What to do if you're infected - eXPerience Rev.2

[Guest]

[eXPerience]

1) Back-up all your files and folders using a back-up program, for example Comodo Back-up

2) Download following programs and install them

Superantispyware
Direct downloadlink from publisher
External downloadlink
External downloadlink 2

Malwarebytes Antimalware
Direct downloadlink from publisher
External downloadlink
External downloadlink 2

Bitdefender Free   (32 bit only !)
Direct downloadlink from publisher
External downloadlink
External downloadlink 2

3) Check for definition Updates (Important!).


4) Allow each program to scan. Scan one at a time.


5) Let the programs clean the infections.


6) Reboot into normal mode and see if you find any remains of the virus

7) Download and install Hijackthis. Afterwards, do a system scan and save a log file. A text file will open in notepad, save this one and later upload it together with your post. DO NOT FIX ANYTHING YET !!! .




8) Open a new topic. In that topic, please include :
- If you followed this sticky
- The hijackthis log
- the name of the malware the programs said

It's important that you make a new topic, this way we can verify that the infection is indeed gone !

Xan

[worldwidewiretap]

bit defender link currently states the site is under attack, and my settings prevent me from visiting site.

can anyone else verify this at this time?

[Kyle]

bit defender link currently states the site is under attack, and my settings prevent me from visiting site.

can anyone else verify this at this time?

Works fine this end.

[SecurityManiac]

Works fine this end.

Same here. No probs

[Silent Assassin]

bit defender link currently states the site is under attack, and my settings prevent me from visiting site.

can anyone else verify this at this time?

Yes, I can confirm this.

[layman]

bit defender link currently states the site is under attack, and my settings prevent me from visiting site.

Yes, I also confirm this

[Lysias]

Yeah, happens to me, too. Using Firefox 3.

Here's the report for the link.

[eXPerience]

Yeah, happens to me, too. Using Firefox 3.

Here's the report for the link.

Could it be a google problem ?

if you did a Google search between 6:30 a.m. PST and 7:25 a.m. PST yesterday morning, you likely saw that the message "This site may harm your computer" accompanied each and every search result. This was clearly an error, and we are very sorry for the inconvenience caused to our users.

What happened? Very simply, human error. Google flags search results with the message "This site may harm your computer" if the site is known to install malicious software in the background or otherwise surreptitiously. We do this to protect our users against visiting sites that could harm their computers. We maintain a list of such sites through both manual and automated methods. We work with a non-profit called StopBadware.org to come up with criteria for maintaining this list, and to provide simple processes for webmasters to remove their site from the list.

We periodically update that list and released one such update to the site this morning. Unfortunately (and here's the human error), the URL of '/' was mistakenly checked in as a value to the file and '/' expands to all URLs. Fortunately, our on-call site reliability team found the problem quickly and reverted the file. Since we push these updates in a staggered and rolling fashion, the errors began appearing between 6:27 a.m. and 6:40 a.m. and began disappearing between 7:10 and 7:25 a.m., so the duration of the problem for any particular user was approximately 40 minutes.

Thanks to our team for their quick work in finding this. And again, our apologies to any of you who were inconvenienced this morning, and to site owners whose pages were incorrectly labelled. We will carefully investigate this incident and put more robust file checks in place to prevent it from happening again.

Thanks for your understanding.

That link is a direct link to the bitdefender download site ? Could you guys check it again ? I'll add some back-up downloadlinks

thanks ,

Xan

[eXPerience]

I now added a back-up link, can you guys please check if these work and are correct ? (they should be )

Thanks,

Xan

[Silent Assassin]

I now added a back-up link, can you guys please check if these work and are correct ? (they should be )

Thanks,

Xan

Well, external downloadlinks 2 don't work for me. I'm getting the following 404 Not Found errors:

The requested URL /sd/Yb_pMGNZMVTNGDgDTPVypWCvDTy7HnDIXOExj5Ehym_LTFZGnskZlZkxuw_TDYbnmV_w7kKqexNf-VbHjVHCemgkD3V6UnaW/software/10994751/10523889/3/SUPERAntiSpyware.exe was not found on this server.

The requested URL /sd/kVenwZWdEDltp0D9jcPJff3sdxBDPIg6InJFktfc2tYFFrE9EhcGZXj8VOrqcl7cbuf6se3Wri7wRzOMS1KhyZVaeBCXQ9H-/software/10997763/10804572/3/mbam-setup.exe was not found on this server.

The requested URL /sd/SO467Y5jmpuNu5E1wuSMuf0ZbD7wH2j0TLvrs4jn4ToKYORSjZUyqz8joS-zUdlYMbi214DrkoWNZB0-PssIYo-C49xYvCmx/software/10322484/10322483/3/bitdefender_free_v8.exe was not found on this server.

[eXPerience]

Can you recheck please, it could be because I was editing the post ...

Thanks,

Xan

EDIT :  I just rechecked, it works here

[Silent Assassin]

Can you recheck please, it could be because I was editing the post ...

Thanks,

Xan

EDIT :  I just rechecked, it works here

They still aren't working. Direct downloadlinks from publishers are fine.

[eXPerience]

I'll add some other External links also then 

Xan

[Silent Assassin]

I'll add some other External links also then 

Xan

Great!

[eXPerience]

More have been added, at least one should work now 

Can you check the new ones ?

Thanks,

Xan

[Tags:]