Laptop 911

[Inactiongirl]

Can't believe I finally go on here to type this. I think there was a thread about this from someone a week or so ago...

New laptop. Had full Norton security package remotely put on last week. Now out at family's for the holiday. No net access except an unsecured network of someone in the area...never had a problem before. Was working fine for days now all of the sudden I am getting pop up warnings about being on an unsecured network and some sort of virus like activity being detected. Sends me to some ad for prosoft defender or something and if I try to access any other site 99 % of the time explorer closes down immediately.
I tried system restore and apparently that won't work either. It says there is an error during system restore.

Not very computer literate but I don't know if this is a virus I picked up from being on an unsecure network, or whether Norton security is closing me down automatically to help protect me.

Don't know if I will even be able to check this til I can get to the library or somewhere that has internet access (my mom doesn't) but any help would be appreciated. I know there are lot of IT people on here ..hoping I am able to get back on later...thanks

IAG

 

[barman]

Sounds very much like Smitfraud

Follow instructions here

http://www.afterdawn.com/software/desktop_software/desktop_security/smitfraudfix.cfm

 

[TTinCO]

I'd have to see the exact warning message. Being on an unsecured network is no big deal(that's why you can piggyback it), but the rest of the warning seems to imply that another machine on the network has a virus-and yes, you could end up with it if that's the case.

 

[Inactiongirl]

Ttinco...this is one of the two messages...I have been getting..the other one sounds more scary than this one...this sounds more like a warning but have never seen it before and I once and a while I can get thru...

Barman...I am going to check that link you gave me now...if I don't get shut down. Thanks.



Internet activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without your knowledge, and that can lead to system slowdown, freezes and crashes.
Also insecure Internet activity can result in revealing your personal information.
To get full advanced real-time protection for PC and Internet activity, register your antivirus software.
We recommend you to protect your PC now and continue safe Internet browsing.

 

[Inactiongirl]

I have all my Norton stuff on...I guess I don't understand how this could get on my laptop..I just spent $200 having it installed. Will I be ok when I get home to my secured network? Should i stay off the net til then? I am so confused.

 

[TTinCO]

That message is nothing serious, but it does seem to imply that you don't have a "full blown/registered" virus scanner-which is something that you definitely should have.

As long as you have a firewall running, your risks of getting a virus from the unsecured wireless connection are somewhat mitigated...stress on SOMEWHAT.

 

[FuriousDrew]

Man, I remember dealing with this type of shit with my PC before, signing up to tech forums to try and figure it out. Even though they never have sales, get a macbook from Apple next time you upgrade. With Microsoft Office for mac there is nothing you can do on a PC you can't do on mac, and usually easier and with less hassle. More importantly, no god damn viruses.

 

[Inactiongirl]

&***here is the other thing that just popped up

I can't copyy but it says

Windows Security Alert

Windows firewall has blocked some features of this program

Windows Firewall has detected unauthorized activity, but unfortunately it cannot help you to remove viruses, keyloggers and other spyware threats that steal your personal information from your computer. Click here to pick recommended software.

Name:Spyware/Spynow

Risk Level: High
Description: This trojan has a keyboard logging function, which is intended to steal information from users of a range of online payment systems.


Then there are two blocks that say
Keep blocking (can't really click on that) and one that says Protect..

 

[Inactiongirl]

Ttinco..I don't know what you mean by not having full blown/registed virus scanner.Isn't that what Norton 360 is?


I don't understand at all I guess what is going on.. I just keep getting on e of these two error messages and then internet explorer just shuts down..Isn't that a virus? Or why does it keep crashing after these messages?

Sorry...just in a panic....I don't want to be out in the stix with no computer access for 5 more days... Hope I can stay logged in..already cut me off once when I was typing on here.


REally appreciate eveyone's help . This sucks.

 

[TTinCO]

Open your Norton 360 & try to run an online update. If it will update, it's most likely registered.

Based on the windows firewall error, it does sound like you have a trojan virus. Run a full virus scan with Norton, reboot, run another virus scan. If the 2nd virus scan comes back clean, you may be okay(May....or may not).

 

[Inactiongirl]

TTInco.. please delete link above immediately.....more later.... have to get in before i get closed down again.....bad rogue something or other....

 

[Inactiongirl]

1. <LI class=alt id=comment-682><CITE>TTinco...This is what i found please delete above link immediately..thanks....iag....cody</CITE> Says:
   <SMALL class=commentmetadata>November 28th, 2008 at 8:08 pm </SMALL>
   This is a scam. The wonderful folks over at personal defender loaded you up with a hoax. The “actual” malware is divided up in your documents and settings folder. one piece of the malware is in each of the first five or six folders. The look like innocent files. they say things like “runhh6110411.exe, a dll file, and some other ‘bs’. Runhh6110411.exe is definatly the culprit. I went through my files bit by bit and forcibly deleted these files since my spyware scanner didn’t catch the bug.
   <LI class="" id=comment-683><CITE>cody</CITE> Says:
   <SMALL class=commentmetadata>November 28th, 2008 at 8:24 pm </SMALL>just a quick update. Go to my computer, then to C: drive, then documents and settings, then open up application data. Like I said in the previous post, you will find parts of the malware divided up in the first few files in application data. I used the file shredder feature in spybot search and destroy to corrupt the malware so I could delete it. You must do this to delete run6110411.exe. That exe progam is protected against deletion, but it has to be deleted to fully restore your system. So shred the file, then restart your pc and it won’t be able to load the block on your browser.
   <LI class=alt id=comment-684><CITE>Slinky</CITE> Says:
   <SMALL class=commentmetadata>November 28th, 2008 at 8:47 pm </SMALL>cody is correct. I tried his fix and it worked quite well. Like he said the run6110411.exe is the nasty little bugger running this show….google spybot and download the search and destroy…the feature he talked about is under the advanced settings tab…
   Thanks cody for figuring this out….It would have taken me a couple more hours to fix my wifes computer if you did not put me on the right track…
   You are my hero for today…
   Slinky
   <LI class="" id=comment-685><CITE>Chelsea</CITE> Says:
   <SMALL class=commentmetadata>November 28th, 2008 at 9:15 pm </SMALL>Help! I am in deep trouble with the Perfect Defender 2009. Stupidly, I fully downloaded this and now my computer is hardly running (it freezes when I restart). Following a youtube tutorial I found on deleting Personal Defender 2009, I was able to minorly combat the issue by going into msconfig and disabling PD09 at startup, but my computer is still not functioning. I can work in safe mode fine, so I tried to follow the steps and get into application data, but I cannot find what you are referring to. After I get into Documents and Settings, I see no “application data” option. I want to find this run6110411.exe and rid of it! This has now taken 6 hours of my life and I’m feeling helpless…
2. <CITE>Chelsea</CITE> Says:
   <SMALL class=commentmetadata>November 28th, 2008 at 9:17 pm </SMALL>Also, I do not have SpyBot Search and Destroy–I only have Spydoctor, and I cannot access the internet from my computer. Am I totally screwed?

Leave a Reply

<FORM id=commentform action=http://malwarebytes.besttechie.net/wp-comments-post.php method=post><INPUT id=author tabIndex=1 size=22 name=author> <LABEL for=author>Name (required)</LABEL>
<INPUT id=email tabIndex=2 size=22 name=email> <LABEL for=email>Mail (will not be published) (required)</LABEL>
<INPUT id=url tabIndex=3 size=22 name=url> <LABEL for=url>Website</LABEL>
</FORM>

 

[Inactiongirl]

Ok. I don't know what any of that means. I just know that this is bad and I don't want anyone else to click on something that could be harmful to their computer. Guess I'll take the laptop in as trying to get this Personal Defender off my computer will be difficult for me. $%#)@$^@)#$)@#$.....One quick question... is this something where they are able to get my passwords etc or are they just looking for me to pay to get the crap off my computer that they put on here? What is it safe for me to do providing I can work without getting shut down...?

 

[teazeman]

buy a Mac and quit sweating this shit.....

 

[TTinCO]

I would shut it down-it's tough to say what it can & can't get to.

Personal defender isn't that hard to remove, but it's just a result of the underlying trojan(and will come back until the trojan itself is removed).

Time to take it to the doctor if you really want to be safe.

 

[ProPokerPlayer]

One bad thing about getting on an unsecured network is some hackers will put them up just to wait for somebody to use it.They can install a trojan and hack away......I would shut it down and when u get home then run all the norton scans, including the online scan, if that fails to find anything dont you get Phone Support with the full Norton package? id use it if u do...

 

[PO69]

Are you going tomorrow PPP? I will pay your entry for a 50% stake

 

[Inactiongirl]

One bad thing about getting on an unsecured network is some hackers will put them up just to wait for somebody to use it.They can install a trojan and hack away......I would shut it down and when u get home then run all the norton scans, including the online scan, if that fails to find anything dont you get Phone Support with the full Norton package? id use it if u do...

PPP....I ended up calling Norton and paying $99 to have this fixed remotely. Spent an hour on the phone with someone I could barely understand. Irritating after paying $200 last week to have the security installed, but I guess that's what I get for having a lapse in coverage. I guess the infection happened and was dormant til I put on the Norton package..or maybe til I got on the unsecured network. And those warnings/popups..look real. I don't know how the lay person knows what is rogue and what is not. I guess I should be ok now, even on the unsecured network? At least I think that is what Achmad said.

Seriously, nothing will make you feel more stupid than your computer failing on you. I am a very intelligent woman..just not computer literate. Also really gets you thinking of what would be a just punishment for the douchebags that cause this stuff.

Thanks again everyone for your input...and if your computer is not secure or ever wasn't secure for a period of time (my case) --be careful. It's dangerous out there.