Batwing~SPARTA~ Posted September 20, 2011 Share Posted September 20, 2011 Hi all, Sharing knowledge here, hoping to save some headache to some unfortunate users. Got this virus yesterday (... my Mom told me to not surf porn....). It is quite nasty and annoying, althogh does not provide Critical damages. Major issue is when it is able to fully install, it will HIDE all of your programs folder and links and will let you think you have an Hard drive crash. I have to admit his GUI is really well done and fooled me into a real Win 7 error report. When I cliked something in good faith, I doomed myself. Here is how to get rid of it, read it carefully Before attempt anything. I ve been able to restore my system 98%, I lost all of my Start menu. Is not a major issue in Win 7 because i really never used the start Menu (all the folders with your installed programs, mine are empty now), but I am a bit pissed... http://www.bleepingcomputer.com/virus-removal/ Pay special attention to get the Unhide.exe tool. I hope you will not get it, but due to the fact this crap is embedded on Webpages, you might get it at any time, better be preparred. Link to comment Share on other sites More sharing options...
NoScream~SPARTA~ Posted September 20, 2011 Share Posted September 20, 2011 Good to hear you sorted it. You didn't mention what the virus was called or what anti virus software you were using that let it happen? Link to comment Share on other sites More sharing options...
PANiC Posted September 20, 2011 Share Posted September 20, 2011 ^ it's a variant of those fake security apps Link to comment Share on other sites More sharing options...
Batwing~SPARTA~ Posted September 20, 2011 Author Share Posted September 20, 2011 The virus name is DATA RECOVERY which as Panic said is one of those rogue security apps. It simulate a major crash on your system asking you to buy the full version, which basically, if you buy it it simply unistall and restore the damage (hiding stuff) the fake app creates. I was using Panda Cloud at the moment of the accident and now I replaced it with Avast 6. However, the issue is this Scam is not fully a Virus, it is a Scam because it perfectly simulate a legit Win 7 alert window, then when you click the Scan botton, it just activate the routine screwing your PC. So by the fact, is not fully a Virus... It counts on your authorization to start the shit. If you are ready and you get the weird behavior, you can just kill the Process before it even does any damage and just remove it for good with malwarebytes. I was distracted and i felt in the trap Link to comment Share on other sites More sharing options...
NoScream~SPARTA~ Posted September 20, 2011 Share Posted September 20, 2011 Easily done while surfing Maj3stics recommended sites I've used ESET for 4 years now and it gets 100% approval from me, not one intrusion or virus. http://www.eset.co.uk/ Smart security 5 I buy 5 licence pack over 3 year term working out at £12 / machine (gone upto £15 now) compared to £40 default price. The thing is you buy as a group (you, friends, family etc) and works out one of the cheapest 100% products. Their track record. http://www.eset.com/us/home/whyeset/compare/ Link to comment Share on other sites More sharing options...
PANiC Posted September 21, 2011 Share Posted September 21, 2011 i was using the eset 5 release candidate for the past few months, it worked great and ive used NOD for many years, however 2 days before the licence expired and i was about to give them my credit card details the Av was hanging while loading and completely bocked my internet access in firefox and IE! the uninstaller would not work except in safe mode. kinda put me off :/ i might swap over to kaspersky to test for a while. Link to comment Share on other sites More sharing options...
Recommended Posts