Virus

[genek]

There is a major virus that was sent out this week. Normal anti virus software will not remove it. I found mine this morning..

Here is what my ITT guy sent me to so I can remover it.

Eugene,
You need to start your computer in safe mode with networking. To do this:
1. Push power button to turn on computer
2. As soon as you do that start hitting the F8 button.
3. The computer will be in DOS mode and will offer options. The first is safe mode. The second is safe mode with networking.
Choose safe mode with networking.
It may ask what operating system you want to boot after that. Only one should be listed and that is what you choose.
Once the computer boots, the icons will be bigger and it will tell you its in safe mode. This is o.k. From here, you want to install
malwarebytes. Just go to a google page and type it in. Once you install it, update and run it. After it's complete check all items found
and remove them. Restart the computer in safe mode with networking AGAIN. Once the operating system is up in safe mode, download
and install superantispyware. Do this from a google search as well. Run it and remove all items it finds. Should take care of your problem.
The only reason it's running slow is because of the viruses. Putting the computer in safe mode doesn't allow the viruses to load and you should see increased internet speed.

The virus shows up as a dox/rovnix.v and win32/rovnix.gen!b
Be sure to check your system real good.

[scottp55]

Any Gurus opinions? Lost a laptop and design computer still has the "slows". Eliminated MS security essentials and AVG free and disabled full Avast on tower. Tower now running only Panda 28 days left. This new laptop running only Kaspersky on recommendation of OZ guru. I'm kind of lost with this stuff and have gotten as many opinions as people I've asked who know what they are talking about. Is there a anti-virus consensus? scared to death control computer will get infected as well. Scanning thumb drive each and every time but still worried.

[dlcw]

scared to death control computer will get infected as well. Scanning thumb drive each and every time but still worried.

My control computer is NOT connected to my network at all. It is purely standalone. It is running Windows 7 Pro 64-bit, Aspire, eCabinets, Shopbot Link and that's about it. Might be a waste of computer power but it's ONLY purpose is the drive the CNC. I figure as long as it's working, I'm not going to try and fix it with OS updates and such.

[Brian Harnett]

What virus was it and how did you get? it most are piggybacked on downloads or e mail attachments.

[Brian Harnett]

Just reread and saw the virus name at the bottom of your message

[dana_swift]

The virus and threat is real, its well designed virus that is especially nasty. If you have it, the rebooting is its first clear signature. Each reboot it reloads through the Microsoft NTFS vulnerability and potentially infects more of your disk with new trojans each reboot.

Linux may potentially have this same vulnerability if it uses NTFS hard disk formatting, which is pretty popular. Somebody who knew what they were doing designed this virus.

If your computer is not rebooting or showing other virus symptoms, just take the usual precautions to prevent infection. Look up virus prevention online if you need assistance. Antivirus programs are not an effective solution.

Thats my take on it-

D

[scottp55]

Thanks all, may explain my problems. Kirk's showing up for his second crash course on Desktop before our second one is shipped. Looks like the first thing he'll do is inspect this new laptop and my tower. Control computer hooked to NOTHING except wheelchair (sneaker) network thank goodness. Hate stuff I don't understand.

[dana_swift]

Scott, I do the same thing. My control computer is not hooked to the internet. Same thing with my design computer, no internet. I have a couple other computers connected to the internet, but it makes it easy to know what computers I can trust and which I cant.

I have to presume my internet computers are infected with something, even though there is no evidence of that at the moment. Security is a real problem for a person familiar with internet technology, it is a nightmare for everyone else. My prediction is: with all the problems the current internet has a replacement technology will come along that is built with security in mind from the ground up. The internet was built with trust in mind from the ground up, unfortunately it was made open to the whole world and the result is plain to see.

Sadly we have had to learn we cannot trust even the folks who brought us the internet.

Sigh.

D

[scottp55]

Wish I'd kept my tower (design) off the internet, but Just found virus on two thumbdrives that had been scanned multiple times with old anti virus. Good thing Kirk is a "Geek"(I've been told it's not derogatory" and can figure out if control computer has it. Another snowstorm looks like it's going to cut Desktop training short on Sunday as it is. There are motivated workers out there, he's working his day job and then driving the 6 hours here and back again on Sunday for reimbursement only(Well he will get a new Desktop shipped to him soon :)). I think our brains will be toasted to a crisp by Sunday noon. Virus's are a pain-spent 6 hours drawing yesterday on a 2 sided project and now don't dare use it.

[genek]

Just reread and saw the virus name at the bottom of your message

Brian have no clue as to how it got on my computer. The only e-mails opened was from friends, family and customers. How it got past My anti virus system I do not know. How long it has been there before it was detected I do not know. It first showed up in Nov of this year according to my computer itt guy... I just know it slowed everything down and no one can tell me what it does.

[coryatjohn]

I have never installed an anti-virus program and have never had any sort of infection.

Keeping a computer free of viruses takes the same discipline as keeping your body free of infections. Stay away from nasty and dirty things! Stay out of places where these infections lurk. Be careful of what is downloaded. Use GMail as your email program. Don't use anyone else's thumb drive.

Simple steps.

[phil_o]

I have never installed an anti-virus program and have never had any sort of infection.

Keeping a computer free of viruses takes the same discipline as keeping your body free of infections. Stay away from nasty and dirty things! Stay out of places where these infections lurk. Be careful of what is downloaded. Use GMail as your email program. Don't use anyone else's thumb drive.

Simple steps.

And always wear protection,

[khaos]

I have never installed an anti-virus program and have never had any sort of infection.

Keeping a computer free of viruses takes the same discipline as keeping your body free of infections. Stay away from nasty and dirty things! Stay out of places where these infections lurk. Be careful of what is downloaded. Use GMail as your email program. Don't use anyone else's thumb drive.

Simple steps.

This is an oversimplification at best. unless nasty and dirty things include any network the biggest network of all being the internet. Including your bank's website. Software can be imbedded into an image. You look at a picture of the statue of liberty and now you are a zombie.

If your computer touches a network get a good scanner and keep it updated. Never install two virus scanners at the same time they will fight.

[scottp55]

In looking for graphics that vcarve well for the kids blocks I find myself in every kind of site from coloring books to tattoo art(tattoo's carve really well) any thing with "Free" in it seems to be a virus magnet.
I'm out of my element-what are people using?
Eugene, My friend who's a quad and who's business is web site set-ups, also reminded me to uninstall those programs you mentioned after each step and also added Ad-Aware for a 1-2-3 Punch, But even he got zapped last month and had to do a clean install(which I've never done:().

[dana_swift]

Joe- I keep hearing "rumors" about viruses contained in images. If that is true, I have no idea how it could be done, and am wanting info. Please educate me, or send me to an source on the subject where I can find out what I am overlooking.

Thanks-

D

[genek]

joe- i keep hearing "rumors" about viruses contained in images. If that is true, i have no idea how it could be done, and am wanting info. Please educate me, or send me to an source on the subject where i can find out what i am overlooking.

Thanks-

d

dana what my it guys told me was they are riders that are attached to the file that has the picture or video and are encapsulated till you open the file which gives a signal to open that file also. As long as that file is closed the virus scanner can not see the virus and since it checked the file it allows it to open.

[scottp55]

http://en.kioskea.net/faq/384-myth-a-jpeg-file-can-contain-a-virus :( (http://www.youtube.com/watch?v=kxJKFDV_o_s)

[scottp55]

http://www.youtube.com/watch?v=kxJKFDV_o_s That's not nice-how do you stop that?

[khaos]

Joe- I keep hearing "rumors" about viruses contained in images. If that is true, I have no idea how it could be done, and am wanting info. Please educate me, or send me to an source on the subject where I can find out what I am overlooking.

Thanks-

D

Its actually code at the end of the byte array. You simply overrun the buffer. :( Commonly known as buffer overflow. It doesn't happen on all renderers but it does happen. Because the code is injected the usual safeguards can be bypassed. I would say that a vast majority of renderers have patches but as devs we can make mistakes and leave a hole. :o

~Life runs on code :cool:

[Brady Watson]

Regularly back up your computer with something like Ghost. If you get a virus, roll back to before the virus & restore your whole deal. I personally hate all these virus scanners and spy bot programs etc - they bog down your machine and gum up the works if you are a power user.

I agree with John - if you can't control your urge to look at donkey prawn or don't look at URLs before you click links to see where it is going to take you or aren't quick enough to alt+F4 your way out - then arm yourself to the teeth with whatever you can...or maybe discipline yourself to keep your work & Bot computer COMPLETELY separate from 'extra-curricular' sites like face place and all that honkey tonk people our age have no business being on anyway.

Meanwhile...let's keep everyone in fear about these terrible viruses ~ Oh no-oooo! :D

-B

[JohnCoker]

I have never installed an anti-virus program and have never had any sort of infection.
+1 I have no idea what people are doing that causes them to get these virii, but ordinary precautions are quite sufficient without anti-virus software or any of these exotic recommendations.

The most potent virus is the one spread by humans. Whether it's the chain letter or the recommendation to install XYZ software, the human vector is always the most effective.