Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Urgent: Remedy needed for google app "check doc" virus

29 Aug 2014   #1
gplea

Win7 64Bit Enterprise
 
 
Urgent: Remedy needed for google app "check doc" virus

So, a couple of weeks ago someone sent me a strange email. I wouldn't have opened it, but I was expecting a response from this person, along with an attachment re: a group email I had sent to them. I couldn't open the stinking thing, and I knew I was going to see them this holiday weekend, and I was going to ask them about it then. Anyhow, just a few hours ago my gmail inbox starts exploding with people from my Contact list asking if I sent them this e-mail.

Here is what the e-mail read:

"Kindly view the document I uploaded for you using Google Apps . VIEW DOC HERE with your personal email to view the document it's good and very important.

Thanks,
George"

Does anyone here have a remedy?

GPL


My System SpecsSystem Spec
.
29 Aug 2014   #2
Gator

Dual Boot: Windows 8.1 & Server 2012r2 VMs: Kali Linux, Backbox, Matriux, Windows 8.1
 
 

What symptoms are you experiencing?
My System SpecsSystem Spec
29 Aug 2014   #3
gplea

Win7 64Bit Enterprise
 
 

I'm just having a bunch of my Contacts asking me if I sent them this e-mail. All but one of them has been patient and tolerant. Of course, the nasty, intolerant one I could care less about. Apparently, it started sending out auto emails about 3:PM EST today. That's all I know to tell you right now.

Thanks,
GPL
My System SpecsSystem Spec
.

29 Aug 2014   #4
Gator

Dual Boot: Windows 8.1 & Server 2012r2 VMs: Kali Linux, Backbox, Matriux, Windows 8.1
 
 

Here is a link that may help you proceed if your email has been compromised.

My Email has Been Hacked - What Do I Do?

I would run a scan with Malwarebytes to see if you downloaded a piece of malware that might have compromised your system.

Malwarebytes' Anti-Malware

Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Select Quarantine All
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy & Paste the entire report in your next reply.
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.
My System SpecsSystem Spec
30 Aug 2014   #5
MoxieMomma

OEM Windows 7 Ult (x64) SP1
 
 

Hi, @Gator:

>>Those instructions you posted are actually for an older version of MBAM (version 1.x) -- there is no "Quick Scan" in version 2, as it has been replaced by "Threat Scan".
Here are updated instructions for version 2.x, the current version, including the direct download link for the setup file at malwarebytes.org:



Scan with Malwarebytes Anti-Malware


Please download and install Malwarebytes Anti-Malware, or re-run it if you already have it installed.
  • First, click the Update Now link in the main dashboard.
  • Once updated, click the Settings tab, in the left panel choose Detection & Protection and tick Scan for rootkits.
  • Click the Scan tab, choose Threat Scan, and click Scan Now.
  • If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
  • Upon completion of the scan (or after the reboot), click the History tab.
  • Click Application Logs and double-click the Scan Log.
  • At the bottom click Export and choose Text file.
  • Save the file to your desktop and include its content in your next reply.
I hope this helps.


Cheers,
My System SpecsSystem Spec
31 Aug 2014   #6
gplea

Win7 64Bit Enterprise
 
 

Thanks guys. Sorry in getting back to you this late, since it WAS urgent. I ran the free version of Super AntiSpyware twice. It found about 115 threats, and I fixed those. Didn't find anything on 2nd pass. Also, I haven't rec'd anymore e-mails from anyone on my Contacts list. However, there's a couple of strange, and concerning issues. One, I don't know how to verify that I killed/fixed/whatever the virus. Two, I checked my Contacts list against some of the people that emailed me Friday night and a couple of those that emailed me saying they had rec'd the mysterious email weren't even on my Contacts list. So, I'm not sure where the virus got these email addresses. I know I'm not the first, because yesterday I spoke to the person who I rec'd it from, and asked how they got rid of it. Granted, they're not PC-literate, but they said it appeared to have "gone away". One other thing, a couple of people (who weren't on my Contacts list) told me they had rec'd the e-mail from me on their phones. Now, I'm told that there are no truly effective anti-virus apps for cell phones, and for that matter, some do more harm than good. Am I correct on that point?

So, again, my concern is where did this virus look to get the email addresses that it used, and how do I verify that it's gone?

Thanks,
GPL
My System SpecsSystem Spec
31 Aug 2014   #7
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Contact list

Suggestion: Add your own email address to your contact list then if any suspicious emails get sent you should also receive a copy.

How did it happen?

It's hard to say. Think about anything that has access to your contacts list. If you shared your contact list with any Facebook apps or other apps from other sites - revoke access.

You could try running a few tests to see if any issues get flagged up:

PC Flank: Make sure you're protected on all sides. - try these

Also did you open any dodgy email attachments lately?

Configure your AV to scan email attachments and also configure Windows 7 to block attachments from opening if the AV scan of the attachment fails. (This isn't enabled by default and it's a pretty big security hole).

Notify Antivirus Programs when Opening Attachments ? MAXIMUMpcguides ? Windows 7 tips, tricks, help, and how-to guides
My System SpecsSystem Spec
31 Aug 2014   #8
Gator

Dual Boot: Windows 8.1 & Server 2012r2 VMs: Kali Linux, Backbox, Matriux, Windows 8.1
 
 

What threats were found by SuperAntispyware? These could be simply "Tracking Cookies" and you might not have taken anything off your computer at all. Did you by chance save the log?
My System SpecsSystem Spec
Reply

 Urgent: Remedy needed for google app "check doc" virus




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
A "non-existent" Windows update ("KB3024777") even Google can't find
I'm not sure what this is in Windows Update , but how is it possible to have no results in Google on this KB that's in Windows Update? I also clicked on the "more information" for the Microsoft Knowledge Base, but nothing came up there either. http://www.imagesup.net/?di=614183414306
Windows Updates & Activation
Urgent fix needed - virus has left laptop in terrible shape
I apologise that the title couldn't be more specific. My laptop recently was infected, I presume, with what appeared to be a pretty bad virus. I can only presume that's what it was since I couldn't find out exactly what the virus was, and even after going through extreme lengths to remove any...
System Security
Google "More" and "Search Tools" buttons no longer working...
Sometime over the last few weeks Google's "More" drop-down and its "Search Tools" menu items have quit working in IE10. The other buttons that let you select web, images, shopping, etc. still work properly. The "More" and "Search Tools" buttons get focus when the mouse is over them and they...
Browsers & Mail
How can I be sure if I am still infected with "Win32/Small.CA" virus".
Hi I got a "Solve PC Issues" (white flag) saying "Remove the Win32/Small.CA virus". I am running MSE (Microsoft Security Essentials) on Windows 7 Pro (x64). So I did an update followed by a full scan using MSE. I then ran - Malware Anti-Virus - SUPERAntispyware - Microsoft Safety Scanner...
System Security
Google and Sony Kill the "Dumb" TV, Unleash Google TV
More...
News
"Check Disk for Errors" & "hard drive needs to be formatted" errors
I'm getting a lot of "Check Disk for Errors" and "this hard drive needs to be formatted before it can be used" error messages when plugging my external usb hard drives into my home pc which uses windows 7. I don't get any of these messages when I plug the same hard drives in at any of a number of...
Hardware & Devices


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:42.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App