Does Anything Work?

mooreted · Nov 2, 2010

I'm a computer tech. Day in and day out we are wiping systems with one variant or another of, WinAntiVirus, System Security Tool, Personal Security, etc. I have customers get infected running Norton, MacAffee, MSE, AVG, Avast. Nothing seems to stop it and nothing seems to be able to remove it.

Is there nothing that can stop it? Well, short of sandboxing the whole system and locking the user down; we can't babysit everyone in town all day.

Orbital Shark · Nov 2, 2010

I'll be honest I don't think there is...

The issue is down to hijacked websites and the most standard users if suddenly faced with a warning screen like...

...will instantly think "Oh my god! I better run the scan"

I'm in the same boat, sooo many machines cleaned from these 'FAKE' antivirus malware.

I find that if, for some reason, i get a similar warning screen I instantly run task manager & kill all 'iexplorer.exe' tasks

shortly followed by a download of MalwareBytes

OS

Barman58 · Nov 2, 2010

I'm afraid that this type of socially engineered malware can only be countered with education - which may well be a battle that will never be won.

There is no way that any tech can prevent a user from clicking on the link to cure their perceived problem, a perception that is engineered by the malware writing ~~scum~~ fraternity.

People will actually ignore the warning from their own AV that the file they are downloading is not what they think it is as the malware has already convinced them

mooreted · Nov 2, 2010

Orbital Shark said:
I'll be honest I don't think there is...

The issue is down to hijacked websites and the most standard users if suddenly faced with a warning screen like...
View attachment 110396
...will instantly think "Oh my god! I better run the scan"

I'm in the same boat, sooo many machines cleaned from these 'FAKE' antivirus malware.

I find that if, for some reason, i get a similar warning screen I instantly run task manager & kill all 'iexplorer.exe' tasks

shortly followed by a download of MalwareBytes

OS

Yeah, we've been telling people to pull the plug if they see that and scan their system when they get it back up and never go to that site again.

mooreted · Nov 2, 2010

Barman58 said:
I'm afraid that this type of socially engineered malware can only be countered with education - which may well be a battle that will never be won.

There is no way that any tech can prevent a user from clicking on the link to cure their perceived problem, a perception that is engineered by the malware writing ~~scum~~ fraternity.

People will actually ignore the warning from their own AV that the file they are downloading is not what they think it is as the malware has already convinced them

I would not have crossed out "scum"

Barman58 · Nov 2, 2010

As a mod I have to set a good example

Not that they deserve it

mooreted · Nov 2, 2010

Barman58 said:
As a mod I have to set a good example Not that they deserve it

Lol. Well, I suspected there wasn't much I could do about clueless users. Job security, I guess.

Thanks for all the fish.

Darician · Nov 2, 2010

I hate to say it but my boss always says "Any time you idiot proof something, idiot version 2.0 comes along and breaks it." Unfortunately, no matter the amount of user education, these malware coders are getting better and better and there's no way to keep users updated on this. The other part is that users need to actually take the time to read prompts and be informed about computer security, which unfortunately most users simply don't care about, they just want their PC to work and when it doesn't, it's IT's fault.

mooreted · Nov 2, 2010

Darician said:
I hate to say it but my boss always says "Any time you idiot proof something, idiot version 2.0 comes along and breaks it." Unfortunately, no matter the amount of user education, these malware coders are getting better and better and there's no way to keep users updated on this. The other part is that users need to actually take the time to read prompts and be informed about computer security, which unfortunately most users simply don't care about, they just want their PC to work and when it doesn't, it's IT's fault.

Yeah, I hate it when I fix their computer, they get infected again and now it's all my fault.

Why did I get into IT?

Fayla · Nov 2, 2010

mooreted said:
Darician said:

I hate to say it but my boss always says "Any time you idiot proof something, idiot version 2.0 comes along and breaks it." Unfortunately, no matter the amount of user education, these malware coders are getting better and better and there's no way to keep users updated on this. The other part is that users need to actually take the time to read prompts and be informed about computer security, which unfortunately most users simply don't care about, they just want their PC to work and when it doesn't, it's IT's fault.

Click to expand...

Yeah, I hate it when I fix their computer, they get infected again and now it's all my fault.

Why did I get into IT?

That's one of the reasons why I quit paid I.T. work. The most I fix now is the odd computer for a relative~

Francis93 · Nov 2, 2010

mooreted said:
I'm a computer tech. Day in and day out we are wiping systems with one variant or another of, WinAntiVirus, System Security Tool, Personal Security, etc. I have customers get infected running Norton, MacAffee, MSE, AVG, Avast. Nothing seems to stop it and nothing seems to be able to remove it.

Is there nothing that can stop it? Well, short of sandboxing the whole system and locking the user down; we can't babysit everyone in town all day.

A bunch or a combination of anti-malware tools should be able to stop these infections. I personally have my own folder of these tools. It contains Hitman Pro, Malwarebytes' Anti-Malware, SUPERAntiSpyware, Emsisoft Emergency Kit, Norton Power Eraser, VirusTOTAL Uploader, etc.

This site is also useful because it has a website and forum that contains tutorials on how to remove rogue viruses yourself. If you're a Facebook user, LIKE the Malwarebytes' page, or join the Malwarebytes' forum. They also have some tutorials on removing malware.

Solarstarshines · Nov 2, 2010

I read , i dunno something close to two years ago they use install folders on you're system and some of them are hidden in user folder and it will say uninstall

Some of these types of viruses can be stopped but you also got to ask where does one go on the web without getting hit ?

I go to the same sites daily with out hesitation i rarely go elsewhere when web searching cause half of the time you get redirected to places you would rather leave alone

but if what i am posting helps any of you im glad noone deserves such a nasty infection that is so bothersome

mooreted · Nov 2, 2010

I surf the Internet from Ubuntu in a VMware Viewer virtual machine, so I don't worry about viruses. I could never get soccer moms to do this however.

JMH · Nov 2, 2010

Barman58 said:
I'm afraid that this type of socially engineered malware can only be countered with education - which may well be a battle that will never be won.

There is no way that any tech can prevent a user from clicking on the link to cure their perceived problem, a perception that is engineered by the malware writing ~~scum~~ fraternity.

I support what you say Nigel....

The onus ultimately is on the user [who is clicking merrily away] to be responsible for his/her self.

"Caveat emptor" applies - translated this time as "Clicker Beware"!

linnemeyerhere · Nov 3, 2010

Francis93 and Solarstarshines, you both have 666 post as of this thread........ooooh!

Solarstarshines · Nov 3, 2010

linnemeyerhere said:
Francis93 and Solarstarshines, you both have 666 post as of this thread........ooooh!

not anymore :devil:

mooreted · Nov 3, 2010

linnemeyerhere said:
Francis93 and Solarstarshines, you both have 666 post as of this thread........ooooh!

It's from the debil mama.

hello people · Nov 3, 2010

So how are people getting these viruses? They are going to some website...a flashing, ostentatious neon popup pops up telling them that their computer is at risk/ has a virus and to CLICK HERE to fix it....and they do?

Is that what you're talking about?

mooreted · Nov 3, 2010

hello people said:
So how are people getting these viruses? They are going to some website...a flashing, ostentatious neon popup pops up telling them that their computer is at risk/ has a virus and to CLICK HERE to fix it....and they do?

Is that what you're talking about?

Not only that, I had one customer click the thing and actually pay for it! I told him he better cancel his credit card.

Orbital Shark · Nov 3, 2010

hello people said:
So how are people getting these viruses? They are going to some website...a flashing, ostentatious neon popup pops up telling them that their computer is at risk/ has a virus and to CLICK HERE to fix it....and they do?

Is that what you're talking about?

That's exactly what people do. It sends warning messages to the brain and the first things they do is click 'scan'

Note

Example of warning screen from Personal Antivirus

mooreted said:
Not only that, I had one customer click the thing and actually pay for it! I told him he better cancel his credit card.

Now that's a first for me...:roflmao:

But, it keeps the likes of you and me in work

Does Anything Work?

New member

My Computer

New member

My Computer

Post no evil ;)

My Computers

New member

My Computer

New member

My Computer

Post no evil ;)

My Computers

New member

My Computer

Fixin' for cookies

My Computer

New member

My Computer

As requested

My Computer

New member

My Computer

Mr Finger III

My Computer

New member

My Computer

Banned

My Computer

Limburger Cheese

My Computer

Mr Finger III

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer