Did some research and found this ClamWin Portable Antivirus that can be included/extracted/installed to your USB flash drive/disk... you can scan your USB flash drive/disk anywhere even the PC you plugged into. What makes this ClamWin Portable Antivirus stand-out is that it is FREE and updatable anytime. ClamWinPortable is a stand-alone program that can be saved to your USB flash/thumb drive without installing it to your PC also.
ClamWin Portable Additional Description: (from www.portableapps.com)
ClamWin Portable is the popular ClamWin antivirus packaged as a portable app, so you can take your antivirus with you to scan files on the go. You can place it on your USB flash drive, iPod, portable hard drive or a CD and use it on any computer, without leaving any personal information behind.
Features:
ClamWin is a Free Antivirus for Microsoft Windows. It provides a graphical user interface to the Clam AntiVirus engine. It features:
--- High detection rates for viruses and spyware --- Regular virus database updates. ClamAV team regularly updates virus databases to include a new virus/variant immediately after it appears --- Standalone Virus Scanner
Please note that ClamWin Free Antivirus does not include an on-access real-time scanner, that is, you need to manually scan a file in order to detect a virus or spyware. Also, ClamWin Portable has scheduled scans and updates disabled as they are not used in a portable scenario.
How to install ClamWin Portable on your Portable Drive:
Just download the portable package at the top or click HERE, then double-click it. Select the location or the portable drive/USB drive you wish to install to and click OK. A PortableClamWin directory will be created there and all the necessary files installed are inside it.
I tried it on my USB flash disk and it works great on any PC, i was able to update it as well. Launch the ClamWinPortable.exe inside the PortableClamWin folder then click the update button to have the latest updates and virus definition/library.
Scanned it with Bitdefender Total Security '09, Superantispyware Pro, Trojan Remover and Spyware Doctor with Anti-Virus... it's 100% clean, nice work ClamWin ^_^
I also added autorun features on my USB flash drive with ClamWin Portable Antivirus so I can scan immediately once my USB flash/thumb drive is connected to any PC. (See image below)
Showing posts with label Virus. Show all posts
Showing posts with label Virus. Show all posts
How to remove | Removing trojan.dropper/sys-nv virus
I got infected with trojan.dropper/sys-nv virus last week. Superantispyware was able to remove the infection, but everytime I reboot my pc...the virus keeps coming back trying to run itself or infect my system files so the Superantispyware keeps detecting/blocking and cleaning the same virus over and over, arghh! The other partitions on my hard drive which are my backup got infected too thats why formating all of it is not an option for me :)
1. First, download the trial version of KASPERSKY ANTIVIRUS 2009 and free SUPERANTISPYWARE.
2. Install both KASPERSKY ANTIVIRUS and SUPERANTISPYWARE.
3. Make sure you update both with the latest virus definitions from their respective sites.
4. Launch the SUPERANTISPYWARE and go to Preferences and select the Scanning Control tab, check the ff boxes like shown on the image below then click Close.
5. Run a full/deep scan using both KASPERSKY ANTIVIRUS and SUPERANTISPYWARE at the same time on ALL hard-drives/partitions.
5. Wait for both application to finish scanning, after it...
>> I. You will notice that KASPERSKY found the ff:
---------- a .CMD file on each root directory of ALL the hard-drives/partitions (this are the infected files).
---------- GBM6N.EXE files (this file is the culprit and the one that keeps placing the trojan.dropper/sys-nv on your system).
>> II. and SUPERANTISPYWARE found:
---------- trojan.dropper/sys-nv (trojan placed by GBM6N.EXE)
---------- adware.vundo variant (I keep detecting this together with trojan.dropper/sys-nv so I'm assuming that this is also with trojan.dropper/sys-nv or GBM6N.EXE)
6. KASPERSKY will prompt that it automatically delete all the GBM6N.exe and .cmd files after scanning.
7. SUPERANTISPYWARE will also remove the trojan.dropper/sys-nv and adware.vundo variant
8. SUPERANTISPYWARE will ask you to restart your PC... but first, make sure that KASPERSKY already deleted all the GBM6N.exe and .cmd files
9. Restart your PC...
10. Use the search tool on your pc to look for any file that has GBM6N on the filename (on my case,I found several GBM6N-prefetch files)... DELETE those files.
11. Restart your PC again...
12. Notice that when you click any of your drive, it doesnt open and will just show an "open with" window. Don't panic, all your files are still inside :) ...that's only the side effect of the virus we cleared a while ago.
13. Now to fix this "open with" issue... download the FixDrive-Tool HERE, this tool will fix your system registry that causes your drives/partitions not to open.
14. Once downloaded, unzip the file and extract the contents (FixDrive.exe and readme.txt) to a folder
15. Click the extracted FixDrive.exe to run the program.
16. Select the drive-letter from the list that exhibiting the problem then click Fix.
17. Your done... :D
I had a hard time looking for a simple solution on the internet since most of the things i found was too complicated like editing a lot of stuff on the registry system which got me worried since it can make your system unstable with one mistake. After trial and error with different antivirus, only KASPERSKY ANTIVIRUS 2009 was able to capture this virus. So I decided to post an easy way on how I cleared the virus and fixed the side effect on the registry.
1. First, download the trial version of KASPERSKY ANTIVIRUS 2009 and free SUPERANTISPYWARE.
2. Install both KASPERSKY ANTIVIRUS and SUPERANTISPYWARE.
3. Make sure you update both with the latest virus definitions from their respective sites.
4. Launch the SUPERANTISPYWARE and go to Preferences and select the Scanning Control tab, check the ff boxes like shown on the image below then click Close.
5. Run a full/deep scan using both KASPERSKY ANTIVIRUS and SUPERANTISPYWARE at the same time on ALL hard-drives/partitions.5. Wait for both application to finish scanning, after it...
>> I. You will notice that KASPERSKY found the ff:
---------- a .CMD file on each root directory of ALL the hard-drives/partitions (this are the infected files).
---------- GBM6N.EXE files (this file is the culprit and the one that keeps placing the trojan.dropper/sys-nv on your system).
>> II. and SUPERANTISPYWARE found:
---------- trojan.dropper/sys-nv (trojan placed by GBM6N.EXE)
---------- adware.vundo variant (I keep detecting this together with trojan.dropper/sys-nv so I'm assuming that this is also with trojan.dropper/sys-nv or GBM6N.EXE)
6. KASPERSKY will prompt that it automatically delete all the GBM6N.exe and .cmd files after scanning.
7. SUPERANTISPYWARE will also remove the trojan.dropper/sys-nv and adware.vundo variant
8. SUPERANTISPYWARE will ask you to restart your PC... but first, make sure that KASPERSKY already deleted all the GBM6N.exe and .cmd files
9. Restart your PC...
10. Use the search tool on your pc to look for any file that has GBM6N on the filename (on my case,I found several GBM6N-prefetch files)... DELETE those files.
11. Restart your PC again...
12. Notice that when you click any of your drive, it doesnt open and will just show an "open with" window. Don't panic, all your files are still inside :) ...that's only the side effect of the virus we cleared a while ago.
13. Now to fix this "open with" issue... download the FixDrive-Tool HERE, this tool will fix your system registry that causes your drives/partitions not to open.14. Once downloaded, unzip the file and extract the contents (FixDrive.exe and readme.txt) to a folder
15. Click the extracted FixDrive.exe to run the program.
16. Select the drive-letter from the list that exhibiting the problem then click Fix.17. Your done... :D
Conflicker eye chart / Conficker eye chart, how it works?
Virus
|
I found a report about Conflicker eye chart and how it works. Conflicker eye chart is the easiest way to determine if your computer is infected with Conflicker worm. Basically, Conflicker eye chart consist of 2-parts... the upper portion are images from various antivirus websites while the images on the lower part are feed from various open source operating system distributions. These images are drawn directly from the six different websites to which each logo belongs. If your computer is infected with Conflicker worm or other type of malware (which are set to block access on different antivirus sites)... one of these images will not show.The only other reasons that these images will not show is either you're image loading turned off in browser, poor internet connection OR the source of the images are currently down. Here are some websites hosting the exact same Eye Chart and which will work exactly the same way just incase you want to double check... joestewart, talkbiz, and confickerworkinggroup. Want to learn more about Conflicker Worm or widely known as April Fool's Day Virus? Click HERE.
New VIRUS on Facebook, MySpace & other Social-Network
Virus
|
Facebook has been one of the most successful and widely known social-networking site today. But beware, new worm is lurking around to steal the identities of the friends, fans and brands that connect though the social-networking site.
Trend Micro showed that several new hoax applications are trying to trick members in giving their usernames and passwords. Facebook also seen several security threats. It's surely a new variant of the Koobface worm, installing malware on the victim's computers who clicked on a link to a fake YouTube video. Computers can also be infected by other malware and downloaded unknowingly by a user when visiting malicious Web sites based from Trend Micro.
As the worm developers execute the malware, it searches for cookies created by online social networks. The latest was Facebook and even MySpace.
This worm uses the social-networking cookies and makes a DNS query to check IP addresses of remote domains. Once connected, the bad-guys can now remotely perform commands on the victim's computer.
Trend Micro showed that several new hoax applications are trying to trick members in giving their usernames and passwords. Facebook also seen several security threats. It's surely a new variant of the Koobface worm, installing malware on the victim's computers who clicked on a link to a fake YouTube video. Computers can also be infected by other malware and downloaded unknowingly by a user when visiting malicious Web sites based from Trend Micro.
As the worm developers execute the malware, it searches for cookies created by online social networks. The latest was Facebook and even MySpace.
This worm uses the social-networking cookies and makes a DNS query to check IP addresses of remote domains. Once connected, the bad-guys can now remotely perform commands on the victim's computer.
The worm's agenda is to transform the victim's computer like a zombie and form botnets for its purpose. Koobface attempts to do this by composing a message and sending it to the user's friends. The message contains a link to a Web site where a copy of the worm can be downloaded by unsuspecting friends then the cycle repeats itself.
Facebook and other social-networking sites are the targets since Facebook alone has more than 175 million users, which makes it a good target. I know that this worm will continue to plague social-networking sites as long as the bad-guys get what they wanted. People can protect themselves by updating their antivirus software and thinking twice before clicking on links from friends. Never install a codec from some random Web site as well.April Fools Day Virus | Conflicker C
Virus
|
I was surfing the net few days ago when I saw the news about this Conflicker-C virus posted on yahoo...which they call "April Fool’s Day Virus". I read a few lines then I started thinking if my computer is already infected as well. Here's the deal, Conflicker-C virus is a worm type virus and even Microsoft has offered $250,000 bounty just to catch its developers. I started thinking back about the Love-bug virus and how it hits Microsoft and even Pentagon.
Research proves that this Conflicker-C worm already infected at least 3 million PCs, and set to spring to life in a new way on Wednesday (April Fool's Day). That's when the infected PC's (which is called "botnet") will get more aggressive about "phoning home" to the worm's developers over the Internet. When that happens, the worm developers will be able to trigger the program to send spam, spread more infections, clog the networks traffic, or even bring down Web sites. Even legit sites can be co-opted for this purpose, once hackers make it through...it uses the sites servers to send out malicious commands.
Infected computers have been trying to connect each day to 250 Internet domains (spots on the Internet where Web sites are parked). The worm developers need to get just one of those sites under their control to send their commands to the botnet.
They say that it will get harder to track On April 1 and it is said that infected machines will generate a list of 50,000 new domains a day that they could try. Of that group, the botnet will randomly select 500 for the machines to actually query. This worm tries to crack administrators' passwords, disables security software, blocks access to anti-virus vendors' Web sites to prevent updating, and opens the machines to further infections by Conflicker's authors.
This virus trick people into downloading a malicious program, Conflicker is so good at spreading because it finds vulnerable PCs on its own and doesn't need human involvement to infect a machine.
Here's some reports regarding the April Fool’s Day Virus | Conflicker C
Some Anti-virus company offers Removal tools for this but keep in mind that your Windows/Operating System should be updated as well. You can check Symantec Website for more info about Conflicker-C and how to remove this worm...click HERE.
I also found a report about Conflicker eye chart and how it works. Conflicker eye chart is the easiest way to determine if your computer is infected with Conflicker worm. For more info on how this "Conflicker eye chart" works... click HERE.
Research proves that this Conflicker-C worm already infected at least 3 million PCs, and set to spring to life in a new way on Wednesday (April Fool's Day). That's when the infected PC's (which is called "botnet") will get more aggressive about "phoning home" to the worm's developers over the Internet. When that happens, the worm developers will be able to trigger the program to send spam, spread more infections, clog the networks traffic, or even bring down Web sites. Even legit sites can be co-opted for this purpose, once hackers make it through...it uses the sites servers to send out malicious commands.
Infected computers have been trying to connect each day to 250 Internet domains (spots on the Internet where Web sites are parked). The worm developers need to get just one of those sites under their control to send their commands to the botnet.
They say that it will get harder to track On April 1 and it is said that infected machines will generate a list of 50,000 new domains a day that they could try. Of that group, the botnet will randomly select 500 for the machines to actually query. This worm tries to crack administrators' passwords, disables security software, blocks access to anti-virus vendors' Web sites to prevent updating, and opens the machines to further infections by Conflicker's authors.
This virus trick people into downloading a malicious program, Conflicker is so good at spreading because it finds vulnerable PCs on its own and doesn't need human involvement to infect a machine.
Here's some reports regarding the April Fool’s Day Virus | Conflicker C
Some Anti-virus company offers Removal tools for this but keep in mind that your Windows/Operating System should be updated as well. You can check Symantec Website for more info about Conflicker-C and how to remove this worm...click HERE.
I also found a report about Conflicker eye chart and how it works. Conflicker eye chart is the easiest way to determine if your computer is infected with Conflicker worm. For more info on how this "Conflicker eye chart" works... click HERE.
Subscribe to:
Posts (Atom)