Emergency: .DLL Spyware Assault

[Stealth Hunter]

Isn't he the bloke runnin' downtown in a lorry with the crimbo-gin-gin?

[Stealth Hunter]

Well, it came back again. The bitch is toying with me...

I swear on my Subsim account that if I find the person who makes these things, I WILL (and I'm dead serious) kill them. So help me God, I will kill them... I'm not joking around anymore. If I meet them in person, I will kill them and end this crap (for the time being, anyway). This is so fecking annoying that it's just ridiculous!

[JSLTIGER]

At this point, it sounds like it'd just be easier do a re-format and start from scratch...look on the bright side...your system will be rid of all of the junk it's accumulated over time and it'll be like having a new fast computer again!

[Stealth Hunter]

Hell no. I'm not letting this bastard win.

[Jimbuna]

Have you tried running a system scan with something a little more potent than AVG :hmm:

[elite_hunter_sh3]

disconnect your internet, then go into safe mode, run ad-aware, and avg (make sure they are updated to the latest version) , then reboot, then run again in normal mode (internet must still be disconnected) then reboot but go into safe mode and scan one more time. then reboot into normal mode and should be fine

[Stealth Hunter]

Originally Posted by jimbuna

Have you tried running a system scan with something a little more potent than AVG :hmm:

CA, Avast, Spyware Doctor, Prevx CSI, and that's about it.

EDIT:

Might I add that they were running all at the same time. No problems so far, though, after manually deleting those files. Not out of the woods yet! Keep your fingers crossed, gents!

[Stealth Hunter]

Everything seems to be alright now. Pleased to say that not one error has occurred for me in the past hour or so. Not a single pop-up or anything like that. I'll wait a few more hours, and if nothing else turns up, then I want you guys to spread the word about how to kill off this pest (all the forums you might be registered on). This thing apparently has hit quite a few people very hard. I would appreciate it if you would help me in spreading the word.

[Skybird]

when I have problems with a digital bugger that does not go away by the first run of dedicated scanners or removal tools (happened only once, several years ago), I loose all faith in following attempts and methods immediately and cannot trust any apparent positive outcome anymore. Thus I turn into Terminator mode, terminate the current installation, reformat the HD several times, switch on and off power between the runs, and then reboot with OLD safe discs (thus not affected by latest problems) and copy over an image from a separate HD (that's how I do it today), or reinstalled manually (that's whyt I did back then). that may be considered to be overkill, but the charming thing of overkill is that it's efficiency is irresistable.
You see, any backup of files you do after thinking to have removed a problem while it still is there in the hidden - gives you the risk of infected backup files that will be a constant sources of pleasure in the future. I do not accept that risk.

Guys, invest into a second HD that is not regularly attached to your computer, but is stored away in a hidden place, and into according software like Acronis, and make regular updates of your important files and save games once every ten days or so to USB stick or disc. Manually install your system and all you wanted software, and then make an image of it, hide it and declare it holy and untouchable. After the first infection troubles you were in you will agree that this probably is the best investement into your PC system that you ever can do. It is also nice to reinstall your system easily this way once in a year, to get rid of all the unwanted ballast that has acucmulated and messed up the structure of files on your HD. all ypou manually have to adjust is updates, and changed working files, save games, etc. the rest is time consuming, but works all by itself, no need for you to monitor the PC working.

[Iceman]

Re-Format young Jedi...and get over it.

[sonar732]

A few things to add...

1. Reformat
2. Stop going to the porn!
3. Be weary of anything from P2P!
4. Use Firefox or Opera!

[Stealth Hunter]

I'm back, and no problems have been encountered (well there was one, but that's because I forgot to delete two files; otherwise, no more pop-ups).

Originally Posted by sonar732

4. Use Firefox . . .

[Blacklight]

As a computer tech who's spent YEARS dealing with computer that have been hacked into, smithfrauded, virused, etc...
This is my list of suggestions:

1. ALWAYS use a good, reputable internet security suite including firewall and a spam/phishing mail blocker. McAffee Internet Security Suite is my favorite (Stay away from Norton this time around... between the two, McAffee has gotten the better reviews and it handles add/spyware much better.)

2.Along with the security suite, use a spyware, addware blocker/cleaner. Spybot Seach & Destroy is my favorite because it allows you to blacklist every bit of add/spyware in it's database. Be wary.. some idiots out there put out spyware/addware/viruses under the guises of spyware/addware removal programs. I've even seen hacked versions of pretty much every popular add/spyware remover that actually fill your computer with viruses and add/spyware. If you decide to do Spybot Search and Destroy, get it from www.Download.com.

3. If you do ANYTHING P2P, make sure you scan the file with your virus scanner before you even touch it. (Make sure your virus scanner can open and look inside of archive files... McAffee does).

4. Keep the above programs updated !!!! Check for updates once a week !!!

5. Do a FULL SCAN of ALL files in your system including archive files at least once a week. Do this with the virus scanner AND the spy/addware program.

6. If you have a wireless router, make sure you have a WEP passcode to get in. Do not leave the router open so your neighbor can hop on your connection.

7. Be wary of where you web surf . Use common sense.

Follow the above steps and you should be pretty darn safe.

[Onkel Neal]

Some dweeb in Singapore owns your root files. Sounds like you've picked up FakeAlert-D
http://vil.nai.com/vil/content/v_140346.htm



Why not simply do a System Restore back a week? Start/Programs/Accessories/System Tools/System Restore. Pick a restore point a couple days before your know infection date, and restore. Done.

[jumpy]

^^
only one issue with a system restore I encountered a while back: some viruses store themselves in the system restore area which is off limits to your virus scanner. So whilst you get it off your hd with conventional means, as soon as you roll back to a previous restore point guess who's back?

It was desperately annoying until I discovered that this was what was happening. Since then I have disabled system restore on both of my active hard drives.

If you're looking for a decent AV software, have a go with NOD32. They do a months free trial I believe and after that it's about 25 quid for a years subscription. Well worth it in my opinion.