was looking for money to get rid of it.I know a bit about computers but I couldnt get rid of it actually I couldnt get past the screen that pops up.Now bear in mind this laptop was only in use for probably 10 hours and mcafee security software did not catch it.There were only two sites visited on it one was facebook and the other was a radio communications related site but what i did notice is that on both sites there was a banner selling T-shirts I didnt click the banner but she could have eventhough she said she didnt thats the only place it could have come from I think.
    Anyway I done a complete factory reset of the computer with the
    HDD Recovery system phew we were all delighted when it started up fine again


  • Moderators, Business & Finance Moderators, Regional South Moderators Posts: 6,854 Mod ✭✭✭✭mp22


    1) press the power on button, then tap F8

    2) there probably will not be Russian per say but there will be a start programme with a name made up of numbers and letters (it will not be a word)

    3)Superanti spyware or maywarebyts is they only software I know that will help.

    If you can get into safe mode try the following http://www.howtogeek.com/howto/windows-vista/enable-the-hidden-administrator-account-on-windows-vista/ restart(in safe mode) and you will have a clean acc to work with.Dont forget to hide the admin acc when you are done.


  • Banned (with Prison Access) Posts: 3,571 ✭✭✭newmug


    Finally cracked it!

    I did a system restore from a week ago, while in safe mode. Now everything is completely back to normal, and the machine seems way faster! Wayhey! Thanks everybody.


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 328 ✭✭Vulture


    Wow this thing is nasty I have to say I'm impressed.

    Old XP machine.
    Web page pops up shortly after boot you don't have to click anything.
    The web page cannot be escaped with "Ctrl+alt+del" "Alt+f4" "Win+R" or anything like that.
    Will not allow me to boot into safe mode with command prompt my computer just hangs and restarts.
    Allows me to boot into "safe mode" or "safe mode with networking" but gives me the web page almost straight away still.
    I have system restore switched off as my SSD drive is small enough as is.
    On boot managed to get up task manager quick and kill "explorer" which stops it dead, first tried the regedit fix I found online. This version does not change the reg like the fix said so no joy.
    Then got into msconfig from their with task manager and switched off everything in start tab as switching off just the suspicious ones did nothing.
    The Damm thing is still their when I boot up again only now with nothing else to load on boot it gets the web page up so fast I don't have time to get up task manager and kill explorer anymore. :P

    Round of applause for this evil thing.
    Anyway in temp accomadation right now so no access to reinstall CD and usb cd drive (its a web book). Will get access to them this weekend so wipe reinstall. Can get my files off with bootable Linux key. So I will live but just wanted to point out this thing got nasty with age so some of the old fixes will not work anymore.

    Ps got it from a torrent site. Went to site, download torrent, no exe involved and the torrent file was passed straight to bittorrent. (Was a song not porn in case your wondering, who even torrents porn?) Have Microsoft security essentials installed but was not really serious about security on my web book not enough resources on them to be wasting on Anti-virus and Anti-Malware.


  • Registered Users, Registered Users 2 Posts: 520 ✭✭✭Qwerty27


    I used this link and te steps set out: http://malwaretips.com/blogs/an-garda-siochana-virus/

    Had to restore windows in safe state and then run malware virus checker. Im not very pc savvy but was able to follow all steps and seems to have corrected the issue. As previous poster said, must have come from a torrent, prob need to avoid these for quiet a while now as a result!


  • Registered Users, Registered Users 2 Posts: 980 ✭✭✭Freddy Smelly


    Gekko wrote: »

    To make it worse I have lost a lot of MS Outlook emails despite the guy at the repair centre telling me he'd be able to save all my data...

    if the repair guys saved your outlook.pst & archive.pst files you can import the emails into your new outlook file.

    1. find out where the repair guy saved your old outlook.pst & archive.pst files
    2. open outlook and choose import/export
    3. select the option that says "import from another file or program"
    4. select "personal folder file (.pst)"
    5. browse to where the repair guy saved your old outlook.pst file and open.
    6. then choose the root folder (mailbox) to import to.

    it will start importing all your old emails.

    repeat the same steps to import all your archived emails but select "archive.pst" instead of "outlook.pst".

    once everything is back restored run the archiver in outlook to move any old emails into a new archive folder.


  • Registered Users, Registered Users 2 Posts: 990 ✭✭✭daveob007


    just got rid of mine on win7 home premium by starting in safe mode with networking,updated my avg anti virus and ran full scan,avg found it and killed it.
    rkill.exe is brilliant for other types of virus also, try www.bleepingcomputer.com for all fixes went on last year because i got that antivirus program which is a very damaging virus and this site guided me step by step to get rid of it.
    got my garda one on a torrent site also so watch out and update any antivirus software you have.


  • Registered Users, Registered Users 2 Posts: 328 ✭✭Vulture


    Had a last shot at it and got rid of it, by doing the following.

    CTRL+ALT+Del immediatly on start
    End task Explorer
    Went into msconfig via task manager and found an item had reticked itself and it looked as follows.
    runctf C:\windows\system32\rundll32.exeC:\DOCUME~1\Admin\wgsdgsdgdsgsd.exe,H1N1
    Started command prompt from task manager and deleted wgsdgsdgdsgsd.exe

    On restart I appear to be free of it but I'm still going to wipe and reinstall. Hope this helps someone.


  • Registered Users, Registered Users 2 Posts: 4,056 ✭✭✭Sparks43


    This might sound like a weird request but is it possible to get a copy of the files/code of the virus without wrecking my comp by vistiting porn/torrent sites unprotected to find it.

    Would love to throw it into a virtualbox environment and dissect it


  • Registered Users, Registered Users 2 Posts: 276 ✭✭HelpWithIT


    Newest version of the virus locks down the computer in Safe Mode as well...only way is to make a bootable USB or CD/DVD from either Kaspersky (v good) or AVG site, This virus can come from reputable sites which have been hijacked but I find that once this Garda Virus is cleared I usually find lots of other spyware etc on the infected computers and laptops, if the owner is used to looking up "alternative sites" or using torrents etc then there will always be other spyware etc to be removed. Run command was also disabled in Safe Mode with this new strain of the Virus.. tough one(-;


  • Registered Users, Registered Users 2 Posts: 9 johnjameson


    Right so,a relative arrived down earlier with the garda virus on it and some sort of "Fix it" sheet he printed off the internet and said "here fix that" and off he toddled.
    Anywhy had a look at it and its the garda virus alright.Had a look at the "fix it" and basically its saying start it up in safe mode and go into registry and remove a series of files associated with the virus.
    Now I don't exactely feel too comfortable with going into the registry and messing about with it so I tried the avg fix first.
    Made the usb boot,started it up and got this error

    smartctl reports some problems with disk
    -UTILITIES_SMARTCTL_ERROR

    Moving on from the that,within the scan section the hard drive doesn't in the volumes or directory menus only the usb drive does.(although appear in the scan boot sector section)
    I should mention its also a company laptop(although its pretty old and on its last legs anyway) but even when I go into the Bios to make a change to the boot order I need a password,so maybe there's some sort of confliction there.

    Anyway I haven't tried the msconfig and deleting the russian font yet so I guess thats the next option


  • Closed Accounts Posts: 5,070 ✭✭✭ScouseMouse


    Right so,a relative arrived down earlier with the garda virus on it and some sort of "Fix it" sheet he printed off the internet and said "here fix that" and off he toddled.
    Anywhy had a look at it and its the garda virus alright.Had a look at the "fix it" and basically its saying start it up in safe mode and go into registry and remove a series of files associated with the virus.
    Now I don't exactely feel too comfortable with going into the registry and messing about with it so I tried the avg fix first.
    Made the usb boot,started it up and got this error

    smartctl reports some problems with disk
    -UTILITIES_SMARTCTL_ERROR

    Moving on from the that,within the scan section the hard drive doesn't in the volumes or directory menus only the usb drive does.(although appear in the scan boot sector section)
    I should mention its also a company laptop(although its pretty old and on its last legs anyway) but even when I go into the Bios to make a change to the boot order I need a password,so maybe there's some sort of confliction there.

    Anyway I haven't tried the msconfig and deleting the russian font yet so I guess thats the next option
    I cleared a laptop this week. The avg usb rescue worked for me. Then I ran malwarebytes then I found icons and menus all gone.

    I did a restore to repair them from a december restore point.


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 9 johnjameson


    I cleared a laptop this week. The avg usb rescue worked for me. Then I ran malwarebytes then I found icons and menus all gone.

    I did a restore to repair them from a december restore point.
    Ya I tried the avg rescue disk but when I went to scan it the hard drive didn't show up so I'll have to try 1 of the other options


  • Registered Users, Registered Users 2 Posts: 1,385 ✭✭✭red bull


    I really dont know much abou computers. I have that virus but I got past it by clicking fast internet explorer unfortunately when I switched of the computer and restarted it was there again but got past it the same way after a few restarts. I have McAfee running but it does not seem to catch it. now that I have computer running again what should I do. Not good at computer jargon sorry


  • Registered Users, Registered Users 2 Posts: 2,728 ✭✭✭RINO87


    This popped up on my computer last night. Immedatley shut down restarted and ran avg. It caught something anyway because my computer is no longer locked. Its still acting dodgy however. For example if i go to the facebook homepage my browser will flicker and in the history I can see that its been to two pages named bgpage and smartbar. Obviouly i didnt log in. Any ideas whats going on?? Bit worried because this happened a few hours after i was trying to insure my car, no bank details entered though.


  • Posts: 31,118 ✭✭✭✭ [Deleted User]


    A neighbour came around this evening with the laptop that was locked with the garda virus,
    I just rebooted in safe mode and I rolled back to a previous restore point and that fixed it.
    I put on AVG for her as well and hopefully that will stop it.


  • Registered Users, Registered Users 2 Posts: 276 ✭✭HelpWithIT


    A neighbour came around this evening with the laptop that was locked with the garda virus,
    I just rebooted in safe mode and I rolled back to a previous restore point and that fixed it.
    I put on AVG for her as well and hopefully that will stop it.

    Luckily that was the older version of the virus..she was lucky (-;


  • Registered Users, Registered Users 2 Posts: 1,331 ✭✭✭SparkySpitfire


    ...Can I ask how people are getting this virus? And I'm assuming it's nicknamed the Garda virus? As in, surely it didn't come from the guards? :confused:

    Pardon my ignorance but I'm genuinely curious.


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 276 ✭✭HelpWithIT


    I've cleaned 5 machines in last week...most of them were from the free film sites and one from free soccer channel...nothing is free in this life (-;


  • Posts: 31,118 ✭✭✭✭ [Deleted User]


    HelpWithIT wrote: »
    Newest version of the virus locks down the computer in Safe Mode as well...only way is to make a bootable USB or CD/DVD from either Kaspersky (v good) or AVG site, This virus can come from reputable sites which have been hijacked but I find that once this Garda Virus is cleared I usually find lots of other spyware etc on the infected computers and laptops, if the owner is used to looking up "alternative sites" or using torrents etc then there will always be other spyware etc to be removed. Run command was also disabled in Safe Mode with this new strain of the Virus.. tough one(-;
    That ties up with what my friend had been doing, watching "free" streaming video sites.


  • Moderators, Business & Finance Moderators, Regional South Moderators Posts: 6,854 Mod ✭✭✭✭mp22


    ...Can I ask how people are getting this virus? And I'm assuming it's nicknamed the Garda virus? As in, surely it didn't come from the guards? :confused:

    Pardon my ignorance but I'm genuinely curious.

    Its called the ukash virus.(scam)


  • Registered Users, Registered Users 2 Posts: 8 Nijinksky


    If by any chance, MBam doesn't run (virus stops it) go to

    http://www.malwarebytes.org/products/chameleon/

    and download chameleon



    Unzip the contents to a folder in a convenient location.
    Follow the instructions in the included Chameleon CHM Help File or, if the help file will not open, simply try to run the files by double-clicking on them one by one until one of them remains open, then follow the onscreen instructions.

    It registers MBam under different dll - ie, as a doc, png, txt etc. That way your visiting virus won't know its an actual exe.

    Another way is to rename mbam.exe to mbam.doc from the desktop.

    As a matter of interest , "System Restore" will nearly always have a copy of everything - so when you're finished cleaning up - turn off system restore, and then turn it back on again after 5 minutes.


    I believe its far better to pay for MBam PRO (although the free version is just as good) than to have to pay a MR Fixit 80 euros -



    Oh for those that pick up these kinds of viruses too easily - download Win Patrol, its better than Msconfig - and when attacked by these scams, Go offline and immediately go to startups and untick the virus launcher. .... remember if you are off line the virus is half-helpless :-))


    PM me if anyone wants walk throughs - for freeee :-)

    Cheers
    Tommy


  • Registered Users, Registered Users 2 Posts: 196 ✭✭lockers55


    HitmanPro 3 free trial Worked like a charm

    http://www.surfright.nl/en/hitmanpro


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 276 ✭✭HelpWithIT


    Nijinksky wrote: »
    If by any chance, MBam doesn't run (virus stops it) go to

    http://www.malwarebytes.org/products/chameleon/

    and download chameleon



    Unzip the contents to a folder in a convenient location.
    Follow the instructions in the included Chameleon CHM Help File or, if the help file will not open, simply try to run the files by double-clicking on them one by one until one of them remains open, then follow the onscreen instructions.

    It registers MBam under different dll - ie, as a doc, png, txt etc. That way your visiting virus won't know its an actual exe.

    Another way is to rename mbam.exe to mbam.doc from the desktop.

    As a matter of interest , "System Restore" will nearly always have a copy of everything - so when you're finished cleaning up - turn off system restore, and then turn it back on again after 5 minutes.


    I believe its far better to pay for MBam PRO (although the free version is just as good) than to have to pay a MR Fixit 80 euros -



    Oh for those that pick up these kinds of viruses too easily - download Win Patrol, its better than Msconfig - and when attacked by these scams, Go offline and immediately go to startups and untick the virus launcher. .... remember if you are off line the virus is half-helpless :-))


    PM me if anyone wants walk throughs - for freeee :-)

    Cheers
    Tommy

    Helpful link Tommy...but if computer is locked out in Safe mode (as new version of Ukash does) How do you get onto internet and download Chamelon?? Curious (-;


  • Registered Users, Registered Users 2 Posts: 276 ✭✭HelpWithIT


    I believe its far better to pay for MBam PRO (although the free version is just as good) than to have to pay a MR Fixit 80 euros

    In realtion to Malwarebytes Pro...it is an excellent programme but way too difficult for the average user to know the effects of registry change warnings that it pops up constantly.. it reminds me of the paid version of Spybot Search And Destroy...people were finding their computers/laptops were slowing to a crawl because they were clocking legitimate registry changes...


  • Registered Users, Registered Users 2 Posts: 276 ✭✭HelpWithIT


    Just a comment on another Garda Virus thread....if posters can't advertise their services or expertise...why are the moderators allowed to do it?? If, as I am told, they do it voluntarily ... for the good of the users..why don't the same rules apply..hmmmmmm


  • Registered Users, Registered Users 2 Posts: 8 Nijinksky


    HelpWithIT wrote: »
    Helpful link Tommy...but if computer is locked out in Safe mode (as new version of Ukash does) How do you get onto internet and download Chamelon?? Curious

    Like all 'extra' programmes, I carry a usb stick with my cleaners on it.
    PS the idea is to download chameleon and store it - either in a folder that you set aside for that purpose, or on the desktop.

    One other failsafe I use is 'Trinity Rescue Kit'

    http://trinityhome.org/Home/index.php?content=TRINITY_RESCUE_KIT____CPR_FOR_YOUR_COMPUTER&front_id=12&lang=en&locale=en

    Tiny url = http://preview.tinyurl.com/2965cae

    Trinity has 5 built in a/v and antimalware scanners and can be run from a disc (an iso) a usb stick, or from the desktop..

    I don't agree that programmes are too complicated or hard for everyday users to use. If people wait until they are struck by lightning to try to avoid strikes, they deserve to get hit :) Better to learn how to avoid strikes. Better to read the 'how to' and read me's first. Or prepare themselves by reading. I didn't have a teacher or someone to hold my hand, and I can assure folks I'm quite ordinary :)
    Cheers
    Tommy


  • Registered Users, Registered Users 2 Posts: 276 ✭✭HelpWithIT


    Nijinksky wrote: »
    HelpWithIT wrote: »
    Helpful link Tommy...but if computer is locked out in Safe mode (as new version of Ukash does) How do you get onto internet and download Chamelon?? Curious

    Like all 'extra' programmes, I carry a usb stick with my cleaners on it.
    PS the idea is to download chameleon and store it - either in a folder that you set aside for that purpose, or on the desktop.

    One other failsafe I use is 'Trinity Rescue Kit'

    http://trinityhome.org/Home/index.php?content=TRINITY_RESCUE_KIT____CPR_FOR_YOUR_COMPUTER&front_id=12&lang=en&locale=en

    Tiny url = http://preview.tinyurl.com/2965cae

    Trinity has 5 built in a/v and antimalware scanners and can be run from a disc (an iso) a usb stick, or from the desktop..

    I don't agree that programmes are too complicated or hard for everyday users to use. If people wait until they are struck by lightning to try to avoid strikes, they deserve to get hit :) Better to learn how to avoid strikes. Better to read the 'how to' and read me's first. Or prepare themselves by reading. I didn't have a teacher or someone to hold my hand, and I can assure folks I'm quite ordinary :)
    Cheers
    Tommy
    point is your original post presumed that windows was accessible.. not everybody has your knowledge to contact from USB.. That's why we tell them how to do it.. not diss someone for charging to do it for them (-;


  • Registered Users, Registered Users 2 Posts: 8 Nijinksky


    OK - I don't believe I was dissing anyone - if I left that impression - I never meant to.

    I firmly believe that users should read directions. Not to be overly cliched, but if a body can afford 7 or 800 to buy a box, they can learn to protect it, or at least ask from where they can get the most protection.
    (I'm a freebie user - if I like what it does, I'll donate)

    Much as I probably wouldn't admit it, I do far too much handholding.

    There's a certain satisfaction in getting one up on the bad guys, and if it means going searching for them, then so be it :)

    Unless someone needs help its EOD for me thanks

    Tommy


  • Registered Users, Registered Users 2 Posts: 4,314 ✭✭✭BOHtox


    Got done on my PC the other day. On the laptop now although my virus looks different to the one in the picture in this thread, possibly in the op. It looks a lot more legit and if I wasn't used to computers and viruses etc, studying computer science in college, I probably would have fallen for it. If it wasn't for my terrible work ethic I probably would have gotten rid of it by now. Hopefully get around to it at the weekend.


  • Registered Users, Registered Users 2 Posts: 143 ✭✭willciviceg5


    Hi, sorry if this question has already been answered, i am hopeless with computers. I have just got this virus, at first when i tried to start in safe mode it was just shutting down straight away. In the menu that comes up with f8 it gave me the option to repair problems and from there I was given the option to restore to an earlier date, I did that and it did not fully complete. I then went back into safe mode and it opened up fine, I then restored to an earlier date again which completed fully. I have now restarted the computer and it seems to be working ok, I have just downloaded superantispyware and its now scaning. What further action should I take ie. anti virus, anti malware. Any help greatly appricated.


  • Registered Users, Registered Users 2 Posts: 143 ✭✭willciviceg5


    Hi, sorry if this question has already been answered, i am hopeless with computers. I have just got this virus, at first when i tried to start in safe mode it was just shutting down straight away. In the menu that comes up with f8 it gave me the option to repair problems and from there I was given the option to restore to an earlier date, I did that and it did not fully complete. I then went back into safe mode and it opened up fine, I then restored to an earlier date again which completed fully. I have now restarted the computer and it seems to be working ok, I have just downloaded superantispyware and its now scaning. What further action should I take ie. anti virus, anti malware. Any help greatly appricated.

    Ok this may be just a coincidence but I received a call on the landline today from an Indian sounding guy called "Jim" calling from windows support in relation to the problem with my windows device, I said "I do not have a computer and do you know who you are calling and he hung up" advice please.


  • Posts: 31,118 ✭✭✭✭ [Deleted User]


    Ok this may be just a coincidence but I received a call on the landline today from an Indian sounding guy called "Jim" calling from windows support in relation to the problem with my windows device, I said "I do not have a computer and do you know who you are calling and he hung up" advice please.
    Windows support scam, just ignore them.
    If you have the time, waste their time, give them the runaround it reduces their chances of duping someone into downloading their malware.


  • Advertisement
Advertisement