1. Attachments are working again! Check out this thread for more details and to report any other bugs.

computer malware; security question

Discussion in 'Fred's House of Pancakes' started by Stevewoods, Apr 16, 2017.

  1. Stevewoods

    Stevewoods Senior Member

    Joined:
    Jun 10, 2014
    647
    983
    0
    Location:
    Seattle, WA
    Vehicle:
    2008 Prius
    Model:
    II
    My wife's friend was browsing the internet for something on her laptop and up came one of the big boxes that tell you your computer has been compromised and you have to call MICROSOFT immediately.

    Do not continue to use the computer, etc. And, of course, no way to get rid of the notice.

    She called the number and it gets a bit nebulous, but apparently, she talked to some guy, etc, etc.

    She says she finally got a bit suspicious and hung-up. She says she did not install anything, nor did she give them any credit card numbers. But she now refuses to turn on her laptop.

    Personally, I would have opened task manager, killed the box and ran a scan with Malwarebytes.....but that does not help her.

    Problem is my wife is insisting I help her. I MIGHT be able to get her to boot up the computer as long as we don't connect to wifi. I was then thinking, if the computer still remains semi-nonfunctional (or even if it does seem fine), I'd run a malware scan from a flash drive as well as one with resident program she might have on the laptop.

    I am not sure WHAT -- If any -- AV program she might be running.

    Anyway, Malwarebytes won't work for that as nowadays they insist on connecting to the Web for updates before running a scan.

    Are there any freeware AV/Malware programs I could load on a flashdrive and have it work for this?
     
  2. Rmay635703

    Rmay635703 Senior Member

    Joined:
    Oct 16, 2016
    2,577
    1,601
    0
    Location:
    Somewhere in Wisconsin
    Vehicle:
    2013 Chevy Volt
    Model:
    N/A
    Best to wipe her HD and reload the OS.

    On my personal systems I have a modd'd dos version i boot then I examine the system for new files, mod boot up scripts and corrupt and read only the spyware files so if the system loads the corrupt spyware it also locks it so no new instances can load, scammer also can't modify their lame file either.

    Be aware, doing that can really p off whatever retarded monkey put it on her system. I've had ddos attacks on my firewall after doing so.
     
  3. Mendel Leisk

    Mendel Leisk Senior Member

    Joined:
    Oct 17, 2010
    54,674
    38,219
    80
    Location:
    Greater Vancouver, British Columbia, Canada
    Vehicle:
    2010 Prius
    Model:
    Touring
    What Version of Windows? Google "system restore? It can take you back a day or two, quarantine any bogus "system" files added since the restore point.
     
    jerrymildred likes this.
  4. Stevewoods

    Stevewoods Senior Member

    Joined:
    Jun 10, 2014
    647
    983
    0
    Location:
    Seattle, WA
    Vehicle:
    2008 Prius
    Model:
    II
    The thing is, I really don't think she has anything on her system.

    I got something like what she is talking about a few different times.

    All I did was hit task manager, kill the process and then ran some scans (Malwarebytes, Avast, Windows Defender, Sophos) and all always came up clean.

    I think it is just one of those things where they hope you will call, give them access to your system and/or a credit card number.

    She denies doing any of that, other than calling them.

    I think if she reboots, everything will be fine. Of course, she doesn't believe me. So, I figured so hocus-pocus with a special off-line scan would make her feel more secure.
     
    Mendel Leisk likes this.
  5. Rmay635703

    Rmay635703 Senior Member

    Joined:
    Oct 16, 2016
    2,577
    1,601
    0
    Location:
    Somewhere in Wisconsin
    Vehicle:
    2013 Chevy Volt
    Model:
    N/A
    CTRL+ALT+DEL is the universal windows fix.

    So Yeah that's step one, best to boot her up without a network connection and see what it does, everything after that depends on the results,
    its not like the system can do much without a network connection.

    That said I've had ransomware that kept coming back, (virus scan found nothing)
    I modded the bad files so they got locked in op in memory and used the system with a firewall, eventually ended up with a few hours of pings and reformatted stopping the BS.
     
  6. bwilson4web

    bwilson4web BMW i3 and Model 3

    Joined:
    Nov 25, 2005
    27,124
    15,389
    0
    Location:
    Huntsville AL
    Vehicle:
    2018 Tesla Model 3
    Model:
    Prime Plus
    This is an electro-political problem, two references to "my wife." I would recommend having her friend pack up the laptop and take it to Best Buy and let their "Geek squad" screw it up. For a little money, you're off the hook; there is a bill from "Geek Squad", and; you can get back to Prius Chat postings. <GRINS>

    Bob Wilson
     
    jerrymildred and WilDavis like this.
  7. jerrymildred

    jerrymildred Senior Member

    Joined:
    Oct 28, 2016
    11,491
    14,100
    0
    Location:
    Tampa, FL
    Vehicle:
    2017 Prius
    Model:
    Two
    If your wife's friend doesn't trust your skills, I'd just say, "Cool! I have lots of other things to do anyway. (Like hanging out on Prius Chat) You should pay a stranger that you do trust." :whistle: And, malware isn't something to mess with anyway without making sure you're up to date on threats and remedies. They change almost hourly.
     
    RCO likes this.
  8. SFO

    SFO Senior Member

    Joined:
    Feb 7, 2017
    5,286
    4,225
    0
    Location:
    Northern California
    Vehicle:
    2007 Prius
    Model:
    N/A
    ** was sure this would've been answered by now, considering the number of experts on here **

    Do I need to ask how long you've had her, what model and how many miles?

    Ok, assuming you have a version of Winblows that allows you to boot off the USB (or CD if needed) there are many to try from and here are but a few options :

    AVG Business PC Rescue &amp; Repair Toolkit | Free Download

    Virus Scan & Free Virus Removal - Panda Security

    Avast FAQ | Avast 2016: Creating and using Avast Rescue Disk

    How to record Kaspersky Rescue Disk 10 to a USB device and boot a computer from it

    How to make a bootable USB stick with a Sophos Bootable Anti-Virus ISO - Sophos Community
     
  9. tochatihu

    tochatihu Senior Member

    Joined:
    Apr 10, 2004
    8,995
    3,507
    0
    Location:
    Kunming Yunnan China
    Vehicle:
    2001 Prius
    Deleted files that zombie back often require Registry Editing. That is strong medicine; all (I know) charge $ for their tool and it can go terminally wrong.

    Look. Any computer can get sick (soft or hard) and if you do not save important files 'somewhere else', you are one step away from being That Person Running Down the Hall, Crying.

    If none of your files are Important, the situation is much simpler.
     
    jerrymildred likes this.
  10. JimN

    JimN Let the games begin!

    Joined:
    Nov 26, 2006
    7,028
    1,116
    0
    Location:
    South Jersey
    Vehicle:
    2010 Prius
    Model:
    V
    The "virus" may be in the browser. Look to see if you can restore to original settings through a toolbox. Comcast bundles Norton with their service. If the patient isn't running anything there I believe we'll all bet money that there is more than one problem. I would also install adwcleaner and Malwarebytes Anti-Malware.

    Was the Windows firewall turned off?

    It is easy to blame the user for visiting an unsavory site but the infection could have come from a compromised ad or site.

    Cleaning up can be a real challenge but, so far, I haven't encountered anything that couldn't be removed. I hope you get something for your time, trouble, and aggravation.
     
  11. Mendel Leisk

    Mendel Leisk Senior Member

    Joined:
    Oct 17, 2010
    54,674
    38,219
    80
    Location:
    Greater Vancouver, British Columbia, Canada
    Vehicle:
    2010 Prius
    Model:
    Touring
    For sure try system restore first, no downside, and built-in. Just go back to the date before the problem.
     
    RCO likes this.
  12. RCO

    RCO Senior Member

    Joined:
    Aug 31, 2016
    3,709
    5,183
    0
    Location:
    Cornwall
    Vehicle:
    Other Hybrid
    Model:
    N/A
    The moral of this story is to bolt the stable for BEFORE the horse breaks loose!

    There are good security suite softwares out there, some free. Install them, update them every time you start the computer, install Malwarebytes and keep it up to date and back-up regularly.

    Oh, did I forget to mention how important it is to backup to another disk/device regularly?
    Back it up once a week, or even once a month is better than nothing!
     
    #12 RCO, Apr 22, 2017
    Last edited: Apr 22, 2017
    jerrymildred likes this.
  13. Mendel Leisk

    Mendel Leisk Senior Member

    Joined:
    Oct 17, 2010
    54,674
    38,219
    80
    Location:
    Greater Vancouver, British Columbia, Canada
    Vehicle:
    2010 Prius
    Model:
    Touring
    Our desktop PC's have two internal hard drives, the second one purely for backup. I periodically run ROBOCOPY via a batch file, with the /MIR switch, to the backup drive, copying critical directories. It's a "smart" copy, only copies newer files, replicated directory structures, and is built into windows, since 7.0 I believe.

    Settled on BitDefender Internet suite with upgrade to win 10 last July, working good.

    I appreciate dealing with backup on laptops is a little different: can you even have additional internal drive, or is it cost prohibitive; better to go with external?
     
  14. JimN

    JimN Let the games begin!

    Joined:
    Nov 26, 2006
    7,028
    1,116
    0
    Location:
    South Jersey
    Vehicle:
    2010 Prius
    Model:
    V
    Laptops keep getting thinner. If user accessible bays aren't extinct they are on the endangered species list.
     
  15. Rmay635703

    Rmay635703 Senior Member

    Joined:
    Oct 16, 2016
    2,577
    1,601
    0
    Location:
    Somewhere in Wisconsin
    Vehicle:
    2013 Chevy Volt
    Model:
    N/A
    All things external exist from video cards to hds
     
    RCO likes this.
  16. Mendel Leisk

    Mendel Leisk Senior Member

    Joined:
    Oct 17, 2010
    54,674
    38,219
    80
    Location:
    Greater Vancouver, British Columbia, Canada
    Vehicle:
    2010 Prius
    Model:
    Touring
    Internal hard drive bays in desktop computers might as well be extinct, for all the use they get. It's akin to having a two bay garage, and never noticing the second bay. Well, not quite, but...

    Extra internal drives are much more bulletproof I think. And for sure much faster.
     
  17. davids45

    davids45 Active Member

    Joined:
    Nov 23, 2016
    104
    131
    0
    Location:
    Chatswood, NSW
    Vehicle:
    2016 Prius c
    Model:
    One
    G'day,

    Dinosaur reporting in :D - I have installed two hard drives in all my home-net-worked desktops.
    Mostly it's not the hard-drive that fails in old desktops so these drives have accumulated here as time's gone by. I've also collected 'old' drives being discarded by others where Moore's Law rendered them too small for the ever-expanding/bloating Windows. Luckily, they're plenty big enough for Linux.

    I've even scavenged some dead-laptop hard-drives which fit nicely into cheap external usb drive cases to give me additional external back-up drives - just plug it into a desktop/laptop usb port for the occasional data back-up.

    I hope Stevewoods can get Windows on his/her laptop fixed - if his hocus-pocus didn't work ;) .
    If she (or her friends) only uses the laptop for browsing, there are non-Windows systems that could run the laptop (if it's not too new) from a usb flash drive that don't need or touch its hard-drive, whatever its condition. Unfortunately most of these by-passes require 'unlearning' Windows by the user (difficult for most older computer users), but do have the advantage of being secure and malware-&-virus-free for browsing.
    If anything goes wrong, just power-down, pull out the flash drive, wipe/reformat the flash drive, and re-install the operating system onto it - should only take a few minutes? Requires an available, working computer for a re-install, of course.
    Not an immediate fix for Steve's Windows' problem but more of a detour around it if it gets too recurrent, I suppose.

    David S.
     
    jerrymildred, RCO and Mendel Leisk like this.
  18. Mendel Leisk

    Mendel Leisk Senior Member

    Joined:
    Oct 17, 2010
    54,674
    38,219
    80
    Location:
    Greater Vancouver, British Columbia, Canada
    Vehicle:
    2010 Prius
    Model:
    Touring
    You got me thinking about my dead hard drive souvenirs. :)

    IMG_6665.JPG
     
  19. tochatihu

    tochatihu Senior Member

    Joined:
    Apr 10, 2004
    8,995
    3,507
    0
    Location:
    Kunming Yunnan China
    Vehicle:
    2001 Prius
    Darn strong magnets in those hard drives
     
    jerrymildred likes this.
  20. LiliB

    LiliB New Member

    Joined:
    Mar 3, 2017
    8
    22
    0
    Location:
    Austin, Texas
    Vehicle:
    2017 Prius
    Model:
    Two
    Most of those windows that come up saying your computer is compromised are in fact scans to compromise you by the people you call they are harmless in and of themselves and usually it is not an indication you were infected with anything

    Posted via the PriusChat mobile app.
     
    RCO and Mendel Leisk like this.