PDA

View Full Version : If you use a Windows computer read this and don't ignore it!



Tim
03-06-2014, 21:47
I know Geoff has mentioned this elsewhere, but this really needs to be brought to everyone's attention if they use a Windows PC, it really is very important guys and I know two people who have had their computer hijacked recently, one of those for the second time after buying a new PC :doh:

PLEASE DON'T IGNORE THIS.

Read this first: http://www.bbc.co.uk/news/technology-27681236

Then download and run this scanner: http://www.microsoft.com/security/scanner/en-gb/default.aspx

If you are infected and you do nothing, you could lose everything on your PC and all your accounts online could potentially be compromised - ignore at your peril ;)

walpurgis
03-06-2014, 22:02
Glad somebody else is on this Tim.

I don't think it should be taken lightly, which is why I've been beefing up my PC protection. It's not hard to do and many very effective measures can be obtained as free downloads, like the Microsoft scanner you linked to. So it need not be costly.

One thing to point out. The MS scanner will tell you if you are infected (if you can get it to work after being hijacked), but it won't stop infections getting in.

Light Dependant Resistor
03-06-2014, 22:16
Hi
Having been totally frustrated with proprietary software I converted to Linux in 2003.

To understand Linux you need to embrace the meaning of free software http://www.youtube.com/watch?v=uJi2rkHiNqg&feature=kp

There are a multitude of operating systems to choose from, generally falling into Debian Ubuntu ( derived from Debian ) or Red Hat see: http://distrowatch.com at Distrowatch you can see the marvelous development occurring with free software. Many of these too are dedicated to Audio purpose: http://www.bandshed.net/AVLinux.html

Ideally the world by now would have no proprietary files or operating systems, but sadly the uptake to convert to free software has been pushed aside by advertising and total marketing saturation of proprietary software ( note I have avoided naming them for this reason ). To obtain totally free software without proprietary blobs ( which will eventually in time be part of the Linux kernel rather than blobs), you have to look a little harder and information about these can be found at: http://www.fsf.org and look under resources Trisquel http://trisquel.info/ is the stand out totally free operating system.

If you want a very easy Linux operating system with updates through to 2019 ( and at which time you just install the next version ) try http://www.linuxmint.com :)

Cheers

walpurgis
03-06-2014, 22:33
That's a whole new learning curve for most though Chris. I have tinkered with Linux distros a couple of times, but not involved myself seriously (I've got a copy of 'Puppy Linux' and still to try. That may go on my now redundant XP laptop).

Light Dependant Resistor
03-06-2014, 23:13
Hi Geoff
Yes its quite a learning curve, but very rewarding. If you are starting out to convert, you can trial Linux Mint without changing anything. see: http://www.linuxmint.com/documentation.php as the entire operating system will run from the .iso image DVD As with any conversion if you are proceeding you will need to store your existing files on a separate drive.

A lot of people will be used to office type programs, and may see this as reluctance to change .In linux libre office is the program http://www.libreoffice.org/ and you will learn that nearly everything done in proprietary software has an equivalent, and you are assisted to be able to read and do everything offered the other proprietary way.

Its a start, and well worthwhile doing.

Gordon Steadman
04-06-2014, 04:37
I guess it is a start but isn't it true that as soon as more people start using Linux then the scum will start aiming at that. In much the same way that we Mac users are being targeted more since the user base expanded.

I'm aware (I think) that anything based on unix is harder to crack but where there is a will...........

jandl100
04-06-2014, 05:05
"phishing" emails to install Gameover Zeus on victims' computers.


Well, if you are dim enough to open a phishing email link .... :doh:

But I'm running that scan anyway - thanks for the link -

Gordon Steadman
04-06-2014, 05:19
"phishing" emails to install Gameover Zeus on victims' computers.


Well, if you are dim enough to open a phishing email link .... :doh:

True but...mocking the afflicted doesn't solve the problem. They are an easy target and the world has always had to carry the less savvy. Part of that 'caring society' thing is that they need protecting from themselves.

I think its dangerous to mock, I'm sure we all have our areas of non expertise or fail to apply what some others might consider common sense (just look at cable threads:eyebrows: [sorry - not]).

jandl100
04-06-2014, 05:26
It's especially dangerous to mock before the scan has completed!

--- phew, all clear. :eek:

But I think my point was that the denizens on this type of internet forum are pretty savvy kind of folk when it comes to this sort of thing.
Well, I would have thought so.

seoirse2002
04-06-2014, 08:25
thanks for sharing....done it,all clear

anthonyTD
04-06-2014, 09:33
The skeptic in me...
How do we know for sure that the scanner is safe, people create problems, all of a sudden a fix is offered, how do we know the fix is actually "a fix"
We get the fright, then' We willingly download software from supposedly trusted entities...
Makes you think!!!:eyebrows:

walpurgis
04-06-2014, 10:29
The point being, is your Windows computer safe?

If you know how, I'd suggest adding some extra protection, even if only temporarily for a few months until the next anticipated wave of nasties is identified and the A/V companies have distributed updates that defend against these.

An active defence seemed to me worth having, which is why I opted to install the Threatfire behaviour based A/V. Winpatrol also intervenes if it spots oddities in behaviour.

If you are feeling particularly paranoid, you can use a 'Whitelisting' application, which memorises how your PC is and blocks any changes for you to decide whether to allow or not. I've tried SecureAPlus in the past and it works, but it will slow things down a bit and it takes while to build up its comparison 'whitelist'. But it's basically bombproof and includes its own antivirus if wanted.

Link to free safe download: http://download.cnet.com/SecureAPlus/3000-2239_4-75960976.html Just be careful when downloading and uncheck/decline the unwanted extra software that the site tries to fob off on you.

MikeMusic
04-06-2014, 14:00
Thanks Tim

Both my pcs at work are fine.
I shall be running this again at home as there is something very wrong with that little box

brian2957
04-06-2014, 14:06
Aye thanks Tim . Both mine also seem to be OK.

The Barbarian
04-06-2014, 14:06
I will of course just ignore all this & carry on as normal..

StanleyB
04-06-2014, 15:03
I took care of the laptop of someone (who happens to be an AoS member as well) a while back after he got hit by an earlier form of this attack. He was close to paying the ransom after giving his machine to a company who specializes in recovery but couldn't this time, before I convinced him to let me have a go.
The main thing is to make two different back ups of your hard drive this week and keep the back up away from any PC connection. So an external drive is obviously the best way to go.
One back up is a full back up of your system.
The next back up is a back up of your documents, email settings, and databases if you use accounts programs etc. Include backing up the bits in Firefox if you use it. Mozbackup will help you back up the bist in Firefox. Only back up the add-ons, extensions, passwords and bookmarks.
The version of the virus I had to deal with came in three parts. One part sits in the very top of the boot up sequence. So you can't even get to boot into Safe Mode. The next section is the master code, which generates a new slave code if it cannot see the old slave code in the location that it is supposed to be in. The third section is a code that communicates with the outside world via the internet.
I haven't seen a PC yet that has been hit with the latest version. But I might deliberately infect one of my old laptops and see if it can be recovered in the same way as before.

Ali Tait
04-06-2014, 15:10
What's best to use for backing up a windows machine Stan?

Ali Tait
04-06-2014, 15:10
Software wise I mean.

StanleyB
04-06-2014, 15:35
What's best to use for backing up a windows machine Stan?
I use Acronis. It has the option to back up the drives or the files. And it also has a validation function, which is a MUST as far as I am concerned.
Windows7 does have a back up option as well though. But I have never used it.

Light Dependant Resistor
04-06-2014, 17:30
The cost of these protection products !, yes some offering free trials but......post #3 makes a lot more sense.

walpurgis
04-06-2014, 17:32
The cost of these protection products !, yes some offering free trials but......post #3 makes a lot more sense.

I don't pay for any software apart from the windows 7 O/S installation. Plenty of good free applications available.

Tim
04-06-2014, 22:42
+1 for Aconis and I have been using it for well over a decade now, best bit of software I think I have ever bought, but I test and configure systems frequently, so get lots of use from it.

Glad to see this info has been of some use to some and this threat should not be taken lightly. It's the biggest malware threat ever detected from an organised crime group and the co-ordinated effort to try and defeat them is unprecedented, encompassing the business community, software manufacturers, the media and law enforcement worldwide. It really is a serious attack from a highly organised and resourceful criminal gang. So please do give it some thought and treat it seriously, but don't panic and if you are unsure what to do, just follow the advice and use the free tools to ensure you are not at risk.

My friend who got attacked recently was (and this is the second time he was hit, the first time was the spoof Met Police lock screen) sitting at his computer and the mouse started to move on its own and start opening programs. Then his home phone rang and a 'helpful broadband provider support operator' informed him his computer had been compromised and offered to fix it for £130, they used his name on the phone and knew his address, which was part of the scam to put his mind at rest that they really were trying to help him and were legitimate. He let them do the necessary and they took over his machine remotely whilst he coughed up the money! Stupid I know and he knows it too, but people are very easily taken in by this, especially if they are unfamiliar with computers. In his case his computer had clearly been under remote control before they called him and the only place they could have found out so much personal information was from his compromised PC and it was a new one purchased in February this year from PC World, following his previous attack.

He's retired and spends far too much time home alone . . . . I think his wife has banned him from using the computer on his own now!

Ali Tait
05-06-2014, 21:30
I use Acronis. It has the option to back up the drives or the files. And it also has a validation function, which is a MUST as far as I am concerned.
Windows7 does have a back up option as well though. But I have never used it.

Thanks Stan.

kininigin
07-06-2014, 09:42
The skeptic in me...
How do we know for sure that the scanner is safe, people create problems, all of a sudden a fix is offered, how do we know the fix is actually "a fix"
We get the fright, then' We willingly download software from supposedly trusted entities...
Makes you think!!!:eyebrows:

+1 Problem-reaction-solution! Think i'll do sweet f.a!

anthonyTD
07-06-2014, 09:50
Hi Darren,
To be fair,
There is good advice here from the other members.:)
A...
+1 Problem-reaction-solution! Think i'll do sweet f.a!

kininigin
07-06-2014, 10:04
Hi Darren,
To be fair,
There is good advice here from the other members.:)
A...

Hi Anthony,
Possibly,but as far as i'm aware it's nothing new and nothing a decent anti-virus ect program will not sort! Sounds like a great way to scan a large number of peoples computers and gather info to me!

walpurgis
07-06-2014, 10:34
the spoof Met Police lock screen

That's the bug that got onto my chum's laptop. If you are quick it can be removed before it detects what you are doing. Boot in safe mode and do a system restore, but you literally have only a couple of seconds for each action before it blocks you.

anthonyTD
07-06-2014, 12:07
:)
Hi Anthony,
Possibly,but as far as i'm aware it's nothing new and nothing a decent anti-virus ect program will not sort! Sounds like a great way to scan a large number of peoples computers and gather info to me!