Text 58397, 61 rader
Skriven 2009-11-23 08:09:00 av WAYNE CHIRNSIDE (1:123/140)
     Kommentar till en text av ALAN ZISMAN
Ärende: Re: Wormy users ?
=========================
-=> ALAN ZISMAN wrote to AUGUST ABOLINS <=-


 AZ> Today, I've had a dozen emails back and forth from a long-time Windows
 AZ> users who considers himself a reasonably competent computer user... his
 AZ> computer had become infected with a 'scareware' faux antivirus program
 AZ> that was demanding that he 'buy' the program to get it to stop nagging
 AZ> him... it had made System Restore stop working so that he couldn't use
 AZ> it to restore to a date prior to the infestation.

 AZ> Apparently, whatever antivirus program he had been running was of no
 AZ> help in preventing this infestation.

 AZ> He says he doesn't want to leave Windows behind because he wants to
 AZ> continue to run his (Windows) CD cover-creation software and Microsoft
 AZ> Publisher. I, however, wonder how much aggravation people are willing
 AZ> to put up with.

 AZ> (Note that it's NOT about cost- if it was about the money, people would
 AZ> be switching to Linux in droves, and they aren't).

 I got hit with that one on a dual boot Windows - Linux box however 
it was my own fault.

I hit a web site offering free virus scanning and hit OK.

Thereafter every time I loaded Netscape it went right back to that web site.

I've forgotten the name but they were indicted for their little scam.

I had to zero out the Windows drive to get rid of that malware.

I even got semi-hit by something similar on this Linux only box.

Watched a video online after clicking OK and a binary file ended up in
the /tmp directory and executed on every reboot causing the machine to 
fail to finish loading Linux with the prompt, To repair files 
enter user root password.

Well I'm not THAT stupid so I cautiously went about things until 
it occured to me to hit CNTRL - C whereup it exited that program
and proceeded to finish loading properly.

Then proceeding to /tmp and removed all suspicious looking files.
That cleared it up quite nicely.  

Normally Linux ext3 journeled file system self repairs in the case of
a inproper termination such as power outage in a matter of a couple of 
seconds upon the restoration of power.

The prompt to enter root pasword was a dead givaway.

No idea what it might have done had I entered the root password, could
have had a keyboard logger and given up my online banking, could 
have bricked the computer or heck knows what all.



... No matter where you go, there you are.
--- MultiMail/Linux v0.49
 * Origin: Doc's Place BBS Fido Since 1991 docsplace.tzo.com (1:123/140)