19 replies to this topic

[fatguyaz]

so apparently i have a virus called 'Nimda'. (It's 'admin' spelled backwards...very cute.) I did some research online about it and it doesn't sound very friendly. This one seems too much for me to handle. Anyone know someone or IS someone that can get rid of it for me? I'll pay you in fresh eggs and drum lessons. Or money...if you're into that sort of thing.

Lil help?

[yami_wretch]

download SUPERantispyware its free and works wonders also get a utility called GLARY UTILITES it will clean all the REG files after you find the virus and quarentine and delete it. it will do a quick scan and clean up and heal other files not running properly too
i will find the link and post it for u

[yami_wretch]

HAHAHA it was simple enough to find i guess http://www.superantispyware.com/ and http://www.glaryutilities.com/ just download the free versions

[bunnyeyes]

http://www.symantec....-091923-0344-99

It seems there are two versions of this. Check out the link above if the above programs don't help.

[JRC]

Just as an aside.
I run a Mac for almost everything, which I'm told is pretty much ignored by the virus world.

Wondering though, is there anything I should be worried about?
And what to do about it?
I'd like to block spyware as much as the next noob.

JRC

[fatguyaz]

thanks for the tips... but, i need someone to DO something to it. It won't even boot up anymore, so installing and or running anything isn't an option anymore... bummin. anyone?

[bunnyeyes]

Can you boot into safe mode? If not what is the error code you get when you turn the computer on?

[Tony]

Can you boot into safe mode? If not what is the error code you get when you turn the computer on?

chad, i don't remember what the keyboard command is to do this, but you probably could find help on the minibosses forum if nobody here knows. when you turn it on before it fully boots up you are supposed to hold shift F2 (i think - it's something like that)and it will boot up in safe mode and let you troubleshoot.

[raubhimself]

<edit> i'm dumn

<edit edit>i spelled dumb wrong... ugh glad i have the next week off!

[WorkingClassWhore]

Can you boot into safe mode? If not what is the error code you get when you turn the computer on?

chad, i don't remember what the keyboard command is to do this, but you probably could find help on the minibosses forum if nobody here knows. when you turn it on before it fully boots up you are supposed to hold shift F2 (i think - it's something like that)and it will boot up in safe mode and let you troubleshoot.

f5 or f8 should give you the full boot options menu.

[fatguyaz]

yeah, it lets me boot in safe mode (it was F8, Tony) and i can go in and monkey with it, then, but when i run the virus scanner it say the virus is active and it's dangerous to scan while it's active, so it wants to restart and then run a start up boot scan, but when i do that, it sits there forever and doesn't do crap. Then, i manually shut it down and boot up regular again and it has the same issues wrong. When i'm in safe mode, i uninstall the virus scanner that it installed and is contantly running on its own, and i delete the windows user that it added itself (named 'nimda') Then run the virus scanner like i mentioned above, but all that shows back up once i reboot. It's become a very bogus journey. And no one is being excellent to each other. Nor is anyone partying on.

[bunnyeyes]

You probably have to remove the virus directly from the registry. I can never remember exactly where to find this but it's under HKLocal machine or user, then Microsoft, software, and then I usually have to putz around until I find it. You are looking for the level title run once. That is where the command is to reinstall on start up. Be careful in the registry as you don't want to delete things willy nilly here. But you can do a search for all references to the name of the virus and delete those. Hope that helps. If it doesn't there is a program floating around on the internet called BART. If you can find someone who can make a bootable CD copy of this you can boot directly to the cd and it will help you navigate to your hard drive and recover important info before reinstalling the OS.

[woodman]

definitely try the symantec link; you might have to start it up in safemode with networking...

[fatguyaz]

UPDATE!! I get to work today and i'm in the middle of telling my boss about the virus that has ruined my weekend and one of our other employees comes in talkin about how she's got all these pop ups on her puter.... SAME FUCKING THING!! So, today i find out it's a rogue virus made in Russia called 'Spyware Guard 2008'. Apparently, it was made to look like a spyware scanner that is scanning your computer, but it actually infects it and won't stop running the "scanner" until you forcibly remove it. Then they might get a few people to actually pay for the "scanner" to remove it...it does NOT, however. Seems there are a bunch of outbreaks of it right now, and it's a bitch. It came to us via a pop up ad that my wife clicked "Cancel" on but it downloaded itself and made itself at home. The program i downloaded is called "Malwarebytes Anti-malware" It's a really catchy name. And catchy. So, it looks like i got rid of it on both machines, but there are forum posts abound about how it looks like it's gone but pops up again. It's all up in the registry and reinstalls itself on reboot if it's not completely gone. X out of any pop ups that look like red windows shield that tells you when your firewall is turned off or something. It lives there, too, after it installs itself. If it was a dude, i'd punch it right in the face. Ok, i might punch it if it was a chick, too.

I still don't know what the user name 'Nimda' was all about. Mighta been something separate, but that cleaner got rid of it, too. Spiffy.

[Melkor]

I've been to a few sites where I get a pop up that "warns" me that my 'puter is infected and says something about clicking ok to install something that will "protect" my 'puter or cancel; I alt f4 that shit quick style. F those ru bastards!




----------------
Now playing: Ghost Mice - The Moon Will Rise
via FoxyTunes