Virus Alert - April Fools day spotting thread 2012
Virus Alert - April Fools day spotting thread 2012
Author
Discussion

Shake&Bake

Original Poster:

371 posts

214 months

Sunday 1st April 2012
quotequote all
Hey guy's opened a number of links in different tabs in the above thread, in the Lounge. One of them is responsible for downloading a virus onto my laptop "S.M.A.R.T.", earlier and took over 6 hours to get rid of. Looks like a few others are having similar problems, looking at the comments now that I'm back up. I only have McAfee so it was probably more prone to new attacks than others. Anyway after a bit of googling BLEEPINGCOMPUTER.COM, came to the rescue. In case anyone else has issues. It doesn't actually wipe your C Drive just hides them. My bottom was twitching like a rabbits nose earlier...

shirt

25,393 posts

230 months

Sunday 1st April 2012
quotequote all
I reported it via the thread, but:

Any idea where the virus locates itself on the c drive and how to remove? I can still see my files but everything went crazy and I'm doing a full mcafee scan as I type (on mobile).

Its my work laptop. I'm in the office and reluctant to reconnect to the network at present.

Bill

58,618 posts

284 months

Sunday 1st April 2012
quotequote all
The link's gone. Hope you get it sorted frown

Shake&Bake

Original Poster:

371 posts

214 months

Sunday 1st April 2012
quotequote all
Hey Shirt, I'm not really into IT, so exactly where it's stored I'm not sure. The site I mentioned above seems to provide help for most know viruses etc. However yours sounds like a different bug than mine. The SMART, basically takes over your PC and tells you all the problems your computer supposedly has. It was a nightmare as it wouldn't allow me to download anything to get rid of it, as soon as I'd connect to the internet to try it would just forcebly stop all. In the end I downloaded the Rkill from one PC on a disk and opened it on the infected Laptop. This then stopped the virus from trying to stop me downloading help.

P.S. McAfee was running scans during the problem and told me how clean my computer was and nothing had been detected..... So be careful.

Mods - I have no affiliation with the company mentioned. Just wanted to help anyone like myself that would not be as IT literate as some on here.

shirt

25,393 posts

230 months

Sunday 1st April 2012
quotequote all
Cheers.

What happened was I got a message saying a program wanted to make access changes. I'm weary of this so said no. Ran mcafee which didn't find anything but I got a ton of write error messages. Closed a few of these and then it went completely. Can't see any of my files at all and my arse is twitching too!

I know files are there as it let me open autocad and then some drawing files.

I'll take a look at the sites mentioned. Cheers. Any other advice would be welcome.

Toaster Pilot

14,863 posts

187 months

Sunday 1st April 2012
quotequote all
This st has infected my work computer and I'm handing in my notice today.

Looks very good that does, right? frown

SteveDGY

99 posts

174 months

Sunday 1st April 2012
quotequote all
Hopefully the same one that fked up my ipod touch last night as I'm sure I clicked on most links in that thread. It basically left my home screen, the unlock page, and the reset page all on the same screen, which dimmed quite a lot and I ended up having to let the battery drain overnight.

I hope it was this, and not the ipod finally breaking smile

Rollcage

11,345 posts

221 months

Sunday 1st April 2012
quotequote all
Its a bh to get rid of - the bleeping coomputer links should see you through. You can access stuff via Windows Task Manager if you want to IIRC.

Toaster Pilot

14,863 posts

187 months

Sunday 1st April 2012
quotequote all
I think I've got the worst of it out manually....

Delete the oddly named .exe files in Documents and Settings/All Users and /yourusername to start with after ending the processes.

shirt

25,393 posts

230 months

Sunday 1st April 2012
quotequote all
Yes, big kudos for the bleeping computer ref s&b.

To repeat what I put on the thread:

Google bleeping computer smart hdd removal. Tells you all you need to know. You will need to dowload from their links:

Rkill - to stop the smart program executing
Malwarebytes - free malware removal
Unhide.exe - to get files back

I'm 30mins into a malware scan, wasted 2hrs of my day on this! I fking hate virus programmers!

paulrussell

2,311 posts

190 months

Sunday 1st April 2012
quotequote all
I think it might be the skidmark links that's got the virus. I clicked on the BMW link and I got a virus warning.

Carfolio

1,124 posts

210 months

Sunday 1st April 2012
quotequote all
fking lol. That is all.

VxDuncan

2,850 posts

263 months

Sunday 1st April 2012
quotequote all
shirt said:
Yes, big kudos for the bleeping computer ref s&b.

To repeat what I put on the thread:

Google bleeping computer smart hdd removal. Tells you all you need to know. You will need to dowload from their links:

Rkill - to stop the smart program executing
Malwarebytes - free malware removal
Unhide.exe - to get files back

I'm 30mins into a malware scan, wasted 2hrs of my day on this! I fking hate virus programmers!
Bleeping computer site is bleeping down! Can you remember the process?
Have run Rkill, seems to have killed the pop-ups. Malwarebytes running. Will run unhide.exe in a mo.
Does any of this need to be done in Safe mode? am a bit scared to reboot at the moment!

Shake&Bake

Original Poster:

371 posts

214 months

Sunday 1st April 2012
quotequote all
VxDuncan said:
Bleeping computer site is bleeping down! Can you remember the process?
Have run Rkill, seems to have killed the pop-ups. Malwarebytes running. Will run unhide.exe in a mo.
Does any of this need to be done in Safe mode? am a bit scared to reboot at the moment!
Seems to be back up now just checked. Don't want to copy and paste as it's over 6 pages. They advise not to reboot until after Malware finishes it's scan as it needs to do so to remove some aspects. If you reboot before this you will over ride the Rkill and have to start again! I didn't run in safe mode and all seems to be well. Then as you said run unhide.

HTH

shirt

25,393 posts

230 months

Sunday 1st April 2012
quotequote all
Hmm, I'm still not sorted.

Malwarebytes takes over an hour to go through my harddrive. Deleted 9 files and ran unhide, but can't see half my menu. The smart hdd is still there despite all this.

As it isn't losing files I've just got to the same point and started doing some work. Will revisit tonight away from work firewalls and proxies.


Dyl

1,303 posts

239 months

Sunday 1st April 2012
quotequote all
Bill said:
The link's gone. Hope you get it sorted frown
It must still be there, just got my laptop within last 20mins frown

Rollcage

11,345 posts

221 months

Sunday 1st April 2012
quotequote all
Don't want to alarm anybody, but I had exactly this in the New year. Did all the stuff with MAB, Rkill, unhide.exe etc, but it really shagged my laptop bigtime. Had to get it done by a pro in the end, and it's still got some small issues.

Mine got to a stage where it would just go into a stage of continual BSOD and reboot, unless in safe mode, where I had no internet or much else.

Complete nightmare to sort.

Defcon5

6,465 posts

220 months

Sunday 1st April 2012
quotequote all
Dyl said:
It must still be there, just got my laptop within last 20mins frown
Same. AVG has sorted it though I think

JoeMk1

395 posts

200 months

Sunday 1st April 2012
quotequote all
Mods have deleted one skidmark.com link, maybe the other one is affected aswell?

Dyl

1,303 posts

239 months

Sunday 1st April 2012
quotequote all
Defcon5 said:
Dyl said:
It must still be there, just got my laptop within last 20mins frown
Same. AVG has sorted it though I think
I did a system restore, but that doesn't seem to have worked. Downloading avg now.

Mods, maybe deleting all links in the thread or a warning in the first post to warn others?