imiddleton25 Posted September 23, 2008 Posted September 23, 2008 Been asked to clean an infected PC up from school nurse No problem i thought slaved drive and scanned for virus, spy ware etc out disk back in PC booted up Default screen background changed to a security warning Cant change it as desktop and screen saver tabs gone ran spy bot remover (slow cup of tea time) I bugg*r when i come back Blue screen of death reboot try again this time am in the room when is BSD again Noticed something odd about keyboard so press enter and BSD goes away to be replaced with the windows booting up little bar going across screen Press enter a couple more times back to my spy bot scan. The virus has a screen background (easy to do) Also BSD screen saver (you can download this great practical joke on colleagues) but the moving images in the fake windows boot up thats clever and almost convincing. Hopefully nearly there now but thought i would share this with you Incase you get one yourselves.
somabc Posted September 23, 2008 Posted September 23, 2008 Been asked to clean an infected PC up from school nurse No problem i thought slaved drive and scanned for virus, spy ware etc out disk back in PC booted up Default screen background changed to a security warning Cant change it as desktop and screen saver tabs gone ran spy bot remover (slow cup of tea time) I bugg*r when i come back Blue screen of death reboot try again this time am in the room when is BSD again Noticed something odd about keyboard so press enter and BSD goes away to be replaced with the windows booting up little bar going across screen Press enter a couple more times back to my spy bot scan. The virus has a screen background (easy to do) Also BSD screen saver (you can download this great practical joke on colleagues) but the moving images in the fake windows boot up thats clever and almost convincing. Hopefully nearly there now but thought i would share this with you Incase you get one yourselves. F-Secure Rescue CD for all your anti-virus needs! FREE F-Secure Rescue CD 3.00 to Clean Virus from Unbootable Windows Raymond.CC Blog
imiddleton25 Posted September 23, 2008 Author Posted September 23, 2008 Yes but its not just a virus its the tricking you into thinking BSD removing windows settings and looking like its booting when its not.Cleaned the virus no problem its al the rest thats the problem.
somabc Posted September 23, 2008 Posted September 23, 2008 Are you sure thats part of the virus, it could just have been their screensaver already?
imiddleton25 Posted September 23, 2008 Author Posted September 23, 2008 No they had picture of the family dog before.
MK-2 Posted September 24, 2008 Posted September 24, 2008 Yep, had one of them here too. Sounds exactly the same actually. Did she by any chance open an email attachment? Had it on one of our finance machines. Even now that I've cleared up as much as possible, Sophos still tells me everyday it's picked up a file from it. Probably trying to replicate files again. That one sure is a to get rid of without wiping!
RabbieBurns Posted September 24, 2008 Posted September 24, 2008 One of the staff here brought in her personal computer from home with something which sounds the same. (it was the school nurse as well incidently!) The background image was changed, and as soon as it got to the log on screen, it would blue screen. I didnt check to see if it was a real blue screen or a fake, I just booted into safe mode and ran malware bytes, and it cleared the whole thing up no problem Malwarebytes.org
kennysarmy Posted September 24, 2008 Posted September 24, 2008 don't you just love it when the staff bring in their personal computers problems to YOU! I think one day I might interupt THEIR lessons to talk about J4 tutoring for my daughter...
RabbieBurns Posted September 24, 2008 Posted September 24, 2008 to be fair it had a school related document the headmaster needed urgently on it which she couldnt get access to, plus she is really hot, so I didnt mind helping
tech_guy Posted September 24, 2008 Posted September 24, 2008 plus she is really hot, so I didnt mind helping You sound just like me!
marco84 Posted September 24, 2008 Posted September 24, 2008 Ive always found doing work for people is alot easier if you have something nice to look at!!!!
dirtydog Posted September 24, 2008 Posted September 24, 2008 done a few of these for personal machines... hard to get rid of although one program did succeed. easier to wipe IMO.
ChrisP Posted September 24, 2008 Posted September 24, 2008 read the first line and thought it was going to be a joke
mahoneycutt Posted September 24, 2008 Posted September 24, 2008 Google: Smitfraud I had the same virus on a machine and this program deleted the virus and put everything back to normal. Mike Honeycutt UNC Asheville
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now