[Bglug] O.T. Windows Malware removal Tip

[LP]

PS Clone machine is only for cloning never online.



On 20 July 2016 at 20:56, LP <linuxpusher2 at gmail.com> wrote:

> Time consuming pita Windows is.
> 1.) Boot n Nuke dodshort before each install, 2 hours.
> 2.) Fresh Windows install 1st and 2nd time Trojan re-appeared.
>      Third time switch out Router, = all clean ??
> 3.) Clonezilla PC after clean install.
> 4.) Clone pc again after updates
> 5.) Clone pc final time after install Complete, remove all other clones.
>
> 6.) Re-flash Routers as per peacock thread.
> 30-30-30 does Not work will not turn off lights, so start with cord out
> pin in 30sec then 30-30-30.
> I sure have some strange problems at my House.
>
>
>
>
>
>
> On 17 July 2016 at 17:01, Bob Jonkman <bjonkman at sobac.com> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> As a Linux user, I thought you might have booted the computer from a
>> live Linux image, then used GNU/Linux tools to scan and clean the
>> Windows drive. I've done that successfully...
>>
>> But in general, when the malware goes so deep into the OS as you
>> describe, the best solution is to save the documents to an external
>> drive, wipe the computer drive, re-install Windows, then restore the
>> documents.  And hope the malware isn't carried back to the computer in
>> those restored documents!
>>
>> - --Bob.
>>
>>
>> On 2016-07-17 10:22 AM, LP wrote:
>> > Hi all, My Wife's PC was acting different, first clue. Windows will
>> > not update even after running MS fix it software for updates
>> > issues, second clue. Her VPN keeps being turned off so I locked it
>> > with Kill, Third clue. Ran Hit Man Pro found some tracking cookies,
>> > was unable to remove even though Hit man said it was gone. PC set
>> > to refuse cookies and or delete History "Never Remember" also ran
>> > adwcleaner, JRT, & Malware Bytes, tracking cookies keep re
>> > appearing. So I ran this Tutorial:
>> > http://www.wintips.org/malware-removal-guide/ Still cannot update
>> > Windows & Hit Man keeps finding the Same tracking cookies. So... I
>> > decided to download spybot search and destroy, BUT I could not
>> > open safer-networking.org. I ran whois  safer-networking.org =
>> > https://www.virustotal.com/en/ip-address/69.172.201.153/information/
>> >
>> >
>> I also found many pages stating that Spybot S&D Server at 69.172.201.153
>> is
>> > pushing drive by Malware of just about everything you can name, and
>> > that is why Avira would not allow me to connect. It all started
>> > after my Daughter installed a very popular kids game "ROBLOX" not
>> > sure if there is a connection. LP
>> >
>> >
>> >
>> > _______________________________________________ Group mailing list
>> > Group at bglug.ca http://bglug.ca/mailman/listinfo/group_bglug.ca
>> >
>>
>> - --
>>
>>
>> - --
>> Bob Jonkman <bjonkman at sobac.com>          Phone: +1-519-635-9413
>> SOBAC Microcomputer Services             http://sobac.com/sobac/
>> Software   ---   Office & Business Automation   ---   Consulting
>> GnuPG Fngrprnt:04F7 742B 8F54 C40A E115 26C2 B912 89B0 D2CC E5EA
>>
>>
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v2
>> Comment: Ensure confidentiality, authenticity, non-repudiability
>>
>> iEYEARECAAYFAleL8hMACgkQuRKJsNLM5erIsgCgxloemSNIAnr4xBvHmIhQ69/G
>> 64EAoMXPBz/IchqSBWbwpdnPVPJBo15J
>> =BV43
>> -----END PGP SIGNATURE-----
>>
>> _______________________________________________
>> Group mailing list
>> Group at bglug.ca
>> http://bglug.ca/mailman/listinfo/group_bglug.ca
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bglug.ca/pipermail/group_bglug.ca/attachments/20160720/ffda9c16/attachment-0002.html>