TranceAddict Forums

TranceAddict Forums (www.tranceaddict.com/forums)
- Chill Out Room
-- Malware/virus help


Posted by chode_breath on Aug-06-2012 02:26:

Malware/virus help

I was just using my main PC and reading a wiki page. Every time I tried to scroll upwards, it would do so for a second but then rapidly flick back to where I was. I clicked into the address bar up the top to see if it was a glitch on the page, and the cursor started spacing rapidly across, as if I was pressing the space bar. I then switched into my facebook tab and the same thing happened.

Am I right in guessing that someone has inserted a trojan onto my comp and was messing with me by overriding my commands? I remember a friend of mine used to have a program called "Pest" that could do stuff like this.

I don't have anti-virus or a firewall and I'm using a PC (dumb, I know). I downloaded TrendMicro's Housecall, which I have used for years when I suspected a virus. It did not find anything.

I've logged out of all my internet accounts, erased my cookies, saved data, passwords etc, and disconnected the computer from the net.

Can anyone offer any advice as to what I should do next? The best free anti-virus program seems to change every few years. What is the good one now?


Posted by MSZ on Aug-06-2012 02:35:

have you tried replacing/disconnecting your keyboard?


Posted by chode_breath on Aug-06-2012 02:41:

It is a wireless keyboard/mouse combo, so some kind of hardware glitch is possible but I'm fucking paranoid now. What if it is a trojan and I pass it off as a keyboard stutter? There's no real way to know is there? Fuck.

edit: no, I haven't tried that because the problem just happened for 10 seconds. It wasn't persisting over 10 minutes or something.


Posted by djnitride on Aug-06-2012 02:42:

Re: Malware/virus help

quote:

Can anyone offer any advice as to what I should do next? The best free anti-virus program seems to change every few years. What is the good one now?


Same as it is every year, regularly updating and using your brain.


Posted by Halcyon+On+On on Aug-06-2012 02:58:

Microsoft Security Essentials is surprisingly excellent. We managed to get Stuxnet at work ( ) and it nuked it (muahah), even on our source machine. MS has a shit history of security, but they've finally caught up with Win 7. there's really no need for Kaspersky, McAfee, etc. All that shit is basically spyware, at this point in most people's PCs.


Posted by Halcyon+On+On on Aug-06-2012 03:00:

quote:
Originally posted by chode_breath
It is a wireless keyboard/mouse combo, so some kind of hardware glitch is possible but I'm fucking paranoid now. What if it is a trojan and I pass it off as a keyboard stutter? There's no real way to know is there? Fuck.

edit: no, I haven't tried that because the problem just happened for 10 seconds. It wasn't persisting over 10 minutes or something.


Wireless signals are subject to all manner of interference. I would not be the least bit surprised if some nut in a panel van full of surveillance equipment merely drove too close to your apartment, possibly Feds looking for HardCandy pings.

Replace your batteries, update drivers. You probably don't have a virus.


Posted by chode_breath on Aug-06-2012 03:06:

Thanks for your reassurance. Though I'm still antsy, because I have had this keyboard for years and never had any problems like this.

I've been thinking about upgrading to Windows 7 (from XP). Maybe this is a good time to do it? Though 8 is coming out soon. Then again, that probably won't be useable for 2 years after being released, right?


Posted by Halcyon+On+On on Aug-06-2012 03:09:

The outlook for Windows 8 is rather reminiscent of the outlook for Vista (abysmal). I hate to be a naysayer with 0 experience, but it's looking like a shitty Apple clone at best, and an utter enemy to general developers at worst. Get Windows 7, it's very secure, and much smoother than XP. And still has a couple service packs left before completion, as usual. You can probably bank on using it quite successfully for another 5-7 years, at least.


Posted by srussell0018 on Aug-06-2012 03:11:

Reboot in safe mode with networking. Download Malware Bytes, Super Anti Spyware, Hitman Pro (32 or 64 bit), and CCleaner (all free).

Run a quick scan with SAS and then MBAM. Then run a scan with Hitman Pro, which should pick up any rootkits that SAS or MBAM might miss.
Run CCleaner to clean up the registry, and then reboot into normal mode. That will fix about 99% of infections, and judging by what you've said, yours is pretty minor (if you even have one).

If you still have problems, try getting to the task mgr and locating the infected process. You should be able to get the file path, and then you can find it in the registry and get rid of it for good.


Posted by Looney4Clooney on Aug-06-2012 03:36:

honestly , if you have a virus, or think you have a virus, you might as well just reinstall everything and not risk having your personal info compromised. There are rootkit styled viruses that will not be detected and will keep corrupting your computer, every computer connected to your network ....

It doesn't sound so bad so try what russel said but the second it detects a virus, stop and disconnect the internet. And do all your research on another computer. In fact i would download the program , burn it to a cd , don't use a usb device, and install the program this way.


A: Disconnect from the net and all other computers asap and shut down any wifi.
B: Backup files you absolutely need to a drive that isn't on a network and assume everything on it has been infected. Don't touch it. Don't put anything into your computer like a usb drive.
C: Before reinstalling WIndows, make sure you don't have a bios or boot sector level virus
D: Install windows with no internet.
E: Make sure windows firewall is on
F: Update all the OS updates ASAP.
G: Get a proper virus solution.

you will have to do some internet searching so you will need a computer that has access to the internet that you know does not have a virus and has a program.

I've known people that have tried to get rid of viruses over and over reinstalling everything over and over not realizing that the problem was either some other computer on the network, some rootkit style virus which happened to mac users a few months ago.

With pcs, if you have a virus, it just isn't worth it trying to isolate it and get rid of it. It sounds like overkill but i just wouldn't risk having everything you care about compromised.


Posted by srussell0018 on Aug-06-2012 04:33:

^^ Don't listen to anything this guy says.

"rootkit styled virus" ?

It's a rootkit, or it's not a rootkit; and even if it is, anyone who has anything more than even the most basic understanding of computers should be able to locate and delete the infection from the registry, which I'm sure you must know, given your obvious expertise on the subject.

You're right though, totally not worth it to take 15 minutes to delete some registry entries, when you could just backup all your files, disconnect from the internet, run an initial scan to determine if the computer is infected, reinstall Windows, and THEN get a proper AV program.


You're beginning to sound like Nou when chiming in on subjects you clearly know very little about.


Posted by djnitride on Aug-06-2012 04:54:

For personal systems its probably not a big enough deal to reinstall, but if you suspect you have a rootkit like infection and do important things on your computer re installing is definitely the only sane option if you are not an expert.


Posted by Looney4Clooney on Aug-06-2012 05:18:

quote:
Originally posted by srussell0018
^^ Don't listen to anything this guy says.

"rootkit styled virus" ?

It's a rootkit, or it's not a rootkit; and even if it is, anyone who has anything more than even the most basic understanding of computers should be able to locate and delete the infection from the registry, which I'm sure you must know, given your obvious expertise on the subject.

You're right though, totally not worth it to take 15 minutes to delete some registry entries, when you could just backup all your files, disconnect from the internet, run an initial scan to determine if the computer is infected, reinstall Windows, and THEN get a proper AV program.


You're beginning to sound like Nou when chiming in on subjects you clearly know very little about.


sigh

there are many types/styles rootkits. A style delineates a classification. It already implies that it is. Your little tangent on to be or not to be is a little redundant. Your solution for a rootkit, a simple registry edit will not work on say a kernel, boot, or firmware type rootkit which is really the types you would even use the word.

There are different kinds , i used the word style. Clearly you should do a little more research on them because a simple registry workaround will not do anything for most and is somewhat absurd. It is somewhat annoying that someone so confident in their knowledge would be so ignorant on such a concept and insult someone who has provided pretty sound advice and is trying to help someone. Does tainting every single thread you post with your bullshit make you feel good ? If i've made a mistake, by all means show me where i went wrong. But you just go on attack mode even when you've made some rather ignorant statements that actually just puts your knowledge in question simultaneously making you look a certified asshole.


Posted by chode_breath on Aug-06-2012 07:57:

So...I downloaded Microsoft Security Essentials.

It has identified 2 minor cookie tracker type of things, 3 obvious threats which can be deleted, and 1 potential trojan.

The trojan is called WIN32/Ammyy Admin, and the infected file is MX Skype Recorder, a program I bought several months ago for work after a colleague suggested it. If it was just a computer game or something, I'd delete it right away, but I need this program badly.

Several google searches have made me believe that the program IS malicious, even though it's container program, MX Skype Recorder, works well. There's no wiki page for the ammyy group, and all the sites that recommend the two programs link back to each other.

The malware: http://www.microsoft.com/security/p...32%2FAmmyyAdmin

An MX mirror site which dubiously asserts "We've analyzed the latest version of MX Skype Recorder with 30 antivirus engines and found that it�s virus-free. See scan results." http://mx-skype-recorder.en.softonic.com/

The horrendously fake looking awards page for the software: http://www.skyperec.com/awards.html

Fuck. That was pretty dumb of me.

New thread purpose: who knows a good skype call recorder?


Posted by Sushipunk on Aug-06-2012 08:20:

ITT: The OP Skypes with questionably large/deformed men and women, and his 'colleague' needs a better recording program, because the current one isn't cutting it (and possibly the 'colleague' has also been found out).

Happens to the best of us.


Posted by Chimney on Aug-06-2012 10:29:

Re: Malware/virus help

quote:
Originally posted by chode_breath

Can anyone offer any advice as to what I should do next?


Format.


Posted by srussell0018 on Aug-06-2012 13:41:

quote:
Originally posted by Looney4Clooney
sigh

there are many types/styles rootkits. A style delineates a classification. It already implies that it is. Your little tangent on to be or not to be is a little redundant. Your solution for a rootkit, a simple registry edit will not work on say a kernel, boot, or firmware type rootkit which is really the types you would even use the word.

There are different kinds , i used the word style. Clearly you should do a little more research on them because a simple registry workaround will not do anything for most and is somewhat absurd. It is somewhat annoying that someone so confident in their knowledge would be so ignorant on such a concept and insult someone who has provided pretty sound advice and is trying to help someone. Does tainting every single thread you post with your bullshit make you feel good ? If i've made a mistake, by all means show me where i went wrong. But you just go on attack mode even when you've made some rather ignorant statements that actually just puts your knowledge in question simultaneously making you look a certified asshole.


It's really not worth discussing with you, because you very clearly have no idea what you're talking about.


Posted by Looney4Clooney on Aug-06-2012 13:56:

quote:
Originally posted by srussell0018
It's really not worth discussing with you, because you very clearly have no idea what you're talking about.


fantastic,

the next time you are are about to have a tantrum and discharge the usual menstrual flow of detritus you consider fact, perhaps you could pre-emptively not be a a little bitch and apply that same logic.

I think we will get along great if you just stick to this format.

Also, I have a feeling every single anti virus vendor on the planet is dying to know how you can fix a firmware or boot based rootkit with a "simple" registry delete.


Posted by OrangestO on Aug-06-2012 14:01:

An Apple a day keeps the doctor away.


Posted by srussell0018 on Aug-06-2012 14:17:

Tracking cookies on your PC?

Reinstall Windows.


Posted by Looney4Clooney on Aug-06-2012 14:51:

quote:
Originally posted by srussell0018
Tracking cookies on your PC?

Reinstall Windows.


if this was directed to me, that statement was more rhetorical in nature and really did not require your input. That is a discussion you should be having with said vendors as they would be foaming at the mouth if such an easy fix would work.

And fyi, reinstalling windows will not get rid of a boot sector virus
Formatting your hardrive will also not get of said virus.

But clearly, you know this which makes me wonder if you acting dumb is some sort of mating call. I'm flattered. You must really like me me alot because this happens quite often. You spoil me.


Posted by srussell0018 on Aug-06-2012 15:10:

quote:
Originally posted by Looney4Clooney
if this was directed to me, that statement was more rhetorical in nature and really did not require your input. That is a discussion you should be having with said vendors as they would be foaming at the mouth if such an easy fix would work.

And fyi, reinstalling windows will not get rid of a boot sector virus
Formatting your hardrive will also not get of said virus.


TDSSKiller will remove bootkits fairly easily. You don't even need to reinstall windows or reformat your HDD. Clearly you know this though, given your obvious mastery of the subject.

http://support.kaspersky.com/viruse...s?qid=208280748

Rootkits 101. Seriously, I don't know what you get out of trying to appear knowledgeable about things that are obviously over your head. I do this pretty frequently at work, while you play the piano. Stick to what you know.

The guy asks for advice for a possible infection. You immediately advise that he reinstall Windows before he even knows if he has a virus. Tell me, if you got a sliver on your finger, would your first move be to amputate?


Posted by Looney4Clooney on Aug-06-2012 15:23:

you are the one suggesting to reinstall windows as a method to remove bootkits. I was merely correcting your oversight. I do find it funny how your simple registry fix has mutated into a tool that attacks this issue. Did you google stuff.

And no, i suggested he do what you said, and if it turns out you have something, best to just reinstall everything and make sure you don't have a virus at the most basic levels. Which you seemed to have agreed with just yesterday.

But this isn't about viruses. As a man of psychology, i'm sure you more than I know that the the impetus for your predictable fetish like obsession with the ad hominem really boils down to you never living up to your parent's expectations, a bambi penis that arches down even while half erect, and a nasty foot fungus that just won't go away. For this you have my support and sympathy. Except for the dick thing. You are solo on that. You know what , fuck that, i am here for you even for the dick thing. Talk about chivalry.



Powered by: vBulletin
Copyright © 2000-2021, Jelsoft Enterprises Ltd.