Comments for How do I get rid of this infection that keeps coming back on my machine?

Comment from Carlos Coquet on 2010-10-15

2010-10-15T17:19:27Z

Without details about the so called infection and what it is doing, it's not possible to tell for sure but there is another scenario. The virus may be targeting the machine by IP address if they are exploiting a known Windows vulnerability. I have seen hackers even turn on a machine that is off via the Internet by knowing it's IP address. (Remote wakeup is sometimes permitted by default in CMOS Setup.)
In this case, unless the subscriber is paying for a static IP address, it is possible to get a new address by turning the cable or DSL modem off then back on. Success will vary by provider. Cox Communications, the cable modem must be off for well over a day before it will get another IP address. I've never actually measured it but it is a long time. Qwest assigns the location a new IP address if the modem goes off the air only for a few minutes. Other ISP's may have varying policies. Just check the modem/router's WAN IP address before and after by looking at the device via your browser.

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from lee on 2010-09-22

2010-09-22T13:51:42Z

i recently installed Microsoft Security Essentials and SUPERAntiSpyWare because i was having some concerns about email from a friend who isn't computer literate enough to stop getting trackers and viruses. i am continuing to receive COOKIE TRACKERS and even thought these programs are quarantining/removing them they pop right back...always the same names. could they be a part of the programs i am using? they are Adware, it seems,and someone suggested that they are a part of AOL? How do i PERMANENTLY remove them, or, is that even possible? I also use MALWAREBYTES, which, like you wrote above, did not find it! not all programs find everything!

Tracking cookies are common, and not evil. More here: Cookies are placed on your machine by websites, but often more websites than you realize. We'll review cookies and how third parties can use them.

25-Sep-2010

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Harold Rossi on 2010-09-22

2010-09-22T12:55:22Z

I have run across malware that infects the restore partition of some computers so when you think you are restoring, you reload windows with the infection to start with. The only way to get a clean install is to completely reformat the hard drive, all partitions.

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Ariel on 2010-09-21

2010-09-22T03:41:49Z

"A safer solution is never restore software from suspect backups. Always reinstall software from their original CDs, DVDs or re-download them. Then restore only your data from your backup. (After virus scanning that anyway.)"

When I download programs and install them I compress a copy of the program and keep it in a folder. We shouldn't use these files in this situation? Can Zipped files be compromised?

ZIP files can be compromized, but it's rare. Best is to keep those saved downloads off-line - perhaps burn them to a CD or external hard drive that you disconnect. That way you know they won't be infected.

25-Sep-2010

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Bob Stromberg on 2010-09-21

2010-09-21T23:24:06Z

I sometimes need to update a computer that needs many, many Windows Updates (or Microsoft Updates). So, I gingerly connect to the Internet and start the downloads. All this time, sometimes hours, until the updates are downloaded and installed, the computer is out-of-date. Using a well-protected computer, can I download the updates to a flash drive or external hard drive, and hand-carry them over to the out-of-date computer and then run do the updates, without connecting the computer to the Internet?

See http://msdn.microsoft.com/en-us/library/aa387290%28VS.85%29.aspx, which seems to be oriented to programmers providing this service. ("After you download the latest WsusScan.cab, the file can be provided to the AddScanPackageService method, and the WUA API can be used to search the offline computer for security updates. WUA validates that the WsusScan.cab is signed by a valid Microsoft certificate before running an offline scan."

How do ordinary resourceful careful users do this?

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Steve Waskow on 2010-09-21

2010-09-21T17:35:57Z

Leo, please stop propagating the old advice to refrain from opening attachments from "people you don't know." Nowadays, it doesn't matter if you know them or not...spammers and phishers have taken over millions of computers and many can access the associated contact lists and send out malware apparently "From" the infected computer "To" all contacts on the system.

One should open attachments only from folks you know when you are expecting them, or check BY PHONE OR IN PERSON before opening them, since if bad guys have taken over the sending email account, they can simply confirm the authenticity of the bogus attachment.

I agree it's no longer as simple as accepting "only" from people you know. You're right - attachments need to "make sense" in that they're expected and about something that makes sense in your normal conversations with the sender. If there's ANY doubt, check with them first - not using that email address.

By the way, it's rarely an infected computer, but rather a compromised email account where the scammers are out using the web interface to login and sent the spam/scam email.

21-Sep-2010

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from charlie on 2009-08-11

2009-08-11T22:59:46Z

The easiest way to get rid of a stubborn virus without paying, is download malwarebytes.org . I had the same problem. I kept running my spyware in safe mode, and disconnected my server. It kept coming back. I downloaded a free program. malwarebytes.org, and it took it right out.

While I agree that MalwareBytes is good, please don't get complacent and think it will get everything. Some are better than others, sure, but no anti-virus tool will get everything.

12-Aug-2009

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Jeremy on 2008-03-17

2008-03-18T05:44:47Z

How do i unsubscribe from this chat site thing called fling.com, I didn't realised it charged.

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Shell on 2008-01-05

2008-01-06T05:15:20Z

if its infecting ur cookies(spyware) just block ur cookies from sites or get a firewall.

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Mike on 2007-10-01

2007-10-02T02:55:48Z

I've had a similar problem getting rid of a virus after reformatting with a clean install. When you boot from the install CD you'll see two different options for formatting. One is identified as quick format, one as format. Use the reqular format instead of the quick format. I'm not sure what the difference is but it takes about four times as long to format and it does a more through job. This method has helped me get rid of some serious monters. Good luck.

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Greg on 2007-09-21

2007-09-22T05:48:05Z

I have a MySpace page & I am looking for an online job. I go everywhere. Get a Gmail account NOW! Gmail has a separate spam box for the crap. I am running about 6,000 spam emails a month. After 30 days they are deleted. I do not see them until I check them in case 1 email is put in by accident. I have had that happen only 1 time. When spam does come through, you dump it into spam so I see only about 3 a day. The more you dump the less you see. I also use Norton System Works. After I go to MySpace I run the 1 Button Check Up which cleans unwanted files. I run the Speed Disk often when ever the laptop slows down, at night when I go to bed, about every 2 - 3 days. I also run the virus scam 2 X a week or more. Norton also comes w/ Firewall but the Windows XP the Windows Service Pack 2 has to be turned off. They will not work together. Norton Systems Work is around $80.00 a year & seams to be well worth it. I got botnet attacked yesterday on MySpace & Tom, Pres. MySpace, put the whip to Fling.com, I did complain, & that did them in. My laptop is back to running fine now. I did blow everything out last night & this morning. Good job Tom! Thanks to Leo for telling me what a botnet is I would have not figured it out on my own. It is not your machine, these Aholes are ruthless. Gmail gives you 3Gig of storage & it is not on your machine. Spam does not count. Gmail.com is FREE. GOOD LUCK!

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Chris on 2007-09-20

2007-09-20T22:53:10Z

#1 Format and re-install
#2 Disconnect your internet from the source (router,ethernet, whatever)
#3 Install a trusted firewall or at least make sure windows firewall is enabled
#4 Install your virus scan (optional)
#5 Connect to the internet and update your virus scan definitions
#6 Run Windows Update several times to get all the updates (may require several restarts)
#7 Download Windows Defender off of the Microsoft website (also optional)
#8 You are now protected and anything else that happens form this point on is subject to the user.
If you have other people also using this machine, I highly recommend some Parental Control software that runs in the background and a Browser other than Internet Explorer (Firefox is a good one).

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from vincent on 2007-09-19

2007-09-19T10:47:05Z

Hi,

There is a procedure, developed by the nice folks at majorgeeks.com that, if followed to the letter, will get rid of almost anything infecting your system.
Maybe not everything, but it's sure worth a try, most certainly if you have hundreds of thousands of files and folders you do not wish to loose/reinstall.
Here it is:
http://forums.majorgeeks.com/showthread.php?t=35407

Give it a try. It has removed some nasty sh** from many of the pc's I receive for repairs!

Best,
Vincent

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Houssam Mousa on 2007-09-18

2007-09-19T05:55:15Z

Even using an Anti-Virus is not enough, I use three and sometimes four , I know you will tell me that an updated anti-virus is enough, but it's not, on my experience and many times, one Program find a virus or a Trojan that the other did not find, and the most problem is that the anti-virus delete or clear the infected file, but as soon as you re-boot the virus (or trojan) will come again, and you will have to start tweaking around the Reggistry and Booting files using utilitis, it's very annoying, not to mention that using a real-mode anti-virus will make your Rabbit computer seemed slower than a turtle , and using on-demand scanner is sometimes late, anyone can help??

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Mark on 2007-09-18

2007-09-19T04:28:20Z

Another obvious one, but I toss it out for the newbies. Even if you don't do risky things on your computer or your network, others who have access might. And just because they swear up and down that they don't go to THOSE sites or open risky email, its always a possibility. Even if they cover their tracks well (deleting histories and the cache and whatnot). One solution is to install parental control software for a time and see if the infections at least slow down. It's not a cure-all, and there are ways around it, but it might cause help you catch who's been naughty on your machine.

As Leo has said time and again, your comp must be secure at the terminal. Know who uses it and what they are using it for.

]]>

A comment on: How do I get rid of this infection that keeps coming back on my machine?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.