A8 Parts Forum  

Go Back   A8 Parts Forum > General Natter > IT, AV and other Tech

IT, AV and other Tech All computing, home cinema and technology that isnt car related

Reply
 
Thread Tools Display Modes
  #1  
Old 9th April 2013, 10:08 PM
Adrian E's Avatar
Adrian E Adrian E is offline
Senior Member
 
Join Date: Dec 2010
Location: Gatwick area
Posts: 4,052
Default Oh bugger it! Some git has managed to knacker my desktop pc :(

Looks like my desktop pc has been successfully attacked by some malware called AVAsoft Professional Antivirus, which is effectively just an exploit of a vulnerability in internet explorer which allows a click on a web page to install software with no further interaction and locks you out of trying to shut down the programme or repair it. I believe possibly fixed by microsoft updates released this afternoon.

Typing this on my laptop while I try and decide whether to attempt to repair, knowing the software has potentially installed one or more back doors

I thought I'd got away with it after a safe mode clean up with Malwarebytes but it's refusng to run microsoft updates as one of the services required has been deleted, not just switched off! I'd already run the MS system file scanner as it'd replaced a system32 executable file....

Getting some help off an IT forum but they're basically suggesting I should seriously consider a complete rebuild of the pc, which I could do without

Got quite enough going on at the moment without this, but at least the laptop appears OK and the PC is running so I can pull stuff off it if I need to.

Grrrrrr


Adrian
__________________
===SOLD===2002 Audi S8 D2 Final Edition (yes, really) in Avus Silver with purple extended leather===SOLD===

2011 S5 Sportback in Phantom Black with black Super Sports leather, 9x20s, tech pack high, adaptive xenon plus, intelligent key, memory seats pack, sunroof, B&O, Audi Drive Select & quattro Sports Diff, DAB, parking system plus

2015 VW Golf GTI Performance Pack in Carbon Grey with black Vienna leather, tech pack (Discovery Pro nav & Dynaudio), DCC, factory towbar and retrofit RVC
Reply With Quote
  #2  
Old 10th April 2013, 12:04 AM
RanjS8 RanjS8 is offline
Senior Member
 
Join Date: May 2010
Location: Midlands
Posts: 594
Default Anti virus software

I have never really liked anti-virus software as it just seems to slow the computer down.....instead I have just resigned myself to accept every 18 months or so I completely format the hard drive n do a fresh re-install. In the meantime.....I just make sure I keep a back up of important stuff.

I would just back up important information and do a fresh new install.
__________________
01 Audi a8 fl sport - Grey, Bose, Glass Sunroof, S8 grill/mirror covers/wheels, Aftermarket Exhaust, very quick and lots of fun!!!!!....well I gave it one final push on the pedal to hear that v8 growl and then it was off to a new home.....
99 Audi a8 fl - Silver, Black alcantara seat/ S8 grill/side mirror, MFSW, Solar Sunroof, 17" Monoblocks (for that extra cushion of air), Rnsc, Bose.....great motorway cruiser....now gone to a new home
02 Final Edition S8 - Avus Silver, Extended Leather Pack III, Front & Rear Heated Seats, Servo, Blinds, Rear Seat Entairtainment with Playstation, Bose, Bi Xenons.....now gone to a new home
97 PF A8 4.2 quattro sport - Cashmere Grey, Servo, RNS E, Blinds, Bose, 20 Final Edition Alloys, LPG....sold sadly and will be missed
03 S4 V8 Saloon - Misano red, Manual, Milltek, Bose, Xenons, RNS E - Sold as of Feb 2012

Reply With Quote
  #3  
Old 10th April 2013, 07:00 AM
Adrian E's Avatar
Adrian E Adrian E is offline
Senior Member
 
Join Date: Dec 2010
Location: Gatwick area
Posts: 4,052
Default

Apart from refusing to run updates it seems to be running ok - it's just avoiding backing up any files that might turn out to be related to the Trojan that's been on there...
__________________
===SOLD===2002 Audi S8 D2 Final Edition (yes, really) in Avus Silver with purple extended leather===SOLD===

2011 S5 Sportback in Phantom Black with black Super Sports leather, 9x20s, tech pack high, adaptive xenon plus, intelligent key, memory seats pack, sunroof, B&O, Audi Drive Select & quattro Sports Diff, DAB, parking system plus

2015 VW Golf GTI Performance Pack in Carbon Grey with black Vienna leather, tech pack (Discovery Pro nav & Dynaudio), DCC, factory towbar and retrofit RVC
Reply With Quote
  #4  
Old 10th April 2013, 07:11 AM
The_Laird's Avatar
The_Laird The_Laird is offline
Senior Member
 
Join Date: Jun 2009
Location: Redmile: Leics, Notts, Lincs border - near Belvoir Castle
Posts: 5,074
Default

System restore to a week ago?
__________________
2002 Final Edition S8. Ebony black with Silver Grey leather and myrtle wood trim.
Current mods: solar sun roof, 20mm rear spacers, 15 mm on front, red brembo callipers, 6k headlights, rear view camera, engine remap, alloy dash dial rings, alloy navi rings, tt/phaeton pedal upgrade, (and custom matching foot rest) dension ipod interface & parrot hands free kit (both fully hidden), av input, tv in motion switched thro' PF switch in blanking plug right of steering column, Audi 'quattro' sill covers, repositioned centre console switches, radio clock, .
Planned mods: auto-dimming rear view mirror, dash cam (as steamship's), fit the ski hatch, refit philips drl's (or maybe not - nope, definitely not - horrible botch!).
Reply With Quote
  #5  
Old 10th April 2013, 07:45 AM
IT's Avatar
IT IT is offline
Administrator
 
Join Date: Jan 2009
Location: Harrogate, North Yorkshire
Posts: 6,222
Default

Quote:
Originally Posted by Adrian E View Post
Apart from refusing to run updates it seems to be running ok - it's just avoiding backing up any files that might turn out to be related to the Trojan that's been on there...
Its not whether its appearing to run ok right now, its whats running in the background ready to snoop your usernames/password/bank details or participate in online DOS or other attacks.

Honestly, if you think its been compromised. Flatten it and start again....
__________________
For parts enquiries and Forum User Administration please contact customer services directly, not me - enquiry@a8parts.co.uk, www.a8parts.co.uk, or call 01642 783537

The Daily Town Car - 2023 Tesla Model Y Performance. Black with Black. Giant ipad screen, huge sunroof, 4 wheel drive, Tow bar, lots of ooomph and made in China, so actually built properly unlike the Californian ones.

The Family Wagon - 2018 Tesla Model X. Black, 7 Seats, Towbar, Homelink, Enhanced Auto pilot with Summon and self park, Heated front seats, CCS Charger upgrade, MCU2 Upgrade, Falconwing Doors, Self opening / closing doors, Netflix, Spotify, toys, Air suspension, alcantara roof + lots of other stuff......

The 17 year old Driver Wagon 2015 Skoda Citigo Monte Carlo. Alloys, Power steering, Aircon, Leccy windows, Sat Nav, bluetooth, central locking, cup holders, 59 whole bhp. Million times better than my first car. Well jealous.....

The First 20 Audis:

2001 D2 4.2 QS Silver, 1997 D2 S8 Silver, 1999 D2 4.2 Silver, 2002 D2 S8 Dolphin Grey,
2003 C5 RS6 Blue, 1998 D2 S8 Black, 2000 D2 4.2 QS/S8 Ming Blue, 2003 D3 4.2 Ming Blue,
2005 B7 S4 Blue, 2006 D3 3.0 Tdi Black, 1999 D2 4.2 Silver, 2003 D3 4.2 LPG Crystal Blue,
2000 D2 S8 Silver, 2007 3.0 Tdi Q7 Black, 2009 B8 S4 Black, 1998 D2 S8 Agate Grey,
2006 D3 4.2 Tdi Blue, 2006 D3 S8, 2007 Q7 3.0 Tdi, 2006 C6 S6,

The Second 20 Audis:

2011 A7 Sline, 2001 A2 1.4 Tdi Black, 2002 A2 1.4 Tdi Silver, 2006 A8 4.2 Tdi Blue,
2007 4.2 Tdi Q7, 2006 S4 Cab Silver, 2010 RS6 Saloon Black , 2007 TT Roadster,
2010 A8 D4 4.2 Silver, 2006 C6 A6 2.7 Tdi Quattro, 2000 D2 4.2 QS/S8 Ming Blue (again), 2008 Q7 4.2 Black,
2009 C6 RS6 Saloon Daytona Grey, 2001 Fully Loaded A2 Tdi, 2006 Avant S6 Black, 2007 VW Caravelle Exec Black (almost an Audi)
2009 TT Roadster Daytona, 2015 Q7 4.2 tdi lava grey, 2002 GmbH D2 demonstrator, 2006 D3 A8 LWB 4.2 Tdi Black

Most Recent Audis:

2001 A2 1.4 Tdi Black, 2007 4.2 FSi Q7 ABT Blue, 2016 S5 Coupe Launch model, 2004 S4 B6 Cabriolet, 2016 Q7 Sline White, 2006 Q7 4.2 FSi Black, 2012 Q7 Sline+ 4.2Tdi White, 2008 Blue Audi S8

Everything Else

1989 Subaru Justy, 1986 Vauxhall Cartlton 2.0 GL, 1985 Vauxhall Carlton 2.2 CDi, 1987 Ford Sierra XR4x4, 1983 Vauxhall Senator, 1985 Vauxhall Senator 3.0i, 1997 Polo Saloon, 1997 Peugeot 306 1.9 TDi, Ford Sierra Sapphire 2000E, 1990 Subaru Justy, 2000 Subaru Impreza, 2000 Subaru Impreza RB5, 1993 Range Rover LSE, 2005 VW Bora, 2003 Skoda Superb, 2003 VW Passat V6 4 Motion, 1996 Peugeot 106, 2000 Range Rover 4.0, 2019 Tesla Model 3 Performance
Reply With Quote
  #6  
Old 10th April 2013, 08:02 AM
Adrian E's Avatar
Adrian E Adrian E is offline
Senior Member
 
Join Date: Dec 2010
Location: Gatwick area
Posts: 4,052
Default

Quote:
Originally Posted by The_Laird View Post
System restore to a week ago?
Would've been possible if the last 5 restore points are all after the point I think it got infected
__________________
===SOLD===2002 Audi S8 D2 Final Edition (yes, really) in Avus Silver with purple extended leather===SOLD===

2011 S5 Sportback in Phantom Black with black Super Sports leather, 9x20s, tech pack high, adaptive xenon plus, intelligent key, memory seats pack, sunroof, B&O, Audi Drive Select & quattro Sports Diff, DAB, parking system plus

2015 VW Golf GTI Performance Pack in Carbon Grey with black Vienna leather, tech pack (Discovery Pro nav & Dynaudio), DCC, factory towbar and retrofit RVC
Reply With Quote
  #7  
Old 10th April 2013, 08:06 AM
PsYcHe PsYcHe is offline
Senior Member
 
Join Date: Jan 2009
Location: Blantyre, Scotland
Posts: 4,136
Default

I'd go for the rebuild.. It's a pain in the arse, but that's life.

Possibly suggest something like CrashPlan for future recoveries..
__________________
2010 Jag XF 3.0D Portfolio S

I know.. I know..

Reply With Quote
  #8  
Old 10th April 2013, 08:06 AM
Adrian E's Avatar
Adrian E Adrian E is offline
Senior Member
 
Join Date: Dec 2010
Location: Gatwick area
Posts: 4,052
Default

Quote:
Originally Posted by IT View Post
Its not whether its appearing to run ok right now, its whats running in the background ready to snoop your usernames/password/bank details or participate in online DOS or other attacks.

Honestly, if you think its been compromised. Flatten it and start again....
Any good sites with advice on rebuilding a win 7 64 bit machine and making sure you don't miss any files or keep the virus? Can the windows file transfer software manage it or is that too risky? I don't mind doing it although finding all the software again will be a total ball ache :/ I could backup to my laptop as the hdd is almost as big, but if I do that over a network is it likely I'll infect the laptop too or is that unlikely?

Will have to rebuild my vm with Etka too
__________________
===SOLD===2002 Audi S8 D2 Final Edition (yes, really) in Avus Silver with purple extended leather===SOLD===

2011 S5 Sportback in Phantom Black with black Super Sports leather, 9x20s, tech pack high, adaptive xenon plus, intelligent key, memory seats pack, sunroof, B&O, Audi Drive Select & quattro Sports Diff, DAB, parking system plus

2015 VW Golf GTI Performance Pack in Carbon Grey with black Vienna leather, tech pack (Discovery Pro nav & Dynaudio), DCC, factory towbar and retrofit RVC
Reply With Quote
  #9  
Old 10th April 2013, 08:14 AM
David's8's Avatar
David's8 David's8 is offline
Senior Member
 
Join Date: Jan 2012
Location: Helensburgh, Scotland
Posts: 3,507
Default

I presume that you have looked for solutions online:

http://malwaretips.com/blogs/remove-...ssional-virus/

though I note that it says use Malwarebytes Anti-Malware software which you say you have already tried.
__________________
2002 D2 S8 – Ming Blue, Valcona leather, Vavona wood insert, solar sunroof (to be fitted), Heated rear seats, extended leather pack, 18” Avus, ski hatch, Bose, auto dim rear view mirror, rear blind.
Reply With Quote
  #10  
Old 10th April 2013, 09:37 AM
Adrian E's Avatar
Adrian E Adrian E is offline
Senior Member
 
Join Date: Dec 2010
Location: Gatwick area
Posts: 4,052
Default

Its been cleaned of the infection but the problem with Trojan viruses is that you're never entirely sure there isn't a hidden back door left behind for someone to exploit later without your knowledge. Or they can leave a key logger behind to steal passwords and card numbers
__________________
===SOLD===2002 Audi S8 D2 Final Edition (yes, really) in Avus Silver with purple extended leather===SOLD===

2011 S5 Sportback in Phantom Black with black Super Sports leather, 9x20s, tech pack high, adaptive xenon plus, intelligent key, memory seats pack, sunroof, B&O, Audi Drive Select & quattro Sports Diff, DAB, parking system plus

2015 VW Golf GTI Performance Pack in Carbon Grey with black Vienna leather, tech pack (Discovery Pro nav & Dynaudio), DCC, factory towbar and retrofit RVC
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 07:29 PM.


Powered by vBulletin® Version 3.8.0
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.