Gaming Why?! I thought viruses removed automatically...

[twiztidsinz]

One, no, it would say your banned. Two, I got my account back. Jagex approved. Luckily I know my invoice number for my membership I bought...

My computer is currently scanning. On my moms right now.

I WAS HACKED. My money is gone.

You were NOT hacked, you were keylogged.

 

[Sausage Head]

And what kinds of virus infected crap have you been mindlessly downloading last week?

 

[Aijelsop]

How do I delete a keylog? If not, how do I install Tinyxp or better yet, I have Windows XP Pro on a disc (found it, how did I get this? i don't remember burning it)

How do I install a windows xp pro or tinyxp? I have Windows XP Pro and Windows XP Home double booted but Home Edition doesn't work for somereason.

How do I install another triple boot
can i use the on screen keyboard?!?!? that would be fine for an emergency

 

[Sausage Head]

Install Ubuntu or another Linux dist. on a third partition

You should've been more careful. This is one of the many times you've gotten into trouble.

 

[Aijelsop]

Yes it is. Well, malwarebytes deleted them and its rebooting my pc atm.

 

[Rydian]

Since it seems you've learned your lesson I'm willing to help.

1 - On-screen keyboard does NOT protect against keyloggers. It may have protected against ones back in windows 98, but modern keyloggers can pick up on it as well.

2 - A pirated and cut-down version of XP is not secure against infections. Fucking with and pirating your OS is a way this would happen in the first place. You want to be using a legit, un-cracked copy of your OS.

3 - Just follow the fucking sticky.

 

[Aijelsop]

How would I install the disk I have in the first place? I have a Disc thats 474MB (maybe 484MB) and it has Windows XP Professional on it.

Off topic question: What does it matter if Windows is genuine, this may sound odd, but I think my school pirated windows 7. All the computers say "Warning, you are running a non-genuine copy of Windows"

 

[Jodyza]

Off topic question: What does it matter if Windows is genuine, this may sound odd, but I think my school pirated windows 7. All the computers say "Warning, you are running a non-genuine copy of Windows"

Haha.
On my school they're using Windows XP, all the computers ALWAYS have 30 days trial left

I don't think that's genuine.

I think we have 200 computers on my school

 

[Rydian]

Considering you're the one that's always getting into shit and we're the ones always helping you, maybe you should shut up and listen for once.

An infection OS has been tampered with. People have done things to it and you're not sure what.
You know, sort of like how people fucked with your current OS and you didn't realize until it was too late...
Additionally cracked OSes often lack security features because they're not up to date.

As for the school computers, they use a different type of licensing than home versions, so it may claim they're not legit when they are (for technical reasons that the staff is too lazy to fix if it's just an error like that).

Now, you have two options.
[*]Follow the fucking sticky.
[*]Follow the fucking sticky.
[*]Format and reinstall a legit copy of windows.
1 - The disc needs a valid license key. You should use the same copy of windows you have (same VERSION) so you can just use your current license key. You can use the magical jellybean key finder to find your key.
http://www.magicaljellybean.com/keyfinder/
WRITE THE KEY DOWN SOMEWHERE NOT ON YOUR COMPUTER.

2 - Once you have an ISO or whatever of the same type of windows that your key is for, burn it with some ISO-burning software like CDBurnerXP. Burn it on the slowest speed it lets you.

3 - Boot off of that CD (put it in your PC, restart your PC, then press a key to boot off the CD when it tells you) and have it reinstall windows.

4 - Give it the key you wrote down.

5 - Go to the sticky here and follow the "future prevention" section.

 

[Aijelsop]

Well, I'm out of disks. I have one, I'm sure I got it from my dads friend who removed two mega viruses my mom got, by reformatting stuff when we didn't know how, so he must know what he's doing.
My copy of Windows is genuine and he installed it.

I know you might yell at me again virtually, but I don't think I can let myself reformat my computer. I've spent probably 300 hours in customization I can't risk to loose. I guess I should've stuck with Windows XP crap looking theme.

EDIT: Okay, I followed the sticky. I removed everything Malwarebytes and Avira said. How do I know if I have a keylogger still????

 

[Originality]

Just thought I'd add - Windows XP is no longer supported by Microsoft. It's no longer getting security updates, so any vulnerabilities left after installing the last update... they can be exploited by programs that specifically target them. Generally that means getting a newer OS.

 

[Fishaman P]

Okay, I followed the sticky. I removed everything Malwarebytes and Avira said. How do I know if I have a keylogger still????

1. Your data gets stolen
2. An AV program tells you that you do
3. You are Bill Gates and you find the keylogger file(s) and delete them
4. You reformat/wipe your hard drive.

 

[Originality]

I pick number 3!

Wait, is this a trick question?

 

[Dimensional]

Another thing you can do is install a program called KeyScrambler. The free version only works on some web browsers, like Internet Explorer and Firefox. Professional goes a bit further and encrypts your keys for multiple programs. Premium even scrambles your windows login when you type.

Link: KeyScrambler

How it works is it encrypts your keys at the kernel level and it gets decrypted as soon as it reaches it's intended destination, AKA program. By doing this, it gives a zero-day defense against any new software key loggers that can be developed.

 

[Wizerzak]

AVG is still shit.
Get Avira Antivirus or Microsoft Security Essentials or Avast! Antivirus.


A keylogger won't stop you from logging into Rapidshare, but will most likely record virtual key presses.

AVG has been crap for a while, someone will probably suggest a better combo but I personally use Malwarebytes' and Microsoft Security Essentials, works like a charm.
Clean out your PC, make sure it's clean, restart it, scan it again until it's clean. If it's still not clean after doing this several times, take it from there by asking on some forum dedicated to whatever it is.
I'm guessing you're running TinyPC as a virtual machine, if you are running things inside of a virtual machine shouldn't be able to effect your actual machine, but it's not like it's totally impossible.

If you're running things you're unsure of or downloading questionable things (torrented porn from shitty websites or other such things) chances are you'll eventually catch something. A lot of keygens will send you messages, yes, this is common, also in bots. They need to log keys, so yes it's important, as long as it's not actually sending the information off of your computer you should be fine, you can probably contain it with something like sandboxie to make sure it's not.

I've been using this bot for a year or two, nothing on all 7 accounts used. Always used the same scripts.

Also, what about tinypc in virtualpc, can a keylogger work there? Should I use Tinypc as my main pc now that my comp is infected? (I have it on virtualpc)
Yes it can detect virtual key presses using things like TinyPC/VirtualPC.

Get rid of AVG Antivirus.
Download Avira http://www.avira.com/en/avira-free-antivirus
Run the scan and let it quarantine your virus'
Right Click the Avira icon -> Start Avira -> Administration -> Select the files and press Del
Get MalwareBytes http://www.malwarebytes.org/mbam.php
Run a scan and let it remove any junk it finds.



QUOTE(Originality @ Mar 4 2011, 08:46 PM)

If a virus keeps coming back every time you delete it, either it's seeded/rooted (i.e. it has a hidden file that, on startup, spawns an extra copy of that virus), or AVG is giving you a false positive. My experience: both are as likely as easy other. In fact, AVG is so easy to infect/corrupt/disable, that it's been a laughing stock in the anti-virus scene for a decade.

Use Avast or Avira, in combination with Malwarebytes and/or Microsoft Security Essentials. They each look for different things, which together account for 90% of the viruses out there. Of course, if you use warez/crack sites and hacking/botting tools, then no amount of protection will ever be enough.

EDIT:QUOTE(Aijelsop @ Mar 4 2011, 08:34 PM)

Currently downloading Avira. It better work.

Do you realize how dumb that sounds? Not only does it make Rydian not want to help you, it's a threat against anybody who might still want to help you after reading your posts about botting on Runescape and being proud of it. You're really not helping yourself. When asking for help, the worst thing you can do is threaten the people helping you.

Why all the hate for AVG Free? I've been using it for years and never had a virus or Trojan etc. In fact a quick Google can give you quite enough evidence that AVG is just as good as the other 3 free ones (Avast!, Avira & MSE). These are all recent as well so don't go saying "Yh, but that was last century" or w/e

Link

Link

Link

 

[Originality]

8 years ago I found out how to "take over" AVG using a combination of a trojan, a reactive virus, and a "yeller" virus. Launch the trojan - AVG would detect the "yeller" virus straight away (which is the point), and the reactive virus would detect the scan and infect AVG (or a few other free AV software at the time). Depending on the configuration, it would either disable AVG (e.g. prevent it from running) or it would turn it into an active downloader (another type of trojan) and it would take the user a while to realize AVG was the source of the infection, rather than the solution to it. In those days AVG wasn't seen as "great", but it did the job for those who wanted to protect their computers from normal websites.

Since then, every year I hear more and more stories about AVG in a negative light. Usually it's simply that scanning didn't catch so-and-so virus, adware or malware, sometimes that it never catches anything at all, and rarely that it gives false positives (Norton and McAffee are the worst offenders for false positives from my experience).

That doesn't mean AVG doesn't work - just that it doesn't work well enough for me to consider ever going back to (I used it for 3 years total). That said, I actually recommend a paid AV software suite. Advanced active protection packages do much more to help protect the computer than running daily or weekly scans.

 

[Aijelsop]

That keyscrambler sounds promising, but I normally use my bots, which are clients, not the web.

Also, I found a few trojans, I moved them to the quarantine or whatever it told me to. Are they deleted?

I also searched for a second winlogon.exe on task manager like 3 youtube vids said and I could only find one.

Am I finally free?!

EDIT: I've read that quarantined viruses are viruses taken care of and thrown in "jail" type so it can't get me again. Is this correct?

 

[twiztidsinz]

Why all the hate for AVG Free? I've been using it for years and never had a virus or Trojan etc. In fact a quick Google can give you quite enough evidence that AVG is just as good as the other 3 free ones (Avast!, Avira & MSE). These are all recent as well so don't go saying "Yh, but that was last century" or w/e

Link

Link

LinkIt's resource heavy, it's slow, it's got poor detection, it's got oversensitive heuristics, it has numerous conflicts with apps and games.


QUOTE(Aijelsop @ Mar 4 2011, 08:45 PM) That keyscrambler sounds promising, but I normally use my bots, which are clients, not the web.

Also, I found a few trojans, I moved them to the quarantine or whatever it told me to. Are they deleted?

I also searched for a second winlogon.exe on task manager like 3 youtube vids said and I could only find one.

Am I finally free?!

EDIT: I've read that quarantined viruses are viruses taken care of and thrown in "jail" type so it can't get me again. Is this correct?

They're 'segregated' to a folder. They're still on your computer, but not allowed to run.
Your best bet is to delete them all together.

 

[Porygon-X]

If you seriously wanna get rid of trojans etc.

Use malwarebytes. I was attempting to whale some youtube apps and accidentally opened one. Ran malwarebytes found 3 trojans.

My 2 cents.

 

[mysticwaterfall]

I used to use AVG, but it never seemed to do anything, and the link scanner plugin always seemed to crash firefox. A scan by something else (Windows Defender or whatever) would always find something when AVG never said a word about it. Now I use Avast+ThreatFire (with malwarebytes for manual scanning every so often) and haven't had a problem since.