Need some advice on back door..

12 years ago

My son did it again.. went to a game site & picked up several virus..Of all things he got the back door virus. Will formatting
the computer get rid of it.. it is in his flash drives too. can they just be formatted? He scanned them & 1 came out clean..can it be trusted?
Can it be taken to a shop & cleaned if he can't do it by a format.
I THINK MWB got the others out I HOPE. The computer is just over a year old so hate to have to trash it.
I have a feeling it is gonna have to be trashed...sure hope not.
He had a waring from chrome that the site had been checked & was clean..I know what I would have done but he didn't..I wonder if avast warned him & he ignored it. He trusts Avast..I'm not really sure what warning he got...He is pretty upset so didn't question him to much as it is there..now he needs to get out of this mess without being a total loss.. it is turned off now as he has another computer but this is the best. THANKS for any help.
Dar

I forgot to add.. the computer is a HP compact Presario with Windows 8..which we had upgraded to. If U need to have more info I'll have to ask him.. He is in VA & I am in AL.

This post was edited by sugar_fl on Tue, Sep 3, 13 at 2:05

Sort by:Oldest

Comments (12)

emma
12 years ago
last modified: 11 years ago
Reformatting will put the computer in the state it was in when you bought it. So that should take care of the problem as long as you don't use an infected back up..... external HD, CD or flash drive.
sugar_fl
Original Author
12 years ago
last modified: 11 years ago
This morning my son called MS. After a payment of $79 they did some scanning. They found Norman malware & Mariko 30. they said that is where the backdoor was. Every file connected to it was removed & they said the computers were clean. He did a MWB scan himself & it found nothing. Is there any free on line scanners we can check it with too? I'm having trouble trusting it.

He had a backdoor before & raven told him it was almost impossible to completely remove it.. we trashed a good computer as that is what several advised us to do.
BTW I haven't seen her in awhile.

UPDATE on OO. The last time I downloaded it they put the update in it..I think it is 4..I have had no problems since.
Related Discussions
Need Advice - Choosing Colors for Back and Front Doors
Q
Comments (10)
Without seeing your pictures, I'll respond to a couple questions. First - yes, it is perfectly okay to paint the inside and outside of doors different colors. All of my exterior doors other than the patio door (so side door (into kitchen), front door, and basement door (into a walk-out basement) are red on the outside, and white on the inside. I LOVE the red color - it goes great with our white siding and black shutters. But, it would be way, way, way too much inside. I think this is pretty normal. It really depends on what exterior color you chose, and what your interior decor looks like. (Also, if you do do the same color inside and out, TECHNICALLY you should not use the exterior paint for the interior. It off-gasses more "nasty" stuff than the interior paint, and supposedly is (ironically) not as durable for interior use as interior paint is... I guess it's more weather-resistant, but doesn't hold up as much to daily living. I'm sure some people have done it with no terrible effects, but that's the general rule.) Can't comment on color questions without seeing the pics, but regarding storm doors... I actually don't have storm doors, which is a departure from every other place I have lived. The house is new and so it is very well weatherized and so there is no need, from a weatherization standpoint, to have the storm door. (Although personally I would prefer to be able to open the main door and still have a screen or window between the outside and me.) Our doors look much, much better without storm doors. If you do put in storm doors out of necessity or personal preference, I'd go with something that kind of "disappears" - probably a door with a full window (no cross bar) and a frame which is either the color of your front door, or which matches the trim around the door, or at the very least is metal.
...See More
Need some helpful advice on a floorplan/ceiling height issue
Q
Comments (18)
Thanks for the new comments! As I mentioned before I am working on being able to post a much more detailed floorplan. Thanks for hanging in there with me! jejvtr- Thanks for your detailed observations! Some great thoughts. To answer your Qs: Existing fireplace is not appealing - it's old and ugly. Hard to see from floorplan, but the hood doesn't impinge on the masonry fireplace - it's actually in front of one of two existing pantry closets that flank the existing fireplace (this room was originally a tiny den). This wall gave us a lot of headaches - considered a wall of pantry closets surrounding a fireplace with the kitchen on other side of room, but this was a much less functional use of space and would also have been $$$$. I really appreciate the comments about issues involved in covering over the FP - will definitely ask ALL of those Qs. Range - A range is not my first choice - I prefer two full sized ovens, and not to have to bend down, but I'd consider, if it would really help matters (they do look great). Base cabinets - definitely want drawers for pots and pans - they are just not shown yet. Pantry - an extension of one of the existing ones. Re: adding a cabinet to the right of the sink - I can make that happen by reducing the size of that window. Only issue is that the pane size won't then match what is in the rest of the back of the house, but that doesn't bother me - it also gives a natural ending place for backsplash. No room for a wrap around hutch there, unfortunately. Thanks very much for taking the time to look at this with me! mjlb- Thank you -loved the drawing! I am especially excited about the idea of bringing down that corner cabinet to the counter - I think that would, indeed, give some balance to the run. I think you are also on to something as far as switching the position of the fridge - it's not that much farther away from the window sink and becomes easier to access for others. If I end up putting a primary sink in that island, it's like having two zones and remains very close. I like the concept of open shelves there, too. Verry interesting. To answer your other Qs: As mentioned, we can reduce that window and make room for a cabinet to the right of sink. I thought of a single post lamp fixture. Only Q is whether it would provide adequate light for the current 9' island. I have given some thought to the idea of two smaller islands, too. However, I'm also thinking of moving the sink to the middle of that island and making it a primary sink, in which case I'd need pullouts for trash, a dishwasher etc. But I would consider. Main entry near pantry is from the front of the house and the foyer/main hallway The room "below" the built in desk is the existing (already decorated) living room. Your point that the old part of the kitchen seems vacant is well taken. I felt that it was even worse when we tried to design a plan that was flipped the other way, though. Bigger is not always easier to design -unfortunately walls are not always able to go in the right places! I like your idea to try to break up the uninterrupted built in cabinets against the wall look. - a separate hutch, rounded edges, a desk designed to look like a desk, rather than a built in , etc. I think that with this comment you really got to the heart of one of the major things bothering me about the space. Thanks again for all your help! segbrown- Thanks for your suggestion! I especially like the idea of ending the island where the ceiling height changes. I will look into this. Maybe there is some creative way to incorporate the island with that in mind. I do think there is an issue with turning the island 90 degrees in that it can't be too long before impinging on the breakfast room space. Thanks so much!
...See More
I'm back! Need to make some final decisions. Expert Advice Needed!
Q
Comments (8)
All perimeter cabinets are simply white. My island will be stained oak. With the black top. However there will be an island table that is attached next to it that will have the white quartzite. I have pieces saved at the stone yard that are what I used in the kitchen so do not want to deviate. I originally wanted soapstone but not to be found here in my price range and when I found the quartzite, I could see my kitchen needed to be light countertops but I wanted the bulletproofness of the granite. Plus they didn't have enough quartzite for the whole kitchen. So I have a mix. Its all good. I would post photos but the computer isn't cooperating. Can you use the island top you are replacing for the wet bar? Or are you repurposing it elsewhere?
...See More
Got some new plants and need some advice (part 1)
Q
Comments (14)
The plant I worked on today is F retusa, a VERY close relative of F microcarpa, your plant. They like the same cultural conditions, share the same growth habits, and would be difficult to tell apart if not for your gensing fig's unique (to the genus) root structure. It might have been sold as a bonsai or a pre-bonsai at some point, but the owner had no knowledge of how to tend to it, so just allowed it to grow - hard to say. The tree I worked was a leftover from a workshop our club had. It was a tree no one wanted. I've had it about 10 years and have altered it significantly through chops (cutting most of the trunk off, then training a branch upward as a new leader). It was only last year that I decided to train it as 2 trees. Eventually, the larger tree on the right will hover over the smaller tree in a mother/daughter arrangement. I'll repot it next summer into it's first bonsai pot where I can start refining it. Like yours, it's a strong (genetically vigorous) tree, which is why I removed a lot of leaves and cut the remaining leaves in half to slow it down. Limiting its ability to make food by reducing foliage volume limits internode length (the distance between leaves) and leaf size, both of which are desirable for bonsai. Good luck with your repotting and the recovery. Let me know if there is anything you think I can help with. I've spent time in Montana, the Bridger Range, Gravelly Range, Big Timber, and the Shields River Bottom, and loved every minute of it. What a beautiful State. One of my clearest memories was being on the ground while bow hunting elk, and ending up within 5 ft of a 42" plus Shiras bull moose in full rut who was raking the fresh blowdown I was using for cover. That was a scary moment, but still a fond memory of time spent in the mountains & foothills of your lovely state, which also has a way of making you feel humble while traversing its mountainous parts. Sorry to have wandered so far from the OT. Al
...See More
zep516
12 years ago
last modified: 11 years ago
If there was a true Backdoor Trojan on the machine then

Your best and safest course of action is a reformat and reinstallation of the Windows operating system, and that is the course we strongly recommend.

Even if the machine shows clean with any malware scans.
sugar_fl
Original Author
12 years ago
last modified: 11 years ago
We have a heartbreaking problem. As I have put in here before my son has some mental problems one being bi-polar. When I read to him about needing to format he almost went to pieces. He has a bible site he has worked on for over 7 years. It is almost his whole life. When I told him he said he can't format as he would lose his site as the only backups he has is on the 2 infected flash drives & he can't do anything with out them He just can't lose it. I am not sure what he would do if he did lose it...it is what holds him together. I don't know what is going to happen if he does still have the virus which he probably does. I just pray that MS is right & they got it out..all scans have come up clean for him but I know it mite not really be clean.

Thanks for listening (reading) & please pray he doesn't lose his site.
Dar
emma
12 years ago
last modified: 11 years ago
He needs to back up his personal stuff on an external hard drive in case his PC crashes someday. I have only had one do that but if the stuff is as important as your say.......he needs a back up. I don't back up the whole PC just my personal stuff every 2 or 3 months. Any thing else can be reinstalled.
owbist
12 years ago
last modified: 11 years ago
Dar never ever trash a computer because of malware. Never.

Yes some can be hard to get rid of.

Have your son got to Esest and follow along to do an online scan which is totally free. Eset have been around for years and are totally reliable. The scan may well take over an hour to run.

I think I have mentioned this to you probably 3 years ago but what about you installing Teamviewer. This is a program where you can take control of his computer to do maintenance or repair work. Or you can just hook up and watch, making suggestions if needed. Once you have the program installed your son would go to the same link but click to join a session. This is password protected so after any session he can feel safe because nxt time the password will be different.

When using Teamviewer I also connect with the person on Skype so I can explain what I am doing or ask questions. This is assuming you both have a mic and camera or just a mic so you can talk to each other for free.

Edit: Teamviewer link fixed.

This post was edited by owbist on Wed, Sep 4, 13 at 15:29
sugar_fl
Original Author
12 years ago
last modified: 11 years ago
Emma,
He is faithful of backing things up..not just his site. He has 2 flashdrives which are fairly large. He does it almost every day if he adds something new. The only problem is they are infected.

Yes it is VERY important to him. His main friends (In person) are me & his social worker. He has a very good social worker. He depends on him a lot. He has a computer friend in Hong Gong. He has helped him with a project he is working on. He has very few friends. He is somewhat a loner. I don't even want to think about what would happen if he lost his computer with no backups.

Owist,
He did a scan last nite with Avast & it came out clean..I hope it is a true clean. MAYBE MS did get it. He is getting new flash drives today to backup on.
I clicked on that link U gave me & got a 404 so it must be down. He probably knows how to check a flash drive but I don't so how is it done?
I keep things backed up pretty good.The most important things to me are my bookmarks & phone book. I have a site off line that I pay a little for that I use for important picture .

Thanks for all the help & support.
Dar
corrine_mvp
12 years ago
last modified: 11 years ago
Hi, sugar_fl.

First and foremost, purchasing a new USB stick to back up his bible site is an excellent move. He should use it only for his site.

Second, you've been to LandzDown before. Instead of paying $79, you could have come to us for help.

Edit Note: Since he has Windows 8, see the link below regarding the difference between refresh & reset.

Here is a link that might be useful: How to restore, refresh, or reset your PC

This post was edited by corrine_mvp on Wed, Sep 4, 13 at 15:48
emma
12 years ago
last modified: 11 years ago
Corrine, I don't mean any disrespect, but I have visited your site and read some of the instructions and I find the them difficult to follow maybe others do also. I am very good on the computer but of course not near as knowledgeable as you and your people and still the instructions are not easy to follow.
sugar_fl
Original Author
12 years ago
last modified: 11 years ago
corrine_mvp

If it was me I would have done that but he always wants INSTANT help. When I told him what U said, he said...I know but I was scared. This really scared him.
He got 2 new flash drives this morning. Is a USB stick the same thing?
Every thing scans clean but I read some last nite & know that it can hide where it can't be found by scanning. All we can do is hope it is really gone.
I hope I never have to come see U @ Lanzdown :-) I will if need be.
Thanks,
Dar
sugar_fl
Original Author
12 years ago
last modified: 11 years ago
I did a quick MWB scan on mine..it found 14 things. I wanted to quarantine them but I couldn't.. I could save the log so I'll show that. I doubt it is anything to worry about but want to see what people there though. I started to just delete them but want to check first.
I don't go places to pick up a virus or if Wots isn't green.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.09.04.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660
Darlene :: DARLENE-HP [administrator]

9/4/2013 1:26:10 PM
MBAM-log-2013-09-04 (13-45-43).txt

Scan type: Quick scan
Scan options enabled: Memory : Startup : Registry : File System : Heuristics/Extra : Heuristics/Shuriken : PUP : PUM
Scan options disabled: P2P
Objects scanned: 224337
Time elapsed: 7 minute(s), 13 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 14
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\"68B81CCD-A80C-4060-8947-5AE69ED01199> (PUP.Optional.Iminent.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\"E6B969FB-6D33-48d2-9061-8BBD4899EB08> (PUP.Optional.Iminent.A) -> No action taken.
HKCR\CrossriderApp0021804.BHO (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0021804.BHO.1 (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0021804.Sandbox (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0021804.Sandbox.1 (PUP.Optional.CrossRider.A) -> No action taken.
HKCU\Software\Cr_Installer\21804 (PUP.Optional.CrossRider.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\"11111111-1111-1111-1111-110211181104> (PUP.Optional.CrossRider) -> No action taken.
HKCR\CLSID\"11111111-1111-1111-1111-110211181104> (PUP.Optional.CrossRider) -> No action taken.
HKCR\TypeLib\"44444444-4444-4444-4444-440244184404> (PUP.Optional.CrossRider) -> No action taken.
HKCR\Interface\"55555555-5555-5555-5555-550255185504> (PUP.Optional.CrossRider) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\"11111111-1111-1111-1111-110211181104> (PUP.Optional.CrossRider) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"11111111-1111-1111-1111-110211181104> (PUP.Optional.CrossRider) -> No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\"11111111-1111-1111-1111-110211181104> (PUP.Optional.CrossRider) -> No action taken.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\$RECYCLE.BIN\S-1-5-21-3550094467-2047514540-1433982367-1001\$RRSVYIO.exe (PUP.Optional.4Squared) -> No action taken.
C:\Program Files (x86)\Coupon Companion Plugin\Coupon Companion Plugin.dll (PUP.Optional.CrossRider) -> No action taken.

(end)
corrine_mvp
12 years ago
last modified: 11 years ago
Hi, Dar.

Yes, a USB stick is the same as a Flash or Thumb Drive (although a Thumb Drive is smaller capacity).

What MBAM detected is a PUP, Potentially Unwanted Program. The end of July, MBAM announced the addition of "non-malicious" PUPs to detection. (See here: http://blog.malwarebytes.org/news/2013/07/malwarebytes-adopts-aggressive-pup-policy/)

The PUP detected by MBAM is described here: http://malwaretips.com/blogs/pup-optional-crossrider-virus/

If you decide to remove it, you can rescan with MBAM and check the boxes for removal.

Since GW only allows one formatted URL, I'll add the latest MBAM blog post which explains how to change the setting to select all PUPs.

Here is a link that might be useful: Selecting all PUPs

Need some advice on back door..

Comments (12)

emma

sugar_fl
Original Author

Related Discussions

zep516

sugar_fl
Original Author

emma

owbist

sugar_fl
Original Author

corrine_mvp

emma

sugar_fl
Original Author

sugar_fl
Original Author

corrine_mvp

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

Need some advice on back door..

Comments (12)

emma

sugar_flOriginal Author

Related Discussions

zep516

sugar_flOriginal Author

emma

owbist

sugar_flOriginal Author

corrine_mvp

emma

sugar_flOriginal Author

sugar_flOriginal Author

corrine_mvp

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

sugar_fl
Original Author

sugar_fl
Original Author

sugar_fl
Original Author

sugar_fl
Original Author

sugar_fl
Original Author