Kinda n00b Question (Win XP -> Win 7)

My old computer was Win XP and I’d run AdAware about once a week. It would always pick up a bunch of tracking cookies and minor crap picked up across the web.

My new computer is Win 7 and so far AdAware hasn’t picked up anything at all. It’s been a few weeks.

Is Win 7 just that much better at keeping a system clean? :gotme:

Windows 7 uses ASLR/UAC and various other technologies to make the entire OS more secure.

If you keep Adobe(Flash/reader)/Browser updated along with windows 7 auto updates you should be pretty solid.

As well as keep windows defender updated (should be covered in win7 auto updates) plus I would put MS Security Essentials on there.

ninite.com

pick the apps you want, save the file on the desktop and run it every now and then. Grabs the latest updates as they are released.

Ah. I’m just so used to cleaning & maintaining my system that it seemed odd that I wouldn’t have to anymore, lol.

Thanks guys :tup:

+1 in this website use it after I reinstall a os or build a new computer that needs apps.

Also ms essentials is a great antivirus

Well now I feel like a total wiener…

Computer has been running fine until today when I went to a shady website to watch / stream the Bills game. An alert came up after about an hour of watching the game saying Adobe Flash wanted to modify my system… I clicked ‘no’ but it kept asking over and over again. I did NOT click yes at any point and instead used ctrl-alt-del to close firefox. And then I started to get BS pop ups from “win 7 security” which is obviously some fake program.

So looks like my shit’s infected y0!

Can someone take a look at this removal process and let me know if it’s what I need to do in your opinion: http://www.bleepingcomputer.com/virus-removal/remove-win-7-security-2012

I’ve been using Avast! antivirus but maybe it’s not that great anymore and I need to go with MS Security essentials?

I’ve seen that one already, it’s one of the more shitty ones to remove. Ok here we go.

#1. Do you have any other user accounts on the computer? If so log into that account, install Malwarebytes, update it, run and remove it
#2. If you don’t have other user accounts, start the computer in safe mode and install Malwarebytes. To get into safe mode reboot the computer hit F8 repeatedly like your life depends on it.

It could be a lot worse than you think. Start with downloading Malwarebytes. Do a full scan. If you can’t run malwarebytes (virus won’t let you) then report back.

http://dw.com.com/redir?edId=3&siteId=4&oId=3000-8022_4-10804572&ontId=8022_4&spi=afb58592bdeea86a84892df1d43e83c6&lop=link&tag=tdw_dltext&ltype=dl_dlnow&pid=12149821&mfgId=6290020&merId=6290020&pguid=Tu5gYgoOYI8AABPADuQAAAEo&destUrl=http%3A%2F%2Fdownload.cnet.com%2F3001-8022_4-10804572.html%3Fspi%3Dafb58592bdeea86a84892df1d43e83c6

---------- Post added at 04:52 PM ---------- Previous post was at 04:51 PM ----------

lol Prog beat me to it.

Working on it now, I’ll keep you guys updated. Thanks!

After reading about that, I hope it doesn’t fuck up your .exe files. I have a reg key that will fix it, but it sucks.

Well see I guess. How the fuck did I get this thing anyway? I’m sure Flash is updated on my system but maybe it has a hole… Windows is definitely up to date too.

Ran the two programs suggested by bleeping computer and I’m now scanning with Malwarebytes.

MS Security essentials is pretty good…

The reason you got the flash thing and your computer still got popped is because those malware websites try a bunch of different attack vectors at the same time.

There is currently some pretty sweet Java exploit, and a couple flash 0days that patches just came out for.

You could try running Firefox + Adblock Plus + NoScript

http://d2o7bfz2il9cb7.cloudfront.net/main-thumb-t-51979-50-hZFrt2qSoDsjCMd1mWMV88jIPFly8lJk.jpeg To FF and the plugins. No Bills game is worth a virus.

No matter how good the AV is most of it works off signatures and its extremely easy to pack/crypt an a virus on the fly so it doesn’t match anything in the signature database/definitions file of the AV.

It really starts with making sure all your software is current I would suggest http://secunia.com/vulnerability_scanning/personal/ this will find the majority of software on your PC and compare its to their database to see if its current it also allows you to update from with in.

Tell me about it… I don’t even know how the game ended although I’ll assume we lost, lol.

I’ll get those plugins and run security essentials along side avast after this is over with.

Scan has found one infected so far… this is going to take a while. :mad:

Tell me about it… I don’t even know how the game ended although I’ll assume we lost, lol.

I’ll get those plugins and run security essentials along side avast after this is over with.

Scan has found one infected so far… this is going to take a while. :mad:

I havent really read much in this thread, but im gonna paste the guide i made for removing these in a few minutes.

These viruses usually (almost always...) put themselves in the "c:\users\*username*\appdata"  folder as a hidden file
 for vista/7, and c:\docs + settings\*username*\application data\, in the root of those folders or inside another folder with about
 10 random characters/numbers.  So, all you have to do is delete that file and it will either allow you to have your computer back,
 or you may have to do a couple other things.

First: if you see any of your files are hidden, not viewable, or items in your start menu are no longer there 
(check programs>accessories and see if the typical stuff is there, or inside other folders). If for some reason, 
any of that stuff is hidden or not visible, DO NOT CLEAR TEMP FILES OR RUN ANY CCLEANER/LIKE PROGRAMS. 
 these files get moved into the temp folder, and if removed will almost always
 require a reinstall of the OS.

Restart computer into safemode (Just safemode, do not do safemode w/ networking). Log in, click start, run,
 and load 'msconfig'.  in msconfig, click 'Startup'.  Look through that list for something 'weird'. it will either be 
a bunch of random letters (ie. 9dXH3kL03.exe),  Something Obvious (Win 7 Security.exe), or 3 letters (kvh.exe). 
 Sometimes there will be multiple ones, uncheck them if you see them. Another easy way to tell, is in the box, there
 is the 'command' sort option. click on that and look for any programs that are listed to run in the c:\documents and 
settings\ or c:\users. Those are going to be the virus(es). 

If you uncheck them, write down/take note of where those locations are. (kvm.exe with a command of c:\docs +
 settings\user\application data\kvm.exe")  Thats the folder the virus is located. Browse to that folder (you may have 
to unhide system files) and delete those files, and any other files that may have a similar name structure. (3 letters, 
random characters, or obv virus names)

once they are deleted, restart the computer, and go into normal windows. if all is good, you will be able to open 
programs and continue as if nothing happened. If not, you will still not be able to load programs (unless you right click 
on them and choose 'start' - which is an option the virus usually creates to be able to run itself) and some of your files 
are hidden.   

If you are still unable to run programs or unable to find a lot of start menu programs or your personal files, post back 
and ill send the fixes for those.

also, sometimes just running the latest versions of security essentials, windows updates, microsoft removal tool, and windows defender will remove and correct these issues.

Looks like all is fixed, thanks again guys :tup: