In addition to Jeffrey's recommendations, turn off the restore function
in XP before cleaning up the files. Some nasties will reinvent
themselves based upon the restore file. After cleaning, turn the restore
function back on.
I hope all this proves satisfactory.
Tom Mayer
J Ottie wrote:
> Original Message --
> From: "Sybilgal" <[log in to unmask]>
> To: <[log in to unmask]>
> Sent: Friday, August 24, 2007 10:05 PM
> Subject: [PCSOFT] Virus removal--Help Please!
>
>
> Hello,
>
> My son has just inherited an old HP computer (circa 2000). It is running WXP
> Home.
>
> He apparently has received a virus/and or spyware that is totally ruining
> his ability to function. He downloaded and ran a complete scan with
> PCCillin and though it found spyware it did not find any viruses.
>
> There are continual pop up messages advising that an 'attack on his system
> is being attempted and to 'click here' to download software that will clean
> it'. However I strongly suspect that this is part of the scam...
>
> It continually opens an IE window to a website--whose name I cannot quite
> recall, but it contains the word shred or shredder. We were able to remove
> (or so we thought) the "UDefender" program that seemed to install itself on
> his system, but during the night it came back...
>
> My son is not computer literate, and I am weak on the virus/attack
> knowledge... So we need help!
>
> How on earth do I get this thing OFF his computer?
> The system is slow as it is, 800mghz (if that's correctly defined) and one
> gig ram.
>
> I sure appreciate any help...My son needs to be able to access work info
> several times a day for his job, so this is essential to have fixed.
>
> I thank you in advance for any help!
>
> Kathleen LaValley
>
>
> $$$
>
>
> Good Morning Kathleen,
>
> Based on my experiences, I believe the following free utilities should be able to clean up the mess you're seeing on your son's PC:
>
> 1) Ad-Aware Personal 1.06r1
> http://www.filehippo.com/download_ad-aware/?2466
>
> 2) Spybot Search and Destroy 1.4
> http://www.filehippo.com/download_spybot_search_destroy/?148
>
> 3) AVG (ewido) Anti-Spyware 7.5.1.43
> Since your son's machine is older and its' resouces already taxed, I recommend running the free online scan rather than installing the program. Both do the same job, but the installed version will increase the startup load on the machine's limited resources. The online scan can be accessed here:
> http://www.ewido.net/en/
>
> 4) If your son's PC needs a good Anti-Virus program, I suggest installing Grisoft's AVG Anti-Virus Free Edition.
> AVG Free Edition 7.5.484
> http://www.filehippo.com/download_avg_antivirus/
>
>
> I'd suggest running the online version AVG Anti-Spyware first, followed by download and installing Ad-Aware and Spyboy SD. Be sure to update both Ad-Aware and Spybot SD with the latest anti-spyware definitions and suchlike before running the scans. Also be sure to select a full & complete scan when using Ad-Aware. It's possible you may have to run one or more of these programs in Windows 'Safe Mode' if things are really a nasty mess, but that's only a remote possible. What is however likely that after having run a full Ad-Aware scan, you may have to reboot the computer to allow Ad-Aware to finish up its' cleanup outside of Windows. It's really not-to-worry about any of this, as all of these scans fairly easy-to-do and straightforward, with the programs walking you through step-by-step.
>
> Finally, if you feel you need to run a good and thorough anti-virus scan of the system and you don't have or trust the AV program currently installed, I suggest uninstalling your old AV program and then installing a fresh copy of AVG Anti-Virus. As with the anti-malware scanners, be sure to update AVG with the latest ant-virus definitions before running a complete scan.
>
> All of the above should be enough to get you started and on-the-way to reclaiming control of your son's PC. A reminder too that, when all is said and done, be sure that your son's machine is fully patched and hotfixed using Micosoft's Windows Update.
>
> Please let us know how you make out and, if any lingering problems remain after doing all of the above, let us know about that, too and we'll provide additional advice and recommendations to resolve those issues. I am,
>
> Very truly yours,
> Jeffrey Ottie
>
>
>
>
>
PCSOFT's List Owner's:
Bob Wright<[log in to unmask]>
Drew Dunn<[log in to unmask]>
|
