PDA

View Full Version : Anybody here run across this one?


KJ3N
12-20-2011, 07:44 PM
I'm interested if any of you have seen, or know where to find the virus (actually I think it's malware) mentioned in this thread (http://forums.qrz.com/showthread.php?324984-Virus-problem).

I want to infect a sacrificial lamb PC with it and see what this does. Yeah, I know, it's a strange request.
KC2UGV
12-20-2011, 07:46 PM
I know of no virus that will survive a system wipe.
KJ3N
12-20-2011, 07:49 PM
I know of no virus that will survive a system wipe.

That's a little extreme in most cases.
KC2UGV
12-20-2011, 07:51 PM
Of course, we get some awesome expert advice here:
http://forums.qrz.com/showthread.php?324984-Virus-problem&p=2410831#post2410831

Hm... Didn't know you can't get rid of encrypted registry entries. Hell, never knew of such an animal. Hijack This tends to point out all the nasty suspect keys, and then UBCD allows you to edit the registry of the machine in an offline state.

But, it sounds like XP AV Security 2009. It's moderately difficult to remove, to the point where it's generally not worth it. Just reload winderz.
ad4mg
12-20-2011, 07:58 PM
Glen's issue with the double-click of exe files not working sounds like the registry entry for defining how the exe is handled. I recall a binary data bit change was all that was required to correct this on these "AV <whatever> 20XX" infected machines.
WØTKX
12-20-2011, 08:04 PM
Agreed, I hate the premise of a system wipe. And I don't use MS, Norton, or any of the "leading" AV products, as they are a target of opportunity to the hacking community. Duh?

And fer crying out loud, there is nothing wrong with the premise of a registry vs text files. Just because the settings are in a flat file database with a branching tree structure?

:roll:
KC2UGV
12-20-2011, 08:13 PM
I go for the wipe, since I'm generally getting paid hourly to fix it.

I can spend 8 hours, and hopefully fix it; or spend an hour and definitely fix it.
W1GUH
12-20-2011, 09:46 PM
I'm interested if any of you have seen, or know where to find the virus (actually I think it's malware) mentioned in this thread (http://forums.qrz.com/showthread.php?324984-Virus-problem).

I want to infect a sacrificial lamb PC with it and see what this does. Yeah, I know, it's a strange request.

Please make every effort contain it! ;)
W1GUH
12-20-2011, 09:48 PM
I go for the wipe, since I'm generally getting paid hourly to fix it.

I can spend 8 hours, and hopefully fix it; or spend an hour and definitely fix it.

Well, cool. Is that an offer to pay anyone who takes that advice, that kind of $$$$?
KJ3N
12-20-2011, 10:09 PM
Please make every effort contain it! ;)

It's got to get on the machine in the first place. My machines are pretty well protected. ;)

So far, nobody's even volunteering to point me in the right direction.
KJ3N
12-20-2011, 10:30 PM
It's got to get on the machine in the first place. My machines are pretty well protected. ;)

So far, nobody's even volunteering to point me in the right direction.

Well, I found one website via a Google search that tries to install something on this machine, but AVG blocks the threat. Guess this means no soup for me. ;) :snicker:
W2NAP
12-20-2011, 10:42 PM
virus? forgot what that was.....

<3 LinuxMint
KC2UGV
12-21-2011, 05:18 PM
Well, cool. Is that an offer to pay anyone who takes that advice, that kind of $$$$?

No, that's an offer for anyone who has an issue with their machine to pay me to fix it.
KC2UGV
12-21-2011, 05:19 PM
virus? forgot what that was.....

<3 LinuxMint

Here here. I went Mint (From Ubuntu) and never looked back :)
W2NAP
12-21-2011, 05:20 PM
Here here. I went Mint (From Ubuntu) and never looked back :)

i got LM9 LXDE and LM11 Gnome 2.

absolutely hate gnome 3. so prob when LM13 comes out ill move it all over to 13 lxde
KC2UGV
12-21-2011, 05:29 PM
i got LM9 LXDE and LM11 Gnome 2.

absolutely hate gnome 3. so prob when LM13 comes out ill move it all over to 13 lxde

LM includes a GNome fork: MATE, which is supposed to keep looking like Gnome 2.
W2NAP
12-21-2011, 05:40 PM
LM includes a GNome fork: MATE, which is supposed to keep looking like Gnome 2.

yea I am waiting to see how that dose.. havent tried it yet. if it is stable enough come LM13 (and LM puts out a mate iso) i may try it.
W1GUH
12-22-2011, 05:48 PM
No, that's an offer for anyone who has an issue with their machine to pay me to fix it.

Touche'. Nice!!!