Got hit by a virus/exploit of some sort
Moderator: Thanas
Got hit by a virus/exploit of some sort
Managed to encounter something called winloqon.exe and its done some interesting things to my laptop. I found part of the source and removed it from the registry and startup. Running Spybot and Adaware. Any other recommendations?
"If the facts are on your side, pound on the facts. If the law is on your side, pound on the law. If neither is on your side, pound on the table."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
-
Dalton
- For Those About to Rock We Salute You
- Posts: 22637
- Joined: 2002-07-03 06:16pm
- Location: New York, the Fuck You State
- Contact:
Re: Got hit by a virus/exploit of some sort
MalwareBytes would be my top pick. Run AVG or Avast as well to clean out the viruses, and maybe a HijackThis log to make sure you're clean.
To Absent Friends
"y = mx + bro" - Surlethe
"You try THAT shit again, kid, and I will mod you. I will
mod you so hard, you'll wish I were Dalton." - Lagmonster
May the way of the Hero lead to the Triforce.
-
Dominus Atheos
- Sith Marauder
- Posts: 3904
- Joined: 2005-09-15 09:41pm
- Location: Portland, Oregon
Re: Got hit by a virus/exploit of some sort
What operating system are you using?
Re: Got hit by a virus/exploit of some sort
XP SP3
"If the facts are on your side, pound on the facts. If the law is on your side, pound on the law. If neither is on your side, pound on the table."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
-
Dominus Atheos
- Sith Marauder
- Posts: 3904
- Joined: 2005-09-15 09:41pm
- Location: Portland, Oregon
Re: Got hit by a virus/exploit of some sort
Use Microsoft's MRT here.
Re: Got hit by a virus/exploit of some sort
I think those did it. No subsequent traces.
"If the facts are on your side, pound on the facts. If the law is on your side, pound on the law. If neither is on your side, pound on the table."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
-
Dominus Atheos
- Sith Marauder
- Posts: 3904
- Joined: 2005-09-15 09:41pm
- Location: Portland, Oregon
Re: Got hit by a virus/exploit of some sort
Wait, did you say Winlogon? That's a real windows process, not a virus. What happened to your computer?
Re: Got hit by a virus/exploit of some sort
No, I said winloQon
"If the facts are on your side, pound on the facts. If the law is on your side, pound on the law. If neither is on your side, pound on the table."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
Re: Got hit by a virus/exploit of some sort
Fuck it, I'm nuking the laptop this weekend.
"If the facts are on your side, pound on the facts. If the law is on your side, pound on the law. If neither is on your side, pound on the table."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
-
Zac Naloen
- Sith Acolyte
- Posts: 5488
- Joined: 2003-07-24 04:32pm
- Location: United Kingdom
Re: Got hit by a virus/exploit of some sort
Assuming that means it came back I'd run these apps in safe mode if you havent already
Member of the Unremarkables
Just because you're god, it doesn't mean you can treat people that way : - My girlfriend
Evil Brit Conspiracy - Insignificant guy
Re: Got hit by a virus/exploit of some sort
Suspicion confirmed. Much harder to remove than first anticipated. All files on this PC are considered disposable and will not be backed up. Reformat to factory specs is the only viable solution at this time.
"If the facts are on your side, pound on the facts. If the law is on your side, pound on the law. If neither is on your side, pound on the table."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
Re: Got hit by a virus/exploit of some sort
Or someone bombed a very suspicious site to the top search bracket above Walmart when searching Walmart on Google. Still reformatting this thing.
"If the facts are on your side, pound on the facts. If the law is on your side, pound on the law. If neither is on your side, pound on the table."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
Re: Got hit by a virus/exploit of some sort
Reformatting is best, but a system restore to a time before you were infected is often an acceptable work around.
Re: Got hit by a virus/exploit of some sort
Did that. Knowing how some virus's work and my complete lack of care about the data on this laptop means I have no problem nuking it from orbit Shep style.Sriad wrote:Reformatting is best, but a system restore to a time before you were infected is often an acceptable work around.
"If the facts are on your side, pound on the facts. If the law is on your side, pound on the law. If neither is on your side, pound on the table."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
"The captain claimed our people violated a 4,000 year old treaty forbidding us to develop hyperspace technology. Extermination of our planet was the consequence. The subject did not survive interrogation."
-
Civil War Man
- NERRRRRDS!!!
- Posts: 3790
- Joined: 2005-01-28 03:54am
Re: Got hit by a virus/exploit of some sort
Before you do that, try running TDSSKiller. It's specifically designed to get rid of any rootkits that may have found its way in.
For more extreme cases, there is also Combofix.
Some infections can be pretty hard to crack. But if you are just getting redirection as opposed to, say, having your EXE associations in the registry changed, system restores or system rebuilds are not necessary.
For more extreme cases, there is also Combofix.
Some infections can be pretty hard to crack. But if you are just getting redirection as opposed to, say, having your EXE associations in the registry changed, system restores or system rebuilds are not necessary.